1e3d1574fb05ecc6d798303d0e3909f37a1e3440faa1d7575a9c7b31465a3aa6

Analysis

max time kernel
148s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyApplication/build/reports/configuration-cache/45y3ggaa8goqeans9ceg873jb/czng20ekbvh22j6j0kbd9kfu7/.html
Size 213KB
Sample261102-daqh2sss2p
SHA256 1e3d1574fb05ecc6d798303d0e3909f37a1e3440faa1d7575a9c7b31465a3aa6
MD5 db6c07fda31aa425d824f700752e3a2f
SHA1 5978627362b5d8f1feb8a94a064b41885933ebb9
SHA512 7ebefe73d9bbf8a564c7f56d9499305c4f12ef853bb6077aa9175ea9daa11c82f186eef275d895edd706f1ec03fad454f4d7ac96de32c54bb8d8e606bc2a6393
SSDEEP 1536:NzpnlZkXtaiYEBk4hVO4+W1DaeThXqCLJDHZUuksvRuCUY:kikDO4+w5TllLJDHyuksvRJL
TLSH
T13D24638A63D6B199228EE461846F2587B1BA01CE84AC8058F725DFCD7FD531C4273EBD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
620	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{58BDF86C-6160-4E9A-A2EC-267243BC004F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5472	msedge.exe
5472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe
2428	msedge.exe

Suspicious use of WriteProcessMemory 26 IoCs

description	pid	Process	procid_target
PID 2428 wrote to memory of 3760	2428	msedge.exe	84
PID 2428 wrote to memory of 620	2428	msedge.exe	85
PID 2428 wrote to memory of 692	2428	msedge.exe	86
PID 2428 wrote to memory of 5304	2428	msedge.exe	87
PID 2428 wrote to memory of 692	2428	msedge.exe	86
PID 2428 wrote to memory of 692	2428	msedge.exe	86
PID 2428 wrote to memory of 5304	2428	msedge.exe	87
PID 2428 wrote to memory of 5788	2428	msedge.exe	88
PID 2428 wrote to memory of 5820	2428	msedge.exe	89
PID 2428 wrote to memory of 5788	2428	msedge.exe	88
PID 2428 wrote to memory of 5788	2428	msedge.exe	88
PID 2428 wrote to memory of 5820	2428	msedge.exe	89
PID 2428 wrote to memory of 5820	2428	msedge.exe	89
PID 2428 wrote to memory of 3004	2428	msedge.exe	95
PID 2428 wrote to memory of 4460	2428	msedge.exe	96
PID 2428 wrote to memory of 3004	2428	msedge.exe	95
PID 2428 wrote to memory of 4460	2428	msedge.exe	96
PID 2428 wrote to memory of 5072	2428	msedge.exe	99
PID 2428 wrote to memory of 4544	2428	msedge.exe	110
PID 2428 wrote to memory of 3604	2428	msedge.exe	111
PID 2428 wrote to memory of 1500	2428	msedge.exe	112
PID 2428 wrote to memory of 5168	2428	msedge.exe	114
PID 2428 wrote to memory of 5168	2428	msedge.exe	114
PID 2428 wrote to memory of 5464	2428	msedge.exe	115
PID 2428 wrote to memory of 5464	2428	msedge.exe	115
PID 2428 wrote to memory of 5472	2428	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\MyApplication\build\reports\configuration-cache\45y3ggaa8goqeans9ceg873jb\czng20ekbvh22j6j0kbd9kfu7\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ffadd57c188,0x7ffadd57c194,0x7ffadd57c1a0
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,4551017802362605462,9342560753933185374,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - System Time Discovery
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,6150546281977292204,16970785624323867973,262144 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2368,i,3216789646469646716,1760189758626848512,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:8
  2⤵
  PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,7412959920970545785,479352746642686149,2097152 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,17274576757892715919,3939802854450497403,2097152 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,1257411280084170379,13326744935598070191,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,3167901416548372333,10339445848982902539,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,3327524230018947282,9617668713934730920,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5396,i,3327524230018947282,9617668713934730920,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6112,i,13008878878634516963,12761382177880070013,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,5055153059589686182,11983102718376666013,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,9937996217267411411,10423609150228930937,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5052,i,5658277031251587604,6727885149049094967,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,1419562259961936986,12074031499704336473,524288 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4968,i,13574954667005795639,7209877347928953046,262144 --field-trial-handle=2280,i,6224385534224335381,12356425293010946470,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5472

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6104

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3864

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

56c9ddd2-8398-4e3f-928a-120f160d7e92.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56c9ddd2-8398-4e3f-928a-120f160d7e92.tmp
Size 26KB
SHA256 b71a7cd365d839e7a62933790e949947f6c7b2872384913c40867939d523e76e
MD5 975590939f9bdf0203014811e43f89d2
SHA1 afeef7136b6f16abb906380b62f226dd6e296e5d
SHA512 21dce1ebd03591facab11ca9a022da262c8ce51db693ddcf2e72eb454b92a9a6cbf7093c0572d9608d769e5f034c844ec422af5ddc97c0bbde46872f03752ac3
SSDEEP 384:n/iFiZcI63sNR8TUNTUlIm25mgXBNK2fLBgaw4QRsinusa+VYrgL/7Izaom:KFQ63kwgS+lBbw4mruhgXh
TLSH
T121C25B36E894DABBEDEB8BD5BB4A7607DEF04153859C9AC4D9D85D0C00CB19D070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8534ee85-02ce-48e3-8577-26b70d310e6e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8534ee85-02ce-48e3-8577-26b70d310e6e.tmp
Size 26KB
SHA256 c548d7dcb7708033c16a04a5060f5c39a1e14b9242a421dd3228390b31f127ec
MD5 f14987ae796af942978b70d07a5325d6
SHA1 9421513ef53233b117440b6d08d743da06f1d5a1
SHA512 f3767e4085c5bf0aa9a568e723b5aa6dc8f338e242fd0aa0078c3b2ef690e51b050d4ee87642adad2464ee72af8aae7c23af232ac4c788d5099c78629f28079c
SSDEEP 384:nFiFzQkUSvV3sNF8TUNTUlI4C5mgBSAK2fLBgaw4QRsiquH7vBEVfgL/7IzEIIla:MFdV3Uwgs/kBbw4m+uH75E2L4
TLSH
T171C24B36E898DEBBEDE78A95E30A3A43EEE04153C59C5AD4D9C95D1C00CB1DE134BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

95571ffd-4731-4abd-8db1-06d373149416.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\95571ffd-4731-4abd-8db1-06d373149416.tmp
Size 25KB
SHA256 46a62adcc8163d545c4c87d4b72ceac72be014d12ba4285eabfeb13f1fd63daa
MD5 64e385437f346e3ee6c9a0a192effedb
SHA1 148adb2d28e95042402b0ba99295ca8d200d917f
SHA512 5c20e19f30d4dcc62d100c0d734771ea2ad9139871f4a4d2d0c33e85c4121098c671a1844a9191e988ec87afebeb448147bdb91f2d899b4cdf4229554dbcb3dc
SSDEEP 384:n7iFiZcI63sNO8TUNTUlIm25mg5jnK2fLBgaw4QRPCsa+VYrgL/7Izaom:WFQ63XwgSI3Bbw4mPChgXh
TLSH
T1AAC24C36EC98DABBEDEB8FD5AB4A7A07DEF00163849C59C4DAD95D0C008719D1707C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

448fbc8c-ca86-438c-a608-e638508bdaa7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\448fbc8c-ca86-438c-a608-e638508bdaa7.tmp
Size 11KB
SHA256 6e1869559b632b7cc8d2271e15fb64ee6d6936813ee002d2254fea4462d0f7cd
MD5 e482ec7b83821ae4524632759a968e56
SHA1 fa10cdb12cbf8e5158b7db5074b78a6a1a19cb37
SHA512 3d662f10aa66f0a9903065950b48d926af0b04d5b58f3941a7b1751b67b7793aadd2edbc50cc972e80013b1a6b1f45c685de82c862375d7dbb49845d45ed5085
SSDEEP 192:sxZ4RJk1/fas5QZZq6zodpH6HW6+WNGYbItyDYI+YIg5D0J:sxZ4Q1/fas5OZqBaHbGFyYIzh4
TLSH
T11E42B615AE28A97BACC7D21DFA55BF53D7FD1032A0941E48A6FC9A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

463e750a-5323-43f2-a994-39277de8ed1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\463e750a-5323-43f2-a994-39277de8ed1d.tmp
Size 11KB
SHA256 e524c524775980c5c800c0bd169f815cb767d5d9ca588e5f3a2e779068f18243
MD5 1050171c10c91a04a55360bc7a101cd9
SHA1 7cb4892dd59a386d82f6f977bfbc6fcd38191ae9
SHA512 b7e60065a88a59431c95918a3a044036c8e4667ed459090ba164bd1f9e1641b4bfe2cd8cfa85200463ad0be03075bc651d3c23f860bc51c119f5ae68691d27a6
SSDEEP 192:sxZ4RJk1/fas1QZZq6zodpH6HW6+WNGYbImyDYI+YIg5D0J:sxZ4Q1/fas1OZqBaHbGFTYIzh4
TLSH
T16142B615AE28A97BACC7D21DFA55BF53D7FD103290941E48A6FC9A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

96d7cff5-82f6-4c8d-9bab-29867c8947b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\96d7cff5-82f6-4c8d-9bab-29867c8947b0.tmp
Size 414B
SHA256 2e93f1f839354ba5d8e86f3babf6019877ffe9419708129a29fbde12a64cd572
MD5 9705eb218258c21150821bfb7f7fa232
SHA1 f5ba01453cd671d41c96202dba84ab6b748dc763
SHA512 c01f64cab074410f3011e9341812650c3d759364e995edba427c832f43e9fe72da68d01bec51a389ba61f56b5781e056f12486a618c4b77d654a02a089dc8821
TLSH
T149E02BF5CE1ABC3719FC176950541745EB41035B2A80988B373CD11D8FB5A37528686C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 ddddb439860be8fb1c69fbd20e970681f6b9d045c6caa9071eb5d109954a4645
MD5 1d4fadddd7851498eaeb9fe8f3215a7e
SHA1 3f4af19598071358e576b93b86800d022d656fad
SHA512 3065f80ccd649d4b0b839d7b5a758aef215d3ac8551487e1ddecfb27ff96cd113cafea607dbb2482f4421dc0f1de6e8303ef41a09a2af31360f73cf05b35b56b
TLSH
T173E07DA506C8CB2EB308A84701EDC34CC290366FE3C06D8E5F4CC8C87002080B2DE7B0
MD5 SHA1 SHA512 TLSH

Submit Download

3a35b903-3d3a-4331-be1c-db3af22b10ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3a35b903-3d3a-4331-be1c-db3af22b10ba.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

09da72ac-c47c-4f88-9cff-dd3a4ac8a7d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\09da72ac-c47c-4f88-9cff-dd3a4ac8a7d1.tmp
Size 2KB
SHA256 04c7cb8b7dce570657aebdfd0eaae8ab9943fc1c345bd3c1136330e7dbe6672c
MD5 e29a011329e0445d2bb674bab2026671
SHA1 fe3f29b3f55bd9bb7a79b61b0aa68c6ec61c79d8
SHA512 20ff61c6cd3653917298691bba63bbccd49ca67e0ee35fbc3866a30433b52c0504a6350376abdc106e8452af5590262e1722f87ce4a4fca584ff840c59716ec3
TLSH
T16A41A0F783E4866E890156F0AB28AE2BCE1D0516432C7D9A88F4AF5B93F2471D14169F
MD5 SHA1 SHA512 TLSH

Submit Download

507fcf00-4a90-40b0-9fa7-6c4b0116e438.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\507fcf00-4a90-40b0-9fa7-6c4b0116e438.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

8972dbb1-3643-4e2a-a82e-8919379ad4ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8972dbb1-3643-4e2a-a82e-8919379ad4ed.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c28e65dc1a4116ed6941b099c2754148363da1684f852f6f2d5012819d1290de
MD5 25bb6514770e864748a1a1941afa7c93
SHA1 d568ed6915fd6c1e1982fe940c11d7286898c901
SHA512 2347961470554cdd724f54f354d45b4af08fe53ff21be5d16eefb6f5e82b8aa653876696f54ce042b69089d064985a2411b2c9257d6e8baf0e02de4067353ea4
SSDEEP 192:sxZ4RJk1/fas/QZZq6zodpH6HW6+WNGYbItyDYI+YIgj0J:sxZ4Q1/fas/OZqBaHbGFyYIzj4
TLSH
T19742B715AE28A97B9CC7D21DFA55BF53D7FD103290941E48A6FC9A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 9277ec9070f2622d8ef493585d2c6c49e5bf0efd165315b0c3137f635c71b30d
MD5 ef2a2540d4617c00b71bce8e8ebfa7b4
SHA1 27e82937dd2f21fb7d484cf095781b5776638bd5
SHA512 cf2f8ffdae64790e66bd221945a621e01046a701b0c95c02ac9fa29b60a49f625d8bc418ebdd255ead00b82a0b2c734b91d98a881f20669ac41d9444f095287f
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXO13g:OtfFvpopPxrB4RhfOVg
TLSH
T1CFB2431571BA021138FE390881B6972F064232B33159E63B7FBD04A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

dd5c64bf-217b-48e7-a51e-69788671fd8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd5c64bf-217b-48e7-a51e-69788671fd8a.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

a44af39f-e591-40c2-b45c-d2a26f23d39b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a44af39f-e591-40c2-b45c-d2a26f23d39b.tmp
Size 26KB
SHA256 fd77151180277802a1112f11616e6e1fa56ab936cdf8bfd49bc78d89b0955925
MD5 12f6563c6c27b26f188a01674f4dbd4c
SHA1 0672194f9cc1c6eed4956d09e0647c57c3415089
SHA512 f09fd58a55fc2e22051d44f2dcebc75f5cbc01400a9ff18d967ae4a9f39534ee42931f9b0e583c3bc1f654e44869701b9af59df7d52b026af6a85bed0d3e24e8
SSDEEP 384:nAiFzQkUSvV3sNF8TUNTUlI4C5mgZSAK2fLBgaw4QRsiquH7vBEVfgL/7IzEIIla:bFdV3UwgsbkBbw4m+uH75E2L4
TLSH
T172C24B36E898DEBBADE78B95E30A3A43EEE04153C59C5AD4D9C95D1C00CB1DE130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dd4f4514-08a4-41dd-acd7-f387e3783f26.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dd4f4514-08a4-41dd-acd7-f387e3783f26.tmp
Size 27KB
SHA256 1f2faded36f3682b77206c8dedcd4bbb2a9bdf178ff54d05bf09094f818d28c1
MD5 834140af190b67b37ba61124ebb59be2
SHA1 c3eddb9e1a9c55214ffddb705b0bda45ec06c441
SHA512 927a2318c60adab2e698cf1036c79bb11925d06211fefec958b3dc52fd7505b367e99004310e7a2a269050276f8f56f159cb61ccae6aa721512e6ef0edfec38a
SSDEEP 384:nNiFzQkUSv+Q3sNF8TUNTUlI4C5mgBSAK2fLBgaw4QRsi5uH7vBEVfgL/7IzEII4:EFdL3Uwgs/kBbw4mduH75E2L4
TLSH
T11CC24A36E899DEBBEDE78A95B30A3A43EEE04153C59C5AC4D9C95D1C00CB19E134BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7c814d2b243440dbe9b135739c71ffdd3f406f6629ab2aa6b5e979ffd34f79c1
MD5 1e6ae21ff398aad6996b1f1c7e1f178d
SHA1 1e98ef7ab556ebb91916286d6849eff29da30581
SHA512 d67ee67e1fa27a672afffa155ceb6a67bca4a72ab406bf45143285c37860efa8eda3d312d8697ecb307b12ac9a262ecc07ddd966a089f1dc92a5fd7dc8f694be
TLSH
T134414858B6EE111CB3B76F5AABF3A8AD547BB9372E0A905D00110D0F0A23B41D971B33
MD5 SHA1 SHA512 TLSH

Submit Download