3ed1666619d060773133ff4b75e48906f5b9df0101f795490cd82f620855ac28

Analysis

max time kernel
149s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 02:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyApplication/app/build/reports/tests/testDebugUnitTest/iXS5DTVo7i8/index.html
Size 2KB
Sample261102-daqh2sss2p
SHA256 3ed1666619d060773133ff4b75e48906f5b9df0101f795490cd82f620855ac28
MD5 3b5e2f3b0b4d1ec356746611d786e771
SHA1 da5d86bcd4bcce94cf686fd1e1ebd175a4ac7eb1
SHA512 c1aedb9c99e2b4719066e0622755e0960191fd5a390348362e1b34251e919272976cee260ca9a51a1189260b2fd06d31c28ddb2bf9b72d4561386cc7ccf12db2
TLSH
T16A51BA7745E2FC7B49B391F8D060AB4DF0D3D241E74398A0A1EB5B4B9B82C019AE7602
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2440	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{EBD6DBBE-726E-46B7-BC1D-06DDEFAF0CC7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3728	msedge.exe
3728	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe
5040	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5040 wrote to memory of 4868	5040	msedge.exe	84
PID 5040 wrote to memory of 2440	5040	msedge.exe	85
PID 5040 wrote to memory of 5028	5040	msedge.exe	86
PID 5040 wrote to memory of 5028	5040	msedge.exe	86
PID 5040 wrote to memory of 5028	5040	msedge.exe	86
PID 5040 wrote to memory of 1644	5040	msedge.exe	88
PID 5040 wrote to memory of 1644	5040	msedge.exe	88
PID 5040 wrote to memory of 5004	5040	msedge.exe	89
PID 5040 wrote to memory of 5004	5040	msedge.exe	89
PID 5040 wrote to memory of 2364	5040	msedge.exe	90
PID 5040 wrote to memory of 5004	5040	msedge.exe	89
PID 5040 wrote to memory of 2364	5040	msedge.exe	90
PID 5040 wrote to memory of 2364	5040	msedge.exe	90
PID 5040 wrote to memory of 3608	5040	msedge.exe	91
PID 5040 wrote to memory of 1060	5040	msedge.exe	92
PID 5040 wrote to memory of 3608	5040	msedge.exe	91
PID 5040 wrote to memory of 3608	5040	msedge.exe	91
PID 5040 wrote to memory of 1060	5040	msedge.exe	92
PID 5040 wrote to memory of 1060	5040	msedge.exe	92
PID 5040 wrote to memory of 2848	5040	msedge.exe	98
PID 5040 wrote to memory of 3524	5040	msedge.exe	99
PID 5040 wrote to memory of 2848	5040	msedge.exe	98
PID 5040 wrote to memory of 3524	5040	msedge.exe	99
PID 5040 wrote to memory of 1896	5040	msedge.exe	101
PID 5040 wrote to memory of 4924	5040	msedge.exe	108
PID 5040 wrote to memory of 2556	5040	msedge.exe	109
PID 5040 wrote to memory of 3408	5040	msedge.exe	110
PID 5040 wrote to memory of 4140	5040	msedge.exe	112
PID 5040 wrote to memory of 4140	5040	msedge.exe	112
PID 5040 wrote to memory of 3728	5040	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\MyApplication\app\build\reports\tests\testDebugUnitTest\iXS5DTVo7i8\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ff87d24c188,0x7ff87d24c194,0x7ff87d24c1a0
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,9582835527446322595,11733535977806610644,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,2391098846630061370,8553148121980883903,262144 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,1979159231960138356,1616376886579376634,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,11109517550670297085,5114328186808366242,2097152 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,1365906043523968156,8333146468094997777,2097152 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4192,i,13663357643660076349,13377385332391235963,2097152 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,4158462299357897885,15140046160757723325,2097152 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3596,i,8732153929300016907,1136467861597901620,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4180,i,8907995929882299867,8470194159614370827,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17865517569198631497,2310885877066746346,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,17865517569198631497,2310885877066746346,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3584,i,11869829322313023509,4659302989940857688,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,1362604093104179084,10718387078538914103,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,1869147817007074744,5317657695699436803,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,9571184153247933857,8229430906014756107,524288 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6308,i,9071796149838788761,13514668548121095180,262144 --field-trial-handle=2236,i,16128738638547945403,1337107597495404637,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1872

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

04041911-4cfb-45ff-91b2-9a4ce84ee0fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04041911-4cfb-45ff-91b2-9a4ce84ee0fc.tmp
Size 18KB
SHA256 9620735acc9e77952b0a7d67c5159d2ce4fcaf18f66e7ebe82e1c317a0bd191b
MD5 ed35f64ff9445114b37d62b9ff1278a3
SHA1 2e06c2b14bde8b7ec71d6e3a87ca8e8755cc159c
SHA512 71a81319ffccd5ce19f8d6820320035cf7ce1419e7c61dca1c44123e6a1e98edcaa0896cef1c5952c6b1c38b8fe9d760ecd8134077e4e24c2afe6a09d0f1c69e
SSDEEP 384:dQkUSv0sNJUpFY157bZBGYX5Ecw78+iXx/RAH7vBEpj/IIl2:H054d7GYuZzax5AH75EpLLU
TLSH
T1A6826D32A875BD2B1EA3A555F14A3A03DFB4912BDBC81F50D5DD6B2C01CA6CC234BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

26c41eee-9a85-4aba-a26d-1f66606f488d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\26c41eee-9a85-4aba-a26d-1f66606f488d.tmp
Size 18KB
SHA256 450e5468022c7b80e5e6deb3993b01653cb23aa6dfd933424917c92f238ef3e3
MD5 cafd639abb0e93d97d5a24c9970d4fd9
SHA1 517195b376f534308e1c1b1ee83784bb4e2b49ac
SHA512 8b5ab9405a99b840a87305f54b7bd8fbbd400815d57f55281437a3f61f2e1d8f8e10b717d3b96ef222a7fe028960657324cec6e2fc3cb73ee031337d9c055d12
SSDEEP 384:8QkUSv0sNJUIFY157bZBGYX5Ecw78+iXx/RAH7vBEpj/IIl2:80m4d7GYuZzax5AH75EpLLU
TLSH
T1B1826D32A875BD2B1EA3A555F14A3A03DFB4912BDBC81B50D5DD6B2C01CA6CC234AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2c413594-a58c-47c0-b7be-8f6fbfa14dea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c413594-a58c-47c0-b7be-8f6fbfa14dea.tmp
Size 8KB
SHA256 828d3faa036c90bc4370febe963a790a3d410ef31632377f6eaa14df6cf93b7c
MD5 6714c7a0a8a8428bef70ec6b7119a715
SHA1 182b29494c5981481b186fa49e065fa739177f7f
SHA512 e26f587236a86ba9a357f340ec3648169325a89548a22d9c38ccffb3d4c5efbb0fa82f1b8bf46b19bd05c094f41c1926d5e2fb69cf1fab2d9a9d6d4b6408bcbc
SSDEEP 192:LJONJ6DphmqQmiUyoDq8wGYX59ezgHNCLjzorx1m7kk7WTU6:lONJ619bRwGYX5Ecw78U8U6
TLSH
T10302EA35B8787C7B4EF3AE45B44B27139FE8112BEA942F44D6E81A1D00C768C2306937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4d39a278-728a-413c-acc6-cdea89d27e54.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4d39a278-728a-413c-acc6-cdea89d27e54.tmp
Size 21KB
SHA256 ea27c128a4412ecb7b4e1dc732534a7a0209f479cbd1a24943a9cff32b1a7ebd
MD5 9ce46376a9e296a751fa21b1a29ccca6
SHA1 ed2ee2ea62b188751535fba1dccbb3f32360ea32
SHA512 f112c5ba9a18ee9c3d18e82e9531986d3149a30e32bd8b7d2a2df6e395cf9b60db8275cc24fd62603ce229d3f14331e6ef7e4ee6912ffb87ef1b5c56c1105ceb
SSDEEP 384:hiFzQkUSvBzsNq8TUNTUlIlpFY157bZBGYX5Ecw78+iXx/vAH7vBEpj/IIl2:IFdxPwgJ4d7GYuZzaxHAH75EpLLU
TLSH
T1DCA25D3398A4AD3F6EB39A55F14E3603DFB49167CA84AB50E6DD5A2C00CA1CC134BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

55284a42-99aa-4f57-9cc5-eff473552da8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55284a42-99aa-4f57-9cc5-eff473552da8.tmp
Size 8KB
SHA256 a4828affbce92018fc5c94bd9561008e8357693be8261e718f14a87f625674c4
MD5 2fce8c0a4523c1819ff5ab8436ea33f7
SHA1 f413255a852bff49b0fd7e30ee7b6244f53a723d
SHA512 e6cebd768d886a81897c91885dcc88df2381d10dcd7e04e2b54551e5938d822428b7a9a901ec600930975519ba58f6a8372bac97de74e58d329cded20a0521a3
SSDEEP 192:NONT6Dph3qQmiUy0DbwGYX59ezgHNCLjzorx1mBiXx/UkIIVq5fU6:NONT61w5bwGYX5Ecw78+iXx/1AU6
TLSH
T10C120B36A8B8BC6B1DD26595F04739139FA85127EB847F50D6EC2F1C01DF69C134A827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

04aadbca-a0e7-4780-a917-99cb99e13de8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04aadbca-a0e7-4780-a917-99cb99e13de8.tmp
Size 10KB
SHA256 bc37c0f777e47d3d69c428538a90707bf1309439a26ffa0d3378fa0bc7b4fe35
MD5 9af7fd411132d4cd6379a416c1bca5a0
SHA1 a7bcd8eb5697956335e83f31e1f4a6f5f7784fc0
SHA512 1d8c6b6f099de5ca706098d2a7bc2ffd28faa2a4699d8404ef26bcc590dfb07955883a1b05465c7861bd7ae3a0cf73acf45eb199845789ced5295b5efe03253f
SSDEEP 192:sxZwRJWb/fPs9vBIdpHQkHW6+WNGYgG/0xU+jIg5mJ:sxZwab/fPs9vqwkHbG6oA
TLSH
T1F022D7126E28A97B9CC7D20DBB15BF13E7F9503251911E48AAFC9B1C05E7ADE124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

077b4361-96c2-4fd5-9ffd-ae28d1f8c262.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\077b4361-96c2-4fd5-9ffd-ae28d1f8c262.tmp
Size 27KB
SHA256 33ed13d220f37f7e2eb6466eb00d09003f62e910838d2c2f85b01f57312602bd
MD5 9c0465543e53ffbb39e896b9297783eb
SHA1 7b7cc6ea57c67308a766f6ae228a899e96cfcc96
SHA512 f127f0917cde117218115dc068e979b437cc4b9f79d135319661e27203e6f04851ed7b404aaa502e46554a2ab0d4993fa246558c1f6e943ae8b9786828431bbf
SSDEEP 768:v8ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz8rofHN:v8ichfPWvPZplu1jan+LKgzn/N
TLSH
T1A7C2FA3B640CCB7E4FC01A5DDD1A6F9B7E9802C7AA588D4047FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0942bdf5-6883-49bc-baad-faffe8cbe622.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0942bdf5-6883-49bc-baad-faffe8cbe622.tmp
Size 10KB
SHA256 063da96a2d9a70dbc80403735b2a67d54f1da4984318e0e4605b17726a438aa4
MD5 144fb6b8c149b8ace7df2cc1d41981f5
SHA1 b0ad588bb63f908f2199a7b58ead0332d2cb7f97
SHA512 0042d797facaf8f60242fd9c980ab314d2aadee0f3a72552a5a9bb4852229abfe7efe2a893cf499fa87f74d6d1d45005a44ab035d95e1433a91280a1ebe27251
SSDEEP 192:sxZwRJWb/fPs9vBIdpdQkHW6+WNGYgn/0SU+jIg5mJ:sxZwab/fPs9vqKkHbGEoA
TLSH
T19422D7126E28A97B9CC7D20DBB15BF13E7F9503251911E48AAFC9B1C05E7ADD124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bef449b-9f35-420d-bd32-d029dc776fee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bef449b-9f35-420d-bd32-d029dc776fee.tmp
Size 9KB
SHA256 a8b585953c9ca65d25a7a0978d5721244ffd8bac6bab9f72f7c49781df2fe909
MD5 dd2cf58ecca0cefac3c9954af2589415
SHA1 d663972dd9a9fa81d85d0953decc48240168b302
SHA512 26390976c6aa0ba04c6567c9099f6f5a50bbe71adc0d7ec2a076f500a1a697cf71ac000d180ceca3923cbcd386cf50eab877d9cfaf8b5cd30cd2307c9cb0fdaf
SSDEEP 192:sxZwRJWb/fPs9FBIdpdQkHW6+WNGYgd06U+jIg5EJ:sxZwab/fPs9FqKkHbGwoC
TLSH
T11222B6126E28B97B9CC7D20DBB55BF13D6FD5032A1911E48AAFC961C04E7ADE124780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6c3900f5-27b8-4fb6-a2dd-3598c00115ca.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c3900f5-27b8-4fb6-a2dd-3598c00115ca.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ba90cbcef5df7b267d9a36c201273a560db2418de93ad059c13398120360becc
MD5 3dd84f70accb94fc52b207003ffbf6b2
SHA1 568f5e4ee57a4b172eb13488f3b8912cdc8c2254
SHA512 3fd010c4bf234a678ddb786cdb74406c370714d129df3bb22cfb33c7eeb21fd7eff4bcedd15ab666af4ca78b5b623228dc97b5843e7b9e15e9c8e7f178952bad
TLSH
T15B616F4B90814065DFB84C708AD4338F35FE5BB0498B3E12D7E6F87A5BB27B3410A0A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 38cc8e48319b33bccaddd7452f24e2bbe28638a68bb7a571bbadbe81aa5cf9d7
MD5 0e259e605d74f6a3757b0b3cd3f7da57
SHA1 de98da00980a9e47e97378cc131bff72ec23305e
SHA512 b49f4709a5ebc67b900ba5c5c4597eff0c318b5ad292ec1a08e2fcbd8ba67dfffdf916c36367a0c75118bf79e0bf96c91c4addbd42fdb5fb26c4cf54343ccb31
TLSH
T1CB615E4B94814065DFB84C708AD4338F35FE5BB0499B3E12D7E6F87A5BB27B3414A0A8
MD5 SHA1 SHA512 TLSH

Submit Download

01485fad-631b-4697-bf46-f67295f328b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\01485fad-631b-4697-bf46-f67295f328b3.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

d735640b-e59e-4236-a0ec-d90e5b9df3f8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d735640b-e59e-4236-a0ec-d90e5b9df3f8.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

e272afe7-601c-4ae6-a5f8-9e44d1c418d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e272afe7-601c-4ae6-a5f8-9e44d1c418d1.tmp
Size 949B
SHA256 9203a5b5d6e05118414f04e0eb91ee727cd9a4436160f21bd3508d02f2da21ff
MD5 64e7551d85ef64b62281b867139efce2
SHA1 852c8b33dccf5d784361ada68e9919b6d3a49d1f
SHA512 a0c088cfde886d2aabda57ccb0cbec9fef732c462f704aa9fa1510e0850b44838d41cb5ac5afa22c93e7d030f57b0f2831b4eb66f39272e86b0087f9a481be32
TLSH
T1F6117DF3C3D5856E8D0116F05A28AE2BCE2D0505432C7C1589D4EF2B93E3475E10255F
MD5 SHA1 SHA512 TLSH

Submit Download

e9d0b368-a7b0-4cff-ab6e-ec541d9621c4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e9d0b368-a7b0-4cff-ab6e-ec541d9621c4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0752ed6c0b0a3532d9f6ffb46168c5928f8ff0e1d050add5867b5365c0f147a7
MD5 db84f67ff065b7d7590ebd0083f1621b
SHA1 4095a64e8ff9c94bf28ee9c3da0b0143014d8b60
SHA512 79a383388507493135ac8f532564de01866aaff2da14899a8c61992a2db61eefbeb0705a88ea9931816b5a0e1ba4e596d2629228a42b28e8bd0721441bb96347
SSDEEP 48:K0s7amUW6jbKJSISejK961YjxczYxCagyLOpEIGM81bAHIISg1K9E1W1xulY/A4k:K4rCK8cuedWK+8NhKKC0SN
TLSH
T144915915717B060039BE394C81B99A6A5541B2B33515F93BBFBC84E34E2EE141CFE8DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7af8db4-fc81-44e4-ba17-8bc9d7ccba48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d7af8db4-fc81-44e4-ba17-8bc9d7ccba48.tmp
Size 9KB
SHA256 cd4bdb1ae860650bb1e8582fea15f89359a76b102c543b1024714967fda752f0
MD5 487e406be6066929b3c0d1bd04b94ff9
SHA1 e841a6e5f4e2bd0ed7ad1b44d8a83e04abf9ec74
SHA512 a0ca0685f47088760dd4bfad6f7b192d0c1ad1fb667bb87b39c2e43204087ce314bc36f2723cea70cc1be4d8ad9ad3efc25a7940a6fdc35029d12b197f013497
SSDEEP 192:sxZwRJWb/fPs8FBIdpdQkHW6+WNGYgd06U+jIgrJ:sxZwab/fPs8FqKkHbGwo9
TLSH
T1D422B6126E28B97B9CC7D20DBB15BF13D6F95032A1951E48EAFC961C04E7ADE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa248762-3d0c-47e7-8fd8-17c997f1ca12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa248762-3d0c-47e7-8fd8-17c997f1ca12.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

da9044b8-21f2-458b-825e-0618d1139487.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\da9044b8-21f2-458b-825e-0618d1139487.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad083d12-e00c-4dcd-88b1-f7ba2582c123.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ad083d12-e00c-4dcd-88b1-f7ba2582c123.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 687333751d254656f558f2fc687a4ed95130b0ef182dfeb574b54108a74a189e
MD5 6dd06042d75c6a5d4aab8622c4ab474e
SHA1 f75672a6ca9838d518722d1b39b965b117c802a8
SHA512 c98bea3b6ed482d9195b8362dd27bd6f6c830d29e94112039580a18989d8839d9a4d4da030fbd3d6ebfc4bac8c9c2ca0a758fdd0d3e500af6b99045c91baa220
TLSH
T145412A58B6F81148B3B76F9A9FF2B86D487EBD732E06859E10110E4E4A32B44C971737
MD5 SHA1 SHA512 TLSH

Submit Download