Analysis
- user interaction
yes - max time kernel
149s - max time network
144s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/11/2026, 17:12
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://app.sparxx.io
Resource
win10v2004-20260911-en
12 signatures
150 seconds
General
- Target http://app.sparxx.io
- Sample261102-vq5rcavycx
Score
3/10
Malware Config
Signatures
- System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3132 msedge.exe - Checks SCSI registry key(s) 3 TTPs 4 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000 msedge.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags msedge.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000 msedge.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{42CD8AAB-D9AE-497B-BD08-D5BACFB1BB56} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4792 msedge.exe 4792 msedge.exe - Suspicious behavior: LoadsDriver 4 IoCs
pid Process 652 Process not Found 652 Process not Found 652 Process not Found 652 Process not Found - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe - Suspicious use of WriteProcessMemory 39 IoCs
description pid Process procid_target PID 4104 wrote to memory of 1032 4104 msedge.exe 85 PID 4104 wrote to memory of 3740 4104 msedge.exe 86 PID 4104 wrote to memory of 3132 4104 msedge.exe 87 PID 4104 wrote to memory of 3740 4104 msedge.exe 86 PID 4104 wrote to memory of 3740 4104 msedge.exe 86 PID 4104 wrote to memory of 4460 4104 msedge.exe 88 PID 4104 wrote to memory of 4460 4104 msedge.exe 88 PID 4104 wrote to memory of 4872 4104 msedge.exe 89 PID 4104 wrote to memory of 4872 4104 msedge.exe 89 PID 4104 wrote to memory of 4872 4104 msedge.exe 89 PID 4104 wrote to memory of 2820 4104 msedge.exe 90 PID 4104 wrote to memory of 2820 4104 msedge.exe 90 PID 4104 wrote to memory of 2820 4104 msedge.exe 90 PID 4104 wrote to memory of 1636 4104 msedge.exe 91 PID 4104 wrote to memory of 1636 4104 msedge.exe 91 PID 4104 wrote to memory of 1636 4104 msedge.exe 91 PID 4104 wrote to memory of 4792 4104 msedge.exe 92 PID 4104 wrote to memory of 4792 4104 msedge.exe 92 PID 4104 wrote to memory of 4792 4104 msedge.exe 92 PID 4104 wrote to memory of 2224 4104 msedge.exe 97 PID 4104 wrote to memory of 2224 4104 msedge.exe 97 PID 4104 wrote to memory of 2224 4104 msedge.exe 97 PID 4104 wrote to memory of 2436 4104 msedge.exe 99 PID 4104 wrote to memory of 3924 4104 msedge.exe 98 PID 4104 wrote to memory of 2436 4104 msedge.exe 99 PID 4104 wrote to memory of 3924 4104 msedge.exe 98 PID 4104 wrote to memory of 4504 4104 msedge.exe 100 PID 4104 wrote to memory of 4504 4104 msedge.exe 100 PID 4104 wrote to memory of 4504 4104 msedge.exe 100 PID 4104 wrote to memory of 1864 4104 msedge.exe 104 PID 4104 wrote to memory of 4144 4104 msedge.exe 105 PID 4104 wrote to memory of 4144 4104 msedge.exe 105 PID 4104 wrote to memory of 4144 4104 msedge.exe 105 PID 4104 wrote to memory of 2416 4104 msedge.exe 115 PID 4104 wrote to memory of 4624 4104 msedge.exe 116 PID 4104 wrote to memory of 560 4104 msedge.exe 117 PID 4104 wrote to memory of 4152 4104 msedge.exe 119 PID 4104 wrote to memory of 4152 4104 msedge.exe 119 PID 4104 wrote to memory of 4792 4104 msedge.exe 120
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://app.sparxx.io1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4104 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffc8880c188,0x7ffc8880c194,0x7ffc8880c1a02⤵PID:1032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,7176349896251605806,12248606015155716970,262144 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:22⤵PID:3740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,6026980741592888536,1510126195898129459,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:32⤵
- System Time Discovery
PID:3132
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,15092856408468449082,7249680423551640639,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:82⤵PID:4460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,11530834566670069007,16053589381720169697,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:12⤵PID:4872
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,16232001879358183200,3772015470194195768,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:12⤵PID:2820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4144,i,16902495933843448666,764990052815910252,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:12⤵PID:1636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,15805148547644146439,132219506487372562,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:22⤵PID:4792
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5040,i,17773050329733513158,8492428999050678057,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:12⤵PID:2224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,15669515564761170469,12101024297862163763,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:82⤵PID:3924
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,9401819301357089947,5034686748913415746,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:82⤵PID:2436
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3144,i,10409033704268797302,8418103324717722166,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:12⤵PID:4504
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,1970846295917123440,11682682919362628813,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:82⤵PID:464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,1970846295917123440,11682682919362628813,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:82⤵PID:1864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6116,i,11426502668379821757,15322992792824531727,2097152 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:12⤵PID:4144
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,6279147601512314017,368945798086684292,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:82⤵PID:2416
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,8094182935858504375,532995022592812058,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:82⤵PID:4624
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,17836696658054626917,7875457472260197621,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:82⤵PID:560
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,15785920801104003325,16307524322716940604,524288 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=2704 /prefetch:82⤵PID:4152
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,8376048789533389470,14325015298680686007,262144 --field-trial-handle=2744,i,7522169130924319834,3992262219579726157,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4792
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:1792
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12633bc8-419a-47ec-8087-1737d9ef1b03.tmp
- Size 18KB
- SHA256 ce8399c0e550a18742f2c537a966269309209a14a2dd93b870cf65b057a9491b
- MD5 952061bfd0bd4724bafe475b8ba7c02b
- SHA1 68cf5839c30e2e0e353565cba294cd1bb3947d12
- SHA512 aa83773e7b4ab6020340f7613e3c3c287ce0af7de11103707ab70f5a57c0eab841cf0b17a88292b3ec55866046f5df9cb8e37547df4825640a3e063e62de83c9
- SSDEEP 384:nQkUSv0sN3Nw66kOJFOjTVpBd7Gex06JH7vBENXkIIl5:50T7YnVI6JH75ENXkLb
- TLSH T1C7826D31A8782D7B4EA3A101F04A3617AFB4D567D9D52B90E9DD9B1C01DB6EC230B826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3643ef69-7527-4201-b0ed-ecbf6d645b66.tmp
- Size 8KB
- SHA256 295056e3548c1741b6c7f014b44b1d9a51ca4f7b50c3e7ba5297a916de09d8ef
- MD5 0886fdab7ef00f6f5cf392cb2f13a7a4
- SHA1 1b6cdd9b0d6da9b43ee5924198c9b73a05951c19
- SHA512 0e3179facb35ce1a34951a5c8b4879867aac6c1b7a4612d57898d7b88d3480da773cce76a8a65415018dc7649ac39896c3add6947edd3e3bc33ff907eacde36f
- SSDEEP 192:SONP6ygpQmiUyy1tOCTVgCu+FdVFnR0KzP6M1gU6:SONP6lHZtOCTVpBd7GU6TU6
- TLSH T1E602C734AC783CBB8EB3AE46F48637179FE4116BD9912B94D9E81A1C019765C2346C26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9d5a4f7a-9458-4b6c-8708-22126efeaf84.tmp
- Size 18KB
- SHA256 bd48f902d0f7f816c8a89b5bc421b14dd62a3540cf6d630ac2e3fcda4af2ed2c
- MD5 c848fa9f3ae04a30cdd6bd0a3e6e8f3a
- SHA1 9f870a75c06dd622d6de81c686ba30453676a0c3
- SHA512 cc2a58adce8ce2a10f4aa4b744a6e735c8f4de7db5f9a6c42e7108cdf5b7c19cd31e8af81b0b77b9e38321b314d975caac45977109abaa2a876f59fd2140cc2f
- SSDEEP 384:jQkUSv0sN3Qw66kOJFOjTVpBd7Gex06JH7vBENXkIIl5:N027YnVI6JH75ENXkLb
- TLSH T158827E31A8782D7B4EB3A101F04A3617EFB4D167D9D52B90E9DD8B1C01DB6EC230B816
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
- MD5 71592819d06ab9dfd94505cef3db0b85
- SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
- SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
- TLSH T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
- MD5 8f79499bd1d234dc030ef99e2f850e0e
- SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
- SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
- TLSH T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a9f3282-85a7-4c38-a335-8592e5d70f3c.tmp
- Size 10KB
- SHA256 c88e329adcae5bf759debded24ba04b91ad06a67498eebf3fe611212e673fa3f
- MD5 b34fc6dee5ecb17842adea8555d63537
- SHA1 e7f467ce9b1546f5a5a667e9b15bc3af4aba72cb
- SHA512 46c5cc19dd29732dbb70b3f40909d7d39bcc43e356d0a79aacb5cf8a7b7781f367d9d7e32b7ea00b34621ba9a32806d6557fa2accc50d78bc4d620ea80287847
- SSDEEP 192:sxZrSR2Wj/fwsPKIdpplSHW6+WNzqBXYRPgbeAIg56J:sxZrSHj/fwsPDuHbwXm2I
- TLSH T1FE22D8526E28697B9CC7D21DBA15BF53E6F9543291D01E48AAFC8A1C09E7ACD220740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\282ce8d7-b7a5-45b0-a511-b8be1932bfc6.tmp
- Size 10KB
- SHA256 7ff3283f03888913d1af92b648c92b5305d3d2b6500461628c87d5ba440138d6
- MD5 d45e2e109ddc7034b7a11b8515debe55
- SHA1 fc4bfadca499db360aa4ea8b0d7147153ca0e16c
- SHA512 a54409f126ce60fdf33d788b73b02bb24d8deea005d79b23caabdef41948bac7cbc367eae5a9a3be01b95f8dea40f859e9c8c0b7a35bde7be64dbea12106268c
- SSDEEP 192:sxZrSR2Wj/fwsPKIdpvlSHW6+WNzqBXYRPXMeAIg56J:sxZrSHj/fwsPDIHbwXmSI
- TLSH T12622D9516E28697B9CC7D20DBA15BF53E6F9543291D41E48AAFCCA1C05E7ACD230740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c1f76b3-71cd-497e-8c8c-3a190d2dd7d9.tmp
- Size 10KB
- SHA256 04ba436d9a8964b96034dfb5ad32451d5bbc21ea11fa706ce376247bb5c03604
- MD5 9b9f150be4a15961e45cd265d25eb692
- SHA1 96b521eb554e218ecd7cacff194e744a0c54c347
- SHA512 1289c14ef84ed204e659f8c87a67eac32ac9d878f7afc2475a16ae667997bb9cf808ff9729dd64075ca4728c1060b05370658b2b4ec09f4af2cad1fc5dbe7dd0
- SSDEEP 192:sxZrSR2Wj/fwsJKIdpvlSHW6+WNzqBXYRPzEeAIg5YJ:sxZrSHj/fwsJDIHbwXmW6
- TLSH T1C722E9526E38A97B8CC7D21DBA15BF53E6F9443291D41E58AAFC861C09E7ACD230740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7f69775a-f8d3-4a1d-98d8-fcca051df8ae.tmp
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\899c2928-65a2-4855-9a97-d6133b21acd3.tmp
- Size 9KB
- SHA256 01b34f251a592b42662a3d877f61689ce675e94791e75573b32873788f500dce
- MD5 1a4f6f9978783ff28420b9bcaa3f7253
- SHA1 1ba281c4fe54569f9ea7801589bdf13a05a8dadc
- SHA512 0ac48a38af6fda5b511976617d76195eaffdb29fb6716e26a0a10b6e96137fe9c13bcb67a3cffbe48edd4cd9e1106a1f4dcdc1d121e3ad9fd3e723881c63174f
- SSDEEP 192:sxZrSR2Wj/fws+KIdpvlSHW6+WNzvg/YRP2EeAIgrJ:sxZrSHj/fws+DIHbE/mH9
- TLSH T1C722D9516E38A97B8CC7D21DBA25BF53E6F9443291D41E48AAFC861C09E7ACD230740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 2KB
- SHA256 7581bb0339b33228eb4989d867e1d4f4527c198d104270c1cb3c7e117597708b
- MD5 c0e37a9f7e801df00d0865083df77110
- SHA1 ef62f62e5f8600807bb209f628df520b0f0ff007
- SHA512 d74156cf07b5acbf2195dee0a666fd1db2e80ecf1cbb8a7ff05ca3c54124abaef344b60a798291485541cfb7bb882720f3a04a3144bbd282924bb9aaf8b4f689
- TLSH T1F651B348E851B5B0F7F8D07386D920EBBB374780BD435E0E29A6D8BE858731562A3178
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 2KB
- SHA256 d11ff5f57470f629684730f759a5e545ed363bb46b32d78f6be449d0092faead
- MD5 d889dc8dbffc89b9b5aa060796b94b3b
- SHA1 844ef67d962a40cfbcacd7dcd545a84ddc764561
- SHA512 497b4e7b554be5870f17b2b0308767bb50668205bd4747a1b9bd28c7714277d695a82f5a55dfbf139d1e66513dc4b733f102835ed88de10c7527934b787de475
- TLSH T125518248E851B1B0F7F8D07386D521EBBB374780BD435E1E28B6D8BE888771561A3078
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b0bae1b0-c7d9-491e-b012-4df5e2a64806.tmp
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4d09218d-bfe1-47a9-9e8b-f89aa16eda13.tmp
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\769158a1-bbd8-40ce-9024-582d68c62277.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd8ec106-d4fc-493c-815d-24b2240d3956.tmp
- Size 4KB
- SHA256 a3688a0ecce61aae57a5b9041fd3f1016aa69160603082d4f17aa11445243d0c
- MD5 58e197af0fb43e90583e710995f07054
- SHA1 7750b7ea0e294a54a295152b3ab15ccd4ecfce53
- SHA512 58ed7684d53a2517628a9362d3af3a27610e65740461072211fdc530defe55675fa759cfdbe42a6a91e717dce0bf9d758aafb61eaeef943b14dcb548326e32b0
- SSDEEP 48:YALlNIOaZaEPaNaSPDSHa6TVsRzBMssv4rzs9K6svgzsXLC9tsNCKsRcTUsNANE+:DiOU9YjGbTGzBMEyKZtLqGWcT5ANA6wQ
- TLSH T1EC918EF3C3EA962DC92612F1AB14AD2BCE5D092443183D7AC9D4AE4B63E2171D34076F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 5KB
- SHA256 c3767e01b8c24b1372d681e56dbc47013d23db8e34eaa68e5c82b9d293b4f0bc
- MD5 b9776a3ab6fe13b582310732c4a21ce4
- SHA1 fdb48c8a5e10e67060fc8fe20f14f6d7fc0fd835
- SHA512 56a659f98fbbc6771a95f163e4a3a20678527712d109858143b68301b41ff4ebc095a7d7f5a59185cdf9f51b8fe5d367b331c249131f0dffdff689a5756375db
- SSDEEP 96:K0m2J2KKcK68AKNi2O9uKmU+PMPRPoP8P2PaP+PkOPaPDPPIPEPkKAPBIPePk0P2:qNHbZ1kNIUi+6H+TQswBoaX0Uzi05g
- TLSH T11BC1018171AB124039BE354951B9971A528235B3351CFA7BFFBD40B24EABE040DFE8D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\FileSystem\t\Paths\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2bd4f29-a580-4c24-9190-f7a77ff07b7f.tmp
- Size 27KB
- SHA256 1e0f8e96cf736f4743cc725ba95d222bc29dd87c3bca5fadb96f011a0aed009f
- MD5 3380969e64a8a67e56829020d1dcb0c1
- SHA1 e7eb0796caca2b6be6b84df9e33815699c481294
- SHA512 b647aa22541a24a43b54192bba1f1ca7889aaa85226b2435ba590b230295cd577fc1491a0dc1589d2c4b2b1209c4ea831ec66e110d0248575d5775582dca1873
- SSDEEP 768:J5K9uzYWvcQus8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3Gro5+PU:J5K9uzYWvcQusu1ja0HL7Q395+PU
- TLSH T1E0C20A3F640DCB7E4FC01A9DDC5A6F9B3E9802D7A6584D4047FA984C02C77EA52264DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0387906-43dd-42dd-b139-2fb234d9ee42.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
- Size 3KB
- SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
- MD5 904e6e94a1d46374c8630cfd86cc729f
- SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
- SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
- TLSH T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cf9c566a-52da-4bfd-9a8d-bb123fb991fb.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b620aebc-bddc-445d-8b85-b735e5956762.tmp
- Size 26KB
- SHA256 1fa8f8e55455358974c1397a353a19469286cc45635c849cdbcae6be18f7336e
- MD5 a776fbed8aa17f6f26ce6d08ebfc9c14
- SHA1 0de454c98571c9c31f98e16fc11d87f5df36dcb6
- SHA512 c7bdb21a67ec9ad6095c8e2d5c861e3ecdb975ef93b13abd87e0d026b400ad6d71027f06d06a68a028468a5f46d9f18720c78aaab1e5f47b8e3bf8bad6005c52
- SSDEEP 384:2iFzQkUSvvzsNJ8TUNTUlIlQw66kOhFOjTVpBd7Gexk6JH7vBENXkIIl5:dFdLwwgDrYnVQ6JH75ENXkLb
- TLSH T138C218F258D7593BD9AE5703E37E2D029EBCC063F8956690B789490CCC862BFD30A815
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ef4c80b9-ea55-4299-96e7-3d427cb08094.tmp
- Size 8KB
- SHA256 810474017d039ba56fc44201432636f5df2ce8163101472a054e82657d3e48cb
- MD5 4a92b2ad6a03c1315ee72f0b7ef9cd9b
- SHA1 55301f49bafa1c1409b660a7181bd39907363439
- SHA512 2b627ce0586422fcb9d2b7eb00af5e93b102c5fdcfb6bb1784c2d38e517177db5fd0cf92ac62a107dd0c0b1b22ec82656f490b6d2ea744e45563b87d4a731f5d
- SSDEEP 192:3ONS6ysQmiUy713OCTVgCu+FdVFnR0eiGnN3U6aqxU6:3ONS6vu3OCTVpBd7Gexe6JU6
- TLSH T1B0120A35A8786C7B5DE2A541F48736079FA48167DA857F90E5EC1F0C01EBABC234BC26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9deeae06-e3ce-41d1-9671-c7e24dac3c16.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 28ae9577c9f675e0c3a76e55bcd6007f7ffe115e5b8a8d482654dc7810aea603
- MD5 07cda379bec685935404d985acc20532
- SHA1 c6cd78bcc412838af8922088aa50d3f5429c15a5
- SHA512 00783f055f42ed6179d4a8e7760b7908c90a231c9c355652f507c34d1bc798fc92c00fee8b9ac6d76560d70c40a6ed8b650a66181c2eeb27f262ba6178051705
- TLSH T12E411A98B6FA1148B3736E5A9BF6A8AD847FBC732E06D45E10010E4F0A23A41C961737
- MD5 SHA1 SHA512 TLSH