c8e9d6e04bab4c835a09d3e25088473e0b73ba42376c2d482de8d3c7bb145ff6

Analysis

max time kernel
148s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
React-02/files/Input.html
Size 569B
Sample261102-tkglwsxw2n
SHA256 c8e9d6e04bab4c835a09d3e25088473e0b73ba42376c2d482de8d3c7bb145ff6
MD5 3b2611fdc434a3f8cebed6e821aa109c
SHA1 9f2737e1474a9624df112790f50955b07b8c9c03
SHA512 26a4f59bd54ddd2b540f4324abc4fcb41c9988e32a6099a0902469de4568984acc40a0a9640a5a454a3fbd23dfa71ce9af07a5ef15efa02d3effc63d6e2f1e98
TLSH
T19CF0FC155DE484A84071189537F2E95AEA6BE64B5689DCAD30E484532FF22CC4C07CB4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1768	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{3BD4F594-BE48-45BA-A0AA-DE3A577AC407}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe
4348	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4348 wrote to memory of 5060	4348	msedge.exe	84
PID 4348 wrote to memory of 1768	4348	msedge.exe	85
PID 4348 wrote to memory of 3952	4348	msedge.exe	86
PID 4348 wrote to memory of 3964	4348	msedge.exe	87
PID 4348 wrote to memory of 3952	4348	msedge.exe	86
PID 4348 wrote to memory of 3952	4348	msedge.exe	86
PID 4348 wrote to memory of 3964	4348	msedge.exe	87
PID 4348 wrote to memory of 3780	4348	msedge.exe	89
PID 4348 wrote to memory of 3780	4348	msedge.exe	89
PID 4348 wrote to memory of 3780	4348	msedge.exe	89
PID 4348 wrote to memory of 1968	4348	msedge.exe	90
PID 4348 wrote to memory of 1968	4348	msedge.exe	90
PID 4348 wrote to memory of 1968	4348	msedge.exe	90
PID 4348 wrote to memory of 1956	4348	msedge.exe	91
PID 4348 wrote to memory of 1956	4348	msedge.exe	91
PID 4348 wrote to memory of 1956	4348	msedge.exe	91
PID 4348 wrote to memory of 3176	4348	msedge.exe	92
PID 4348 wrote to memory of 3176	4348	msedge.exe	92
PID 4348 wrote to memory of 3176	4348	msedge.exe	92
PID 4348 wrote to memory of 1668	4348	msedge.exe	96
PID 4348 wrote to memory of 1728	4348	msedge.exe	97
PID 4348 wrote to memory of 1668	4348	msedge.exe	96
PID 4348 wrote to memory of 1728	4348	msedge.exe	97
PID 4348 wrote to memory of 4932	4348	msedge.exe	101
PID 4348 wrote to memory of 3980	4348	msedge.exe	108
PID 4348 wrote to memory of 1636	4348	msedge.exe	109
PID 4348 wrote to memory of 2960	4348	msedge.exe	110
PID 4348 wrote to memory of 4092	4348	msedge.exe	112
PID 4348 wrote to memory of 4092	4348	msedge.exe	112
PID 4348 wrote to memory of 1904	4348	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\React-02\files\Input.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x20c,0x248,0x7ff92f11c188,0x7ff92f11c194,0x7ff92f11c1a0
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,11705422627806264066,3361867258619255802,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,11002665691903640598,7756753923786584620,262144 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2360,i,5144704443057789700,2569039103992774762,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,6186900855129291724,759735362117721794,2097152 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,8586830568861688387,18130230135487775590,2097152 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,12835268838363016714,3453494099090667735,2097152 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,13383186556779543693,1213809906338349874,2097152 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,12629133916006420279,2703865245001006111,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,12761236820729865749,11841710287205311804,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16089729084116820850,1791335621276836178,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,16089729084116820850,1791335621276836178,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,276784774555917230,13131025319243792039,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,8486857236965901044,9411527247829923144,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,18283764310297182751,11433708080828553413,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1000,i,16987132512073766430,10560551923081728534,524288 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=4020 /prefetch:8
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,8232564002504314144,3234543949484667567,262144 --field-trial-handle=2324,i,9961868755701151074,9663140970732034407,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3184

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

23a64e34-faed-43f6-8cd1-a4ad9e3128a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23a64e34-faed-43f6-8cd1-a4ad9e3128a2.tmp
Size 8KB
SHA256 f1458534cdb78f96bcc05255914bed3e88bd60e4f7a5faba4add29a491f8a59b
MD5 ccc24c70dad1a82db3d6e1a638584e5a
SHA1 59234731a12ad35e57be1568c3f971db233e7522
SHA512 243dc1700244a533d59e185583d9219767a53eec8952f720366ddad9a52a21f0485733158883080a89541a064e64cc0d3ff8c26a6d0a5ae6bb6119ed15b538f8
SSDEEP 192:U+ONd6iDIHQmiUyv9Btq5u88P7gOTzKOuZUq8RU6:U+ONd6HpQtq5u8i7NGx+U6
TLSH
T11A122B3A78B87C2B7DE2A951B58736175EA5422BE7887F84C9EC561C01EF39C130B613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

266a2aa8-d55d-43fe-8597-89a1f86bb960.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\266a2aa8-d55d-43fe-8597-89a1f86bb960.tmp
Size 18KB
SHA256 17b8ebaf9432ea53f718f17e6f772382ab1ba085620b85cc8714cb4471b83888
MD5 3d2a54308f58c0f19e8bd6189df6371b
SHA1 37175793395e93768565b31ff46fef4836d95d5f
SHA512 087b27d7b89cc936206a97d12da5c841189e54b5da90f9dd229413cbaec067f3add21f3e5ecead14571205895a75e0de38461995b9f688734a423b59f1b99b35
SSDEEP 384:hwQkUSv0sNsbesyJ24p5u8i7NGY+H7vBErLIIlX:hY0TU2yk7f+H75EHLJ
TLSH
T13E826C7568B87C3B6DA39911F64B3A179EB4821BD7C82B94D9DD971C00DB2DC230B613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

706ed1ad-aac9-49c2-a524-051abfa0305e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\706ed1ad-aac9-49c2-a524-051abfa0305e.tmp
Size 18KB
SHA256 c3f41888c7381e41fca6846b2c4be384f6acb43a9162e96db26802d6407942ad
MD5 55bf552b4aae9063eaea4236892e0323
SHA1 1932fc8abcba7f4613c5a3493d3748de1614e8cf
SHA512 bd4746c87337dbb717d2b8488ec4643fe5444925cfd301ee346eca97bb83e0cf65d0a0b954bdec825f27091d497d5619d0985cb0f1af64bcbc1a2a18ec4499ed
SSDEEP 384:BwQkUSv0sNsKesyJ24p5u8i7NGY+H7vBErLIIlX:BY0aU2yk7f+H75EHLJ
TLSH
T134826C7568B87C3B6DA39911F54B3A179EB4821BD7C82B94D9DD971C00DB2DC230BA12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

43d5cca7-319d-45d8-afa7-0aefe312be19.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\43d5cca7-319d-45d8-afa7-0aefe312be19.tmp
Size 9KB
SHA256 edb7615ca447cbdf46c7136fd5506490e352895b9db13d22c1260565b1bf8f5c
MD5 d70bf16882abba623d382744f0edc7c7
SHA1 0d82d2e7cc6deb4431700f1dd690e7706f6987cd
SHA512 ba25992f9bc393685be60f78ba3a17beb0437c789ed194c6844c3ed33762ddf5f6177606d3772b157eca151aa7c7d0961d465fef59dd14335fc733f36df9e77b
SSDEEP 192:sxZWRTWt/fSsKcgIdpdHHW6+WNGYaJtoEIgrJ:sxZWwt/fSsKch5HbG59
TLSH
T10C22B6566E28B57B8CCBD20DBA25BF53D6F95032A1D01E48AAFCC61C05E6ACD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7642c255-72d3-4fa8-a66d-6e0fa740a952.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7642c255-72d3-4fa8-a66d-6e0fa740a952.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

97981152-fba8-4646-883c-bf7b80509726.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\97981152-fba8-4646-883c-bf7b80509726.tmp
Size 27KB
SHA256 366bbd5002df0dc50004a3807ebce3ee8de709cb55a06487692fcaea634933fc
MD5 83c756b527ed48f539def259105a71a4
SHA1 20f4e68e8ae8c90ebe4db8d09af511dbaad8d9cb
SHA512 4b7256cb9ee395209bcc0d4e5a87bf8566c4f2e399d4278f71207fd9603334a26949deb89f37667fe740c6e9d670401b2d41f6ec29c0b62a254d5595edbc5d6e
SSDEEP 768:oNyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3HrokZKb:oNyQRbrWvvlpZu1jaXKLf33UkZKb
TLSH
T169C2F92F640CCB7E5FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b6854ddc1955f924a08edd9b21ac6b687700d52269ed252de079e4e1a67e1806
MD5 8a9e928d86e53aa7cdb5747e0b6c8e51
SHA1 9475d484691bb41ec5d7ba90077194197714880e
SHA512 60195c196fff1305d72ed1df4e856b35b6d257608d79374ece1d99aff8e5b2dfb1561b2d781b33c1ba2ed559ead26f5eb25bc276d8a45d45549be0e279b8c62d
TLSH
T175618385F7D10050FB580E729DDD969B3339628F598B2E933064D4F9D886B552C27DCC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3044008470ff991feb05f586d3206c12c5da3e689ff27b20ebc4ef8fb5aa7625
MD5 b8022c55613acf7ab9c3df752cf86ea7
SHA1 147446783dea13b82a8f7c76ade7a9aaea2de41e
SHA512 796920c9b22f952649e4e67d96800fa792a3770fd60dd7344fbb8224a31adcb73b60722e1a800bb11fb7b707c1b07a7442294eadc5c07255a2dfe7c0e734f614
TLSH
T1EF619384F7C00050FB580E728DDE968B3339628F598B2E933068C4F8D8867552C27DCC
MD5 SHA1 SHA512 TLSH

Submit Download

0958e710-0760-470b-a63d-4d0e4ebbf44a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0958e710-0760-470b-a63d-4d0e4ebbf44a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

77d7f6c7-1403-4b9d-a932-8abfd3b81332.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\77d7f6c7-1403-4b9d-a932-8abfd3b81332.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b5e76aad-7586-4f2d-828e-86be271bc535.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b5e76aad-7586-4f2d-828e-86be271bc535.tmp
Size 733B
SHA256 88cfc01fb26e60e7f3cac8aaf3db8b3c5a850e6a782b0e6d811b312b1d41771e
MD5 45ae47ebb80a55895baf5fa60f036fa7
SHA1 11b0931920c273fa9ccdad38af06e40350cb0066
SHA512 6bf986567b79069e225c156e0f5ff3a8b73565ef5024cdb097a8610d86e6c2fece9752f57d846d0b5e5e7823b251355506ded0e4453789412c9844e57f35fa42
TLSH
T154016DB3C3D4956E890156F06614AF2BCE2D0902431C7C55C5D4AE2BD3E2465D00189F
MD5 SHA1 SHA512 TLSH

Submit Download

c9270e6d-54cc-45a7-bf79-182a5e860abe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c9270e6d-54cc-45a7-bf79-182a5e860abe.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 22d440ddb3c5edc41c7caf797beecd07c72d2f1d15339d1e06641560e766f00b
MD5 db08708e8b526941c86a8b1581ba419f
SHA1 240a30d86695487426661b67ad58592414a46e41
SHA512 3669de75444cedafd1ad2948959f299293ddaceb09ce229048fcbe45b2fba5736a859346796b23edf3e52758d4d1ce92f6f3be7d57d23c565b493374c0f99b86
SSDEEP 48:K0kTSeMOirbShaIS2rK9S1grxk7YpKiYyLs5sIsVspszs3sLskbs3sSsPISsBskt:K4DyKI4iuRiKKIN0AKVG+x
TLSH
T138919552716B1610397D298C417496AA068235F73425EF2FBFBC80E2DE6EE040DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad121fbe-41fa-493e-8748-a1a7a73e17ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ad121fbe-41fa-493e-8748-a1a7a73e17ec.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c6a49d0d-1fcd-49c2-8fce-12e7d3860692.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c6a49d0d-1fcd-49c2-8fce-12e7d3860692.tmp
Size 10KB
SHA256 7d87093b9232a9e846838cd56c70be506327b275979d781ed95db749fa9ab7b1
MD5 f2a0a14fb6a76a328f4b355a5c7fda78
SHA1 4a93b02184e2b672d6583253d9ded996b20dcd9d
SHA512 2e36136bca515bb2f0cd3cc8ae867c865c4e2ab9ba63feb7992b8f1220712774f8dbc2d7d09005fdf60f01785267627ba832be5e458d366cf29714fbcf35e81b
SSDEEP 192:sxZWRTWt/fSsccgIdpHHHW6+WNGYaB0oEIg5sJ:sxZWwt/fSscchnHbGmm
TLSH
T17922D7566E28A97B8CCBD20DBE65BF53E6F9503291901E48AAFCC61C05E6ACD134740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ebdf3d08-c550-4833-9700-d3ea0536b7aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ebdf3d08-c550-4833-9700-d3ea0536b7aa.tmp
Size 9KB
SHA256 0fef2a19380c437fe154f938e04d0562efed92bd3725f6357f84e92fbd57968c
MD5 ee6ea81f78f4c29d2fc3c3b27b29b01b
SHA1 e4f8c99f83227d4ad834790ef5812aa93220a638
SHA512 82714d39461655256faa34b82df7c161615320f0ccb1c4fbd7073b3fa81e366cd6a40182bc469a3ef1c068148aa5865c187473b7a57af125c5afc563372aa11e
SSDEEP 192:sxZWRTWt/fSsQcgIdpdHHW6+WNGYaJtoEIg5GJ:sxZWwt/fSsQch5HbG5s
TLSH
T12C22B6566E28B97B8CCBD20DBA65BF53D6F9503291901E48AAFC861C05E6ACD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f10ed352-9cdb-409c-aefc-a53f8a589ef0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f10ed352-9cdb-409c-aefc-a53f8a589ef0.tmp
Size 10KB
SHA256 b03f4bc37652b9153850e8380d9609fe922267d4807bcbaf9b4eadb1e7f1f037
MD5 fd8b7ff7c0086ce1ebe091c48c2e0675
SHA1 e0b47ab70e74f125308c7bec0638da4adfa7aa6b
SHA512 65bfdd1c8569a9997dae678d61ab418440adaec5f4a424d2ceca293903082594a61bcdeef9200fcee4b571c1c5d4a50c8627d68542bcacc706cae7f9f94c74d9
SSDEEP 192:sxZWRTWt/fSsccgIdpdHHW6+WNGYacPoEIg5sJ:sxZWwt/fSscch5HbGQm
TLSH
T11922D7566E28B97B8CCBD20DBB257F53E6F9503290911E48AAFCC61C05E7ACD234740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6974a02b-35d4-4e2c-a131-d403eb63b8c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\6974a02b-35d4-4e2c-a131-d403eb63b8c7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d98d5004-022f-4450-8830-d333b7e9bf74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d98d5004-022f-4450-8830-d333b7e9bf74.tmp
Size 8KB
SHA256 a069ca79b990ba8bc53b111154672c812fa9dca1daa55004b1a86112b0609859
MD5 0995f653dc6d822804fa6ebda246b549
SHA1 c462eeb66e72638ed0a7f7fc9a9341a4c9f216ce
SHA512 7602c47bc704e0aabadd1fdbb9a1a07b418f7e20ae061730f9f38fb0b037043c04383332cf05ac234561ba3dbd8be494970a998fd2d114c1fbfefcd530023134
SSDEEP 192:SONL6iDCQmiUyvjBHq5u88P7gOwSqDWeU6:SONL6/AHq5u8i7GFU6
TLSH
T10902E8396C783C7BAEE3AD05B58777179FA4112FE6942F84D9E81A1C01D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e3303a3f-ee05-4c6d-a3cb-ed6ef84d9785.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e3303a3f-ee05-4c6d-a3cb-ed6ef84d9785.tmp
Size 21KB
SHA256 c9d8b1602c6ee194310f6a05155414b41c30d0851d4b147e1bf86740646e8f53
MD5 61bf5b0df9880cda87d16ff98fb9d3d0
SHA1 f7ea19dc8b54d251bdcf7a801642c436ff9c87ad
SHA512 5583c774f6a7fbc74b3085853309063f23e30432d284a88f1c5f7d0b9db203cd456a1e5c80da7b4f1ea556520536074c78d3a9e3e0092a4a812f18fb66bad6fe
SSDEEP 384:5LiFzQkUSvBzsNk8TUNTUlIlbesyJ24p5u8i7NGx+H7vBErLIIlX:5mFdxFwgZU2yk7Y+H75EHLJ
TLSH
T1CCA27E7658A8AC3FAEF39E10F65A3617DEB08167C6C46B94DACDD61C00DB1DC134BA12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0c5ab6b1-170f-4ec2-969c-ec46ab8ebc44.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0c5ab6b1-170f-4ec2-969c-ec46ab8ebc44.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4adaeb3175d7d9a0d8570dde16a0200f1f9c81f4f8999613e602676ae8b2230e
MD5 7de94328af90f24cfeb33d65996dd2a1
SHA1 897b828d28d5ccd58225d79b16cc992c6780135c
SHA512 5df6c1837dce3673a39620bf9042f8b9f4b4f39d400afd6b71ccbb413105444e13ad07d3c219ebb9df26ebabb870584aecb3fd564b97b7c65894f2e89c3f19e0
TLSH
T13441F858A6E91148B3B36E5AABF6A46D487F79772F0B949D10010E4F0A63B40CC71733
MD5 SHA1 SHA512 TLSH

Submit Download