c4864b3e7ce3f1e378a50fb9ec01dca551af663f51e9ebd6b20940fcd29390ca

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
React-02/files/Operator_and_jsx.html
Size 581B
Sample261102-tkglwsxw2n
SHA256 c4864b3e7ce3f1e378a50fb9ec01dca551af663f51e9ebd6b20940fcd29390ca
MD5 d56e5bf7d04639fb5ea50342121e6c6d
SHA1 e5aaaecdd8fd34bd2c92e46a00857e70983c7f5b
SHA512 608c35d68b945724da49ada55e3ac86899c930dcf3fc19f1570af32f73558190662f189ae0ca0f1fb3de6d4e659cd8b3b28d52777d036ee0322f44d35a2d103b
TLSH
T1A2F04C255CD084A88031699167B2E995EA6BD64B9788DCFD30E454177FF22CC4C078F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3212	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{58E2BB96-1A3C-42CC-A026-ADD41F581CE7}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 4508	4300	msedge.exe	86
PID 4300 wrote to memory of 5024	4300	msedge.exe	87
PID 4300 wrote to memory of 3212	4300	msedge.exe	88
PID 4300 wrote to memory of 5024	4300	msedge.exe	87
PID 4300 wrote to memory of 5024	4300	msedge.exe	87
PID 4300 wrote to memory of 3680	4300	msedge.exe	89
PID 4300 wrote to memory of 3680	4300	msedge.exe	89
PID 4300 wrote to memory of 5064	4300	msedge.exe	91
PID 4300 wrote to memory of 3392	4300	msedge.exe	92
PID 4300 wrote to memory of 5064	4300	msedge.exe	91
PID 4300 wrote to memory of 5064	4300	msedge.exe	91
PID 4300 wrote to memory of 3392	4300	msedge.exe	92
PID 4300 wrote to memory of 3392	4300	msedge.exe	92
PID 4300 wrote to memory of 3524	4300	msedge.exe	93
PID 4300 wrote to memory of 3524	4300	msedge.exe	93
PID 4300 wrote to memory of 3524	4300	msedge.exe	93
PID 4300 wrote to memory of 4424	4300	msedge.exe	94
PID 4300 wrote to memory of 4424	4300	msedge.exe	94
PID 4300 wrote to memory of 4424	4300	msedge.exe	94
PID 4300 wrote to memory of 4012	4300	msedge.exe	98
PID 4300 wrote to memory of 3964	4300	msedge.exe	99
PID 4300 wrote to memory of 4012	4300	msedge.exe	98
PID 4300 wrote to memory of 3964	4300	msedge.exe	99
PID 4300 wrote to memory of 4948	4300	msedge.exe	101
PID 4300 wrote to memory of 4476	4300	msedge.exe	110
PID 4300 wrote to memory of 1984	4300	msedge.exe	111
PID 4300 wrote to memory of 4996	4300	msedge.exe	112
PID 4300 wrote to memory of 4304	4300	msedge.exe	114
PID 4300 wrote to memory of 4304	4300	msedge.exe	114
PID 4300 wrote to memory of 4332	4300	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\React-02\files\Operator_and_jsx.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7fff26ebc188,0x7fff26ebc194,0x7fff26ebc1a0
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,10207554784510120071,18171420931357094104,262144 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,11291689915783916479,8476883560100376894,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2560,i,4554687692153297494,4680531760433803589,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,12111187712355028660,6308509805269410976,2097152 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,10809382222426828644,3994791164426426039,2097152 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4200,i,4992875393527345709,3055310055694291602,2097152 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,11365883522894474684,10720483638697620298,2097152 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:2
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,4812740950644419688,11905200011184143855,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3424,i,7043232788155330930,3256434887521986713,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6965047583517254730,6060485463752460353,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,6965047583517254730,6060485463752460353,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,4097939050330753094,10712144261072277033,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,14023437808116961123,14945465362725015508,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,3101679186849562152,17382736846433355341,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,7160893717055066017,6307925563869857808,524288 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4436,i,8593492152362956384,4253118594708479366,262144 --field-trial-handle=2276,i,4728345661482409785,13131084666464158588,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15a07f9d-e01d-4a7a-949d-aef32c8368a0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15a07f9d-e01d-4a7a-949d-aef32c8368a0.tmp
Size 8KB
SHA256 827697e7f27fddbd4e2c66bfe80c55c3b38cbd9bc86a18e008bc53defa441fe1
MD5 162ee08edc107789d5283b2d2aabac82
SHA1 730f2462a02d592c85fbb44cdd77361257e47800
SHA512 33788f93ec49d6f28e7392843cc0ad890848e48c007012bcb8cbdeeb13666082c4a9c92242c71e3b862e72b3b4f09e20188ca67e5825c2fc6cae312132a5f786
SSDEEP 96:KqONkTQsjpfbUmjH5ih/cIPURHl8h4otop5DnaD6BKP4v+Y1xf//ojd6x/eYzRt3:BONb6JUm0QmiUyDcqso//p+8BCbOU6
TLSH
T1C902D738AC68BCBB8DF3AE45B4477B239FA4107B9A955F84DAD85E1C01D725C1343826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23f8e156-4bb8-4b2c-adc9-cc0bdabf4d61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\23f8e156-4bb8-4b2c-adc9-cc0bdabf4d61.tmp
Size 8KB
SHA256 3e474c4a0abce9b94cdf1dace6b7b1ce1887b24104b29118c7f3f3c64ddd6acd
MD5 f0c9d4d477169e81d6e8de84d974ca2e
SHA1 bb74137782d5e342a575c21c40a9e6b2c4322c0b
SHA512 6cc1d57ac3e19fa428e8f7c18cf3366473d2dec379abbcffad36d00a87bea079b6036e4c40328a480223560a902bb8d9543ea36bc23c46ff4cd3dde936cb6071
SSDEEP 192:5ON06JUzQmiUyD2UqVo//p+GqLUNxXqhU6:5ON06+lJJVo//p+GqSGU6
TLSH
T158120875A868EC3B5DE3A590F04336239E644167DB896F94DADC6B2C06DF2AC530BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6a0f5305-69f6-4d15-bd3d-6be3260124ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6a0f5305-69f6-4d15-bd3d-6be3260124ff.tmp
Size 18KB
SHA256 91ebb01f2bc6b35967696f092fba47a04b4cf997cde175f04db2a349d2f4b74f
MD5 6af0ef221e17ece5790d2d8d9b475dda
SHA1 06610ec531053af07ee2f57fb11d334dc6b84231
SHA512 ed701b22619b5820f3ef2c6df974a84153fae068f47ef6ae1cd799bdff542f2d10179ba232ea3591fb0dc95cf7459243fcbadc0a3fa698df60d3c1fe30af95a2
SSDEEP 384:vQkUSv0sNJKs3R5bPKTbTScnh//p+GqTGH7vBErkIIlX:x0kjxch/hEGH75EgLJ
TLSH
T129827D76ACA4AC3B4EB39550F0063A23DF749167DAD41F90DADD9B2C01CA2DD234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7f40dc16-7e9f-4240-80b9-a12ecd7b930f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f40dc16-7e9f-4240-80b9-a12ecd7b930f.tmp
Size 18KB
SHA256 6cf11f976c476b5d447d5d68b114e75a1373ec92959e2e89fcf84b6d5c0e29eb
MD5 645291d00380b363c5c35c3d27257f6e
SHA1 8dcadd335fc2b638d2c8faca3c750f841bbe66e2
SHA512 9368c2e317a7123f0b74fb9c08f228ea05cd38c00df4abeba3514a755c23640e676cfd6b5973e9174f8ae8f772f6ea60e11caf6bbb5011172e4e045d88ed9f17
SSDEEP 384:fQkUSv0sNJ/s3R5bPKTbTScnh//p+GqTGH7vBErkIIlX:h0Jjxch/hEGH75EgLJ
TLSH
T145827E76ACA4AC3B4EB39550F0063A13DF749167DAD41F90D9DDAB2C01CA2DD234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d7579dd6-0419-46ac-8a95-c1d0c3414134.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\d7579dd6-0419-46ac-8a95-c1d0c3414134.tmp
Size 105KB
SHA256 1d62e22dec5c299be491cb2f809a917a5b2650bcf6f26d1655b204a91c995427
MD5 a1423f7d471bb13fff5ecfcdaea6454c
SHA1 7ded49e29e2ee4ecada313702dc82cddf87e8600
SHA512 6e90c834830dc60cf4e69d47a842a672355eeac4f32e8a0122d66df5ce75da4ac71274dc3cb208dbb06f3cd4f506485158442b7832ede2cf24ef8c5b26c1705b
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7N:fwUQC5VwBIiElEd2K57P7N
TLSH
T119B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

0a9baada-b198-432f-b651-db3e262cab74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a9baada-b198-432f-b651-db3e262cab74.tmp
Size 10KB
SHA256 4ff556cc8896c19a924d992b57a0ea533fb2050f6b7f2168d7d98e5a8c181708
MD5 8c6a89345f6adb563076abf9cd07f12a
SHA1 727d17b0970f70c5cb9b473018bef7e83f65ba2a
SHA512 58570f6d305895e6f744ed24e6e8f9bde5c5217808e8b4c483be7a5946366c608abfe2d967e0b6824eb245c966ac189e338ba6c06c6db57bb8d2184e003a93ac
SSDEEP 192:sxZqRjWi/f3Ds8cIdpHHHW6+WNGY36xZEyIg5UJ:sxZqci/f3Ds8FnHbGXby
TLSH
T1F922C7566E38697B9CCBD20DBA25BF13E2F9503290911E48AAFCC61C05E76DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

36f4e3e4-90c4-4399-b820-fcb32955b293.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36f4e3e4-90c4-4399-b820-fcb32955b293.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5e116b1f-1539-45d6-899a-558a6f457101.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e116b1f-1539-45d6-899a-558a6f457101.tmp
Size 10KB
SHA256 85445324f4b513f980fb30cb8b4c4f7bd591cca55ef6b0e8008a96b48d47fa31
MD5 ae1bd2a1b21e8237201691a6d28edf1b
SHA1 66b329485a8da12a7f5fca858ed57b26052443a5
SHA512 d9e1e939bfb0292c77059414e4f6a4e2b860715e8fc16a3e07ce2ecee1e432d8a21cea42ac49a275c1417d35f05f179ffaecebd5cad040cc0c7d21f055fac756
SSDEEP 192:sxZqRjWi/f3DsIcIdpdHHW6+WNGY36W05yIg5+J:sxZqci/f3DsIFRHbGXcI
TLSH
T11D22B5566E38B97B8CCAD20DBA25BF53D2F9503291D11E48AAFCC61C05E66DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a5874fa-ba7f-4b34-ad3a-e066ef6a94bf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a5874fa-ba7f-4b34-ad3a-e066ef6a94bf.tmp
Size 27KB
SHA256 13cc006457c3e2132111aab9562a26b608f6278ba8a74e0160a44ed200c6f931
MD5 92d61d83c4f6cbb876b535160c6773be
SHA1 6ddc4df39c108c3982443ff110b3cc60fe836588
SHA512 7ab7755a1b0bbb00d2a016a0570fe74cfcca890e455558fe2c405ef386f3b1b44a014b2d3f432c4249ed9275c14eb7526abf3b33cad66e375a0123ef602c4a8a
SSDEEP 768:KYKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/troV2:KYKlm7QWvUYe0u1ja8/L/E/GV2
TLSH
T1F6C20B3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 76b76153ec4afe4bb9bea389a06a3d531393f4e100a36a6d2ebfabd084458070
MD5 b7d2db6770f5bde5d63cd4e2fe7f5aef
SHA1 81388d2b74b967d20cf1dbc06f4c4d5eebde6709
SHA512 fa3dd69b483622b392848d7c3946bf3e913ff36b33a3530f6d0858935d918cf494dfb44c8a24e2635bfd433af84adbcd770e40c172f0bd04c8124f271cb239cc
TLSH
T13551B6F0319341D4F7A54273A3E29597353099A050A70F6230FAF9BA5DC7704D8EB86B
MD5 SHA1 SHA512 TLSH

Submit Download

c8898d74-894d-4b9c-b487-2edbdf37d8db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c8898d74-894d-4b9c-b487-2edbdf37d8db.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2d862518-60ac-47ef-b581-3fde47a8322d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2d862518-60ac-47ef-b581-3fde47a8322d.tmp
Size 949B
SHA256 f73b4b62ebca361d658425c31ee295effe3c42055c8c197f51969fe565153d24
MD5 cdf3c26b61081fc2c085486a1f62cfbd
SHA1 77389217c56983cabbddfcbf134a1900ca876e89
SHA512 a29abe64ba76705808266f63f5e57776af77b34dd0bfa09f7d4f122a4685936138de2dd6ad8e36209f02ed67660b84847b063a0b8f4291cd97c973d83bf263fa
TLSH
T149117AF3C3D595AE890516F06A24EE2BCE2D0A06422C7C5999D4EF2BD7E3475E00299B
MD5 SHA1 SHA512 TLSH

Submit Download

4f7d6f70-a08f-46e8-b4b1-17892d4a3e93.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4f7d6f70-a08f-46e8-b4b1-17892d4a3e93.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

5896e3c9-9582-4e55-b680-b99ce0629fa3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5896e3c9-9582-4e55-b680-b99ce0629fa3.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3968bfd96e648822440a696a13fe14c3ae4f4f4bf9fef775a8d0787488e032da
MD5 d29ce05a77a68c1d20e1dcd3a9df84e1
SHA1 e45c0f22efcf87f2514efdf8e2f59ae68fae3390
SHA512 4c3fc9939d2baf021bfca9a47adc5d054be90da77081ba59067c9b3984cea3de7816a5ae9ab1e7f7b5a8fd91d10e92f414747f97dd5e7d85ca6a0ec8ee826b71
SSDEEP 48:K08i8t8w8c8i8A8g8xb888L8sIS808xK98418C8xx868hY8j808g8SyLgvmqwaO3:KMkQKxKqG3OKMM7DKKc8OCD
TLSH
T131918254317B161539BD39884376966A428130F27025F92B7BBD44E39E2AE054EFFAC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b64f3426-1c61-42bf-8069-8d8fd8cbaa51.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b64f3426-1c61-42bf-8069-8d8fd8cbaa51.tmp
Size 10KB
SHA256 0367cf57c12096f67c1ec1963a9fafe303812d919095282e9e26bb3070cffe97
MD5 1e2e81a6c6daf00046de9314a566ceff
SHA1 7375053ba46527c36949d8f67825ffe686921953
SHA512 56a1123b39d4d18f39095b345b947e90777648320114a7f578b537764fb9a196ead31f297e1799c6e7ebc7ac044c27671a0909acb818e29eb76b4c8e5bc6c6e8
SSDEEP 192:sxZqRjWi/f3Ds8cIdpdHHW6+WNGY361m5yIg5UJ:sxZqci/f3Ds8FRHbGX/y
TLSH
T15922C7556E38797B8CCBD20DBA25BF13E2F9503250911E48AAFCC61C05E66CD134780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b92bf6fa-ebb9-46c4-86d0-847520e108fc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b92bf6fa-ebb9-46c4-86d0-847520e108fc.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb0d567b-c26c-46f6-b025-ac7d54187644.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eb0d567b-c26c-46f6-b025-ac7d54187644.tmp
Size 9KB
SHA256 231f8a0ad98eac14835b7191bdfe07c6b2776f1a8fde875b8ee6f87b037107e0
MD5 484250ab86239fdef38a0edaaa722f37
SHA1 2024ac42d24fb21f8a79932b57bdc7def18a480e
SHA512 b2c5e0b7447dd04cae1d4f0cdb5b105d876b6f5b6546c3bc9ed7309c6c39cd6638f159428395d87589fda39c5ef34844edf9a4098c992c8f43374602a2990b7b
SSDEEP 192:sxZqRjWi/f3DsicIdpdHHW6+WNGY36W05yIgrJ:sxZqci/f3DsiFRHbGXc9
TLSH
T16622B6556E28B97B8CCBD20DBA25BF53D2F9503291D11E48AAFCC61C05E66DD234780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

329c7305-61c5-407c-901c-cf8ce9aa9435.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\329c7305-61c5-407c-901c-cf8ce9aa9435.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c7ab52c6-23ac-4afc-a5ae-c2cd4253f332.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c7ab52c6-23ac-4afc-a5ae-c2cd4253f332.tmp
Size 21KB
SHA256 c3f2b107df2c64c6340ee51bb4001f14cb01fb607bd92b4a45864b291d623079
MD5 6730cc73e85d32ca72b9d0550a7008e3
SHA1 788a95f863d333e68ba32efee2aa7d098982eaaf
SHA512 f8089a98c36ba37dff62022b6caef472cffbcb1a12e59131c268f35278bed94252ce2fadd4c8b6e00136569173b9078e68e90aed81712a8e8724752c9a074206
SSDEEP 384:hiFzQkUSvRzsNr8TUNTUlIlKs3R5bPKTbTScnh//p+Gq/GH7vBErkIIlX:IFdhWwg3jxch/hKGH75EgLJ
TLSH
T147A25B779894EC3B9EB39A40F50A3613DEB09167C9D59E90EACD9A2C01CB1DC234BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

008ef5d3-7ef8-41b2-815d-21c8d7413bea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\008ef5d3-7ef8-41b2-815d-21c8d7413bea.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cd37f1dbae9d9342b05a4a73a166aa3463d43724a0ef284c71580ba8299cce97
MD5 9429931169bf1c2906fc5edd513653b0
SHA1 086f4c8eb149344851817ad6f6317716c61cf914
SHA512 9f950baf9f1fa2b7fcdecce8caff92aa160183c23931aae4b8624de0d30c7b496f211e277aa14427d69ac18db37238932c01e4bc3a5973c3f9677e6331908658
TLSH
T133412B5CB6F91148B3B7AE19ABF6A46E087FB9632F0AD05D00510D4E0A63B40C872B37
MD5 SHA1 SHA512 TLSH

Submit Download