8bb28e7a48efbc4e054e3a4c11bbcadbc33d3014cf3b16ebb18918580d8571cd

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
React-02/files/Correct_key_usage.html
Size 580B
Sample261102-tkglwsxw2n
SHA256 8bb28e7a48efbc4e054e3a4c11bbcadbc33d3014cf3b16ebb18918580d8571cd
MD5 a1079e76fb1bf8df72b85f343851ea22
SHA1 2a962c180c154cdfccef92233c10d2cd48fd7ed8
SHA512 feb0a6802ac434d329fb8aee89fa7723bf03e7b41edf9559305f8e10cdee4c3910fdfeb18a5f0a7d5b9c26eeda934490d721de56c0e4cb1780b55eb449336273
TLSH
T1C8F04C155DD0849880311C9136B2F96AEA5BD64B528CDCAD30E485137FF62CC8C079F4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4144	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{B2039968-1A6E-4B03-8B25-E283083C0FEB}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 2600	4572	msedge.exe	85
PID 4572 wrote to memory of 4452	4572	msedge.exe	87
PID 4572 wrote to memory of 4144	4572	msedge.exe	88
PID 4572 wrote to memory of 4452	4572	msedge.exe	87
PID 4572 wrote to memory of 4452	4572	msedge.exe	87
PID 4572 wrote to memory of 3840	4572	msedge.exe	89
PID 4572 wrote to memory of 3840	4572	msedge.exe	89
PID 4572 wrote to memory of 1736	4572	msedge.exe	90
PID 4572 wrote to memory of 3016	4572	msedge.exe	91
PID 4572 wrote to memory of 1736	4572	msedge.exe	90
PID 4572 wrote to memory of 1736	4572	msedge.exe	90
PID 4572 wrote to memory of 3016	4572	msedge.exe	91
PID 4572 wrote to memory of 3016	4572	msedge.exe	91
PID 4572 wrote to memory of 468	4572	msedge.exe	92
PID 4572 wrote to memory of 3992	4572	msedge.exe	93
PID 4572 wrote to memory of 468	4572	msedge.exe	92
PID 4572 wrote to memory of 468	4572	msedge.exe	92
PID 4572 wrote to memory of 3992	4572	msedge.exe	93
PID 4572 wrote to memory of 3992	4572	msedge.exe	93
PID 4572 wrote to memory of 4012	4572	msedge.exe	99
PID 4572 wrote to memory of 1532	4572	msedge.exe	100
PID 4572 wrote to memory of 4012	4572	msedge.exe	99
PID 4572 wrote to memory of 1532	4572	msedge.exe	100
PID 4572 wrote to memory of 1368	4572	msedge.exe	103
PID 4572 wrote to memory of 4940	4572	msedge.exe	109
PID 4572 wrote to memory of 1780	4572	msedge.exe	110
PID 4572 wrote to memory of 1844	4572	msedge.exe	111
PID 4572 wrote to memory of 4548	4572	msedge.exe	113
PID 4572 wrote to memory of 4548	4572	msedge.exe	113
PID 4572 wrote to memory of 1224	4572	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\React-02\files\Correct_key_usage.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffd3c4dc188,0x7ffd3c4dc194,0x7ffd3c4dc1a0
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,1178760585429357596,18082278032074151856,262144 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:2
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,839081270828199623,3364499704275198738,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,6402973754848584952,11123108565483471891,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,9904048982940316271,18206736140688200506,2097152 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,5840226487280725259,9849029331914273139,2097152 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,9078819538701087954,2059517374456690422,2097152 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,7923196908586979172,12167304800835171898,2097152 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,12651201231626137179,15561564899761367855,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,8643289755166008658,12419118834674542609,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3929165111140667306,3993277777999032527,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,3929165111140667306,3993277777999032527,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4244,i,14663146246814326433,8473154713398996178,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,16402553608943274410,407521174860712442,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4192,i,15382930405172551929,2782712616681709009,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:8
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,18256631362666779349,9882717472565067951,524288 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,3833852405984268145,4404575183821252887,262144 --field-trial-handle=2528,i,9443489344073618696,13825282510336192109,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1224

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

0ac62cfa-fe3e-4730-bc6c-d57ef5dec81d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ac62cfa-fe3e-4730-bc6c-d57ef5dec81d.tmp
Size 18KB
SHA256 fbabc92029e7405b8067745fe73c98a34eb32d428f7091421db8ca5365d4ef14
MD5 7b700357fc886190e2f4ab3604026980
SHA1 5c6528cdd2ed250fae36c09382d49a5c95a1d8d5
SHA512 bcc424cbc4f71d8de3536e09c64fc51353ccbafc02e98a66a0a7b5002b6027b3a1b9a2bc7a061c547f0ffd74061cdd77ef76f26218d9821ec646659548ed2e85
SSDEEP 384:gZQkUSv0sNctmREZYYkHX58EzO/Ak2H7vBEW9IIlX:20B7KakO/r2H75EKLJ
TLSH
T1B1827D75A8A8BD3B5EF39500F14A3643DFB4911BD6C51F90DAEDAB1D01CA29C234BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

43a9697e-deef-4c11-8dd4-09273852820f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43a9697e-deef-4c11-8dd4-09273852820f.tmp
Size 8KB
SHA256 6ca3e5c2c4ce80b9c21a99b78f93712936f6c839ee46e05d4478dbde6e484653
MD5 d32991f9b725dc23a07ed5aeaf87d7aa
SHA1 9a14c4f09681de7fd53f09d1f60fa300b76842e8
SHA512 15851f6f7036924a6fe6d6edf554ce5f9f62113fd384c97985ade0185fadf558d078962606fea2b3cbef8d31d36e996c472d9673a041f651144b5e02282c3596
SSDEEP 192:sON96wlDpQmiUyOHk4X58gZrvOKGPaNcveNq2sU6:sON96kHPk4X58EzO/A32U6
TLSH
T182120835B9A8BC2B5EE2A544F48732039FA55167DA856F90CAEC2A1C05DF26C130B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e1588c4-9d39-4af4-a883-4c1fd6012de2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e1588c4-9d39-4af4-a883-4c1fd6012de2.tmp
Size 8KB
SHA256 9f4256b4802e3a0c130ed2e90726e5ca9dee69cd5e77a47e82b1366cefe7e2cf
MD5 6590a78332207c4460a25ffc14169f54
SHA1 7e69abbc1bef72db94bc7aadec257868f517078f
SHA512 2e651166f80b6d3ffc3c217ae65764e070ac42b998ffb8169a9ed937df2f615dcc560cbae4801ef694a69e97f28e474a8c214029aee8191fcb24173761fe00a7
SSDEEP 192:1ON36wlDgQmiUyTHW4X58gZrvOKG/DllvU6:1ON36kgUW4X58EzO5dU6
TLSH
T13B02FA34B9687C7B9EF3AE09F58736139FA4202BE6516F40CAE81A1D00D739C2347923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7c9fcc7-1fdd-4492-8252-e66909f25602.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\a7c9fcc7-1fdd-4492-8252-e66909f25602.tmp
Size 105KB
SHA256 e2d1a78ddd4a2613e2e137a9b8a6ee6a025f24ce78c71783944f051445e3063d
MD5 a68138180bf134fe6e360a0e37c3184b
SHA1 359c64103a0eb1cbba384f963ad47bd6cac7e41c
SHA512 a8338bac44852d511db583b349822cd7e5ec3c426141655b68ecc184832731c5830c69e5af34998dd6e85c0ddb2400530e818deb283053d561c8afc2b615cacf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T178B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98f220c14bd3d385f1dd482d8b868745c75685e4a2573b4336f235cf3bdce6c1
MD5 6ce50f5d79ab86d6489a63e08ead9ec4
SHA1 d52fb22446c08230d0edc8374b1dcaed1af585ea
SHA512 fd66aaada3f82de40a9236f167ecb23bc285a49f72374f567e078118a8bdb229e4fadc26c639553cfacaa7d7ba44e0419f17b4bb4a9a8999b51bdd037a28783a
TLSH
T189D02BF4E69455E4D441283C11130304314CC4001C033010C46141D21D8D7C2009A068
MD5 SHA1 SHA512 TLSH

Submit Download

2273dacf-16ce-493f-9951-84b6ea46ffe6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2273dacf-16ce-493f-9951-84b6ea46ffe6.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

36343e24-e227-4527-9c28-b90eed48b157.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36343e24-e227-4527-9c28-b90eed48b157.tmp
Size 10KB
SHA256 9d44a870d5b3ec8482f49ed5c3b0b77536c9e36d0d5f406a316826bb95cc4c52
MD5 417d92bb7aae48fff5df883cef32a7f2
SHA1 49349b349f895108ef511ce7a3ff928d5bb92bd9
SHA512 fb1d5425ae3ded943b8089dbb0d64db6453cd23b405e584ccdef82d33902e065e710a348737ad47a73d7447687c6aaef3b2c4e2fe7c595bef7b954db0daaac6f
SSDEEP 192:sxZHRUWK/fXs1SIdpd9HW6+WNGYrj1vUIg5BJ:sxZH1K/fXs1bPHbGFV
TLSH
T1C922C8556E38B97B8CC7E209BB29BF53E6F9503251901E44AAFCC61C05E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

426f33e7-39e0-4566-b558-fdd8b0094f50.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\426f33e7-39e0-4566-b558-fdd8b0094f50.tmp
Size 9KB
SHA256 435c49d1166acc1b1ebda59a9e62eabc4174bf5772f05a36d49338eef63fe66b
MD5 01842c7a170adef0b5b5955bcf59ae51
SHA1 9f9a14b9f4402ecf1093321364fb6498466872b4
SHA512 92596fb71e829b2c3e7e3d9edf7d637fab9c9efebaae497dbc9d9b84e8f8b23dad95e61dd50f462f332143cbc6fbe2f4931cfd2e8acdcb813139512c61cec135
SSDEEP 192:sxZHRUWK/fXsgSIdpd9HW6+WNGYrv/vUIgrJ:sxZH1K/fXsgbPHbGx9
TLSH
T1B022A7556E38B97B8CC7D209BB29BF53D6F9503251941E58EAFCC61C04E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66230e96-b1a2-4af2-a644-7d9a221a744d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66230e96-b1a2-4af2-a644-7d9a221a744d.tmp
Size 10KB
SHA256 96aa6fa4b060edebdc59ac3922cf2190cf9044184a2281287606e389a2307d84
MD5 6d356207ef3f258f3081e2d73999a912
SHA1 f81df3e82ab192f3e843ff9de0ce39c18af828bf
SHA512 8186fe1fcafb0a1409bab0e2f949bf029182fc08f72aff5ac4de29e2b2c8e3f66985a96dc9a5f268a172582cfe6e173e18abdedba62866ed698a85c51b088d79
SSDEEP 192:sxZHRUWK/fXs1SIdpH9HW6+WNGYrL6UUIg5BJ:sxZH1K/fXs1bdHbGvV
TLSH
T19122B7566E38B97B8CC7D209BB29BF53E6F9503251901E44AAFCC61C05E7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9625175b-4d5b-4d1a-983a-1ce44cd89e28.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9625175b-4d5b-4d1a-983a-1ce44cd89e28.tmp
Size 27KB
SHA256 53faa53fa414cc6856829d82ff49a145c415c3e8d2d9cdfb5503c23b9e9feefe
MD5 b451b43acbcdbca4d55287abebce52d3
SHA1 53eaa2e9bcc3565f7eff699e399c3fd6b020c21c
SHA512 2849e4783aa09c36e90a20a5fbf467da92aa3a65cf7f3c03f0d653c850fac1e1ef12ada6251966d422c1e51eec5587caa57ffc43e59a053730c4f78199635500
SSDEEP 768:iDy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TbZroREd:iDy4J/DWvbtBhu1jajiLm0bSad
TLSH
T1BAC20B3F684CCA7E4FC00A9DED5E6F9B3E9802C796948D4047FA994C02C77EA51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 659728628297fa7f5aa1520948f7cec173bc8744293944e139d45862cf368561
MD5 3e2eb1ff10e8535ffe9e743f326cf23d
SHA1 5ded722f3c5778c1a6ea2376bce9e38b9f51afd9
SHA512 99491cd8540f32318185fc275e154b124f7acf612a90118019175069cc19d90c2c6050d94689333dece90d6a4ed3c7c18a7e5e23d5c612ea6dbe4aaf703e1cc0
TLSH
T16741F987E7F5B055DFAB473189D114B7363898B2ED43ED12D8B8C0B97B4EB0692042A3
MD5 SHA1 SHA512 TLSH

Submit Download

4a20d956-632e-41c7-86f2-f37eb4d6e888.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4a20d956-632e-41c7-86f2-f37eb4d6e888.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

12ad87ad-e139-4c97-9c37-534bea9a968c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\12ad87ad-e139-4c97-9c37-534bea9a968c.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

78e3e431-da34-44c7-941f-1283e890a419.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\78e3e431-da34-44c7-941f-1283e890a419.tmp
Size 949B
SHA256 8d79ddcf8fb50161b44b7f1865e8f3026ab0139505c321c2a551d14a3941e423
MD5 ef5cd2c12fb6246877210d42c188b912
SHA1 57faee6b774e563fd1c466cb9ebe5d8edb2f7fa2
SHA512 0d0bada9f65f225f8f6a5271ee58ce52a61018371cf711112a500998abe1655c4f0b5bd91039a44926022e9376bc80bda21daf216ca05b58398324d1b94784a3
TLSH
T1AE117AF7C3D5956E890116F0AA24EE2BCE2D0A06422C7C1989D4EF2BD7E3475E00299B
MD5 SHA1 SHA512 TLSH

Submit Download

7b7642bb-c539-4058-abef-343d29881a0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7b7642bb-c539-4058-abef-343d29881a0f.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 1fb705d02731e55185c9940ad97a4e179eaeaac5be2b5204823a772a58adb496
MD5 4efb8aa7ebd47b967d0dc4bd7f5e3b29
SHA1 5f3a4850b2229f959253cf4252faa074a86a4875
SHA512 3eed94bd45d65b9bdc90a7a4d882d0180f19c40e1788b2b11fa75c985637850fa7321df35b8cf5285cfbc6f0da7dbbd748e772c80d0f5cdfb90100e06bcf3c55
SSDEEP 96:KIDCKs0+aCYKjilmBA9xvDnk3DePdJkKlBdHk5Rx+vzR6KaM6qEQKxyU:E53smBA9xvDn6DelJFBdHKRx+v21vn
TLSH
T179E1EF5534BB020038BD769881B5872A52433677305AEA3BBFFC40A68E6BE445DFE5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1c29297-f8c3-464b-bb7e-ac6ebb6c8a21.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1c29297-f8c3-464b-bb7e-ac6ebb6c8a21.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e33319a3-75ee-47b8-b1f2-74e5c84cd1b2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e33319a3-75ee-47b8-b1f2-74e5c84cd1b2.tmp
Size 10KB
SHA256 1bb05483ab6b98b07931b9d03dc9ccf9bff95d1604297f7531223622bb0ec400
MD5 b8b894f3e863fbb0fb304086c6f6d0c6
SHA1 c1efd7a956f23ec5b3daab8f270ace503e1c96ce
SHA512 999d9e5363fb133ec222c2694563dd1964b04cb58f14cfa36239538703c0a620a336ba6697d05b4c2f2253a32149fd2333261547bc176b85b285227821f67da9
SSDEEP 192:sxZHRUWK/fXsWSIdpd9HW6+WNGYrv/vUIg5zJ:sxZH1K/fXsWbPHbGxj
TLSH
T1C122B7566E38B97B8CC7D209BB29BF53D6F9503251941E48AAFCC61C04E6ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2dc57c52-440e-4c22-abc4-44919c305932.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2dc57c52-440e-4c22-abc4-44919c305932.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b36d5ae3-cc72-4ff5-9217-91955c83f7e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b36d5ae3-cc72-4ff5-9217-91955c83f7e3.tmp
Size 18KB
SHA256 b3a6e3def61ed092d0a7ad8959e408b42feb86b275a09bf95841441cc44f3f3f
MD5 bae32f8ca14993a9a52f21e7793ad485
SHA1 604b73352155f59b6b7ca2eea8ce0b64ddbc9159
SHA512 d84b61b07407768775ef5605798c801e67d3541f0db9ddec5241eef6ecf1e93ebf9c901b29f774ed4165a6015c1fa13ef9d119ac22ee45525b226bc887d3300c
SSDEEP 384:LZQkUSv0sNcamREZYYkHX58EzO/Ak2H7vBEW9IIlX:f047KakO/r2H75EKLJ
TLSH
T13B827D75A8A8BD3B5EF39600F14A3643DFB49117D6C51F90DAEDAB1C01CA29D234BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e4befe26-98f4-4aae-bb31-c0cf0ed9d2cb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e4befe26-98f4-4aae-bb31-c0cf0ed9d2cb.tmp
Size 21KB
SHA256 3014ba7f58666fac462b8dbc4f1047ee54f0e7579f9ad06e92db48edafdcee54
MD5 115ffc09a2d51359925bc8e7c4b0160c
SHA1 c56a8440ad61de22c7a71b2d3d4675d066177ba0
SHA512 f3b648681c908b871e58150989976d86cacde421223bb19cef0da980c770934e754eaa063ec2926f5c5a1384dcc1f31cf0aa6de76d080ad3a2171ee87421cb37
SSDEEP 384:o7iFzQkUSvjzsNU8TUNTUlIltmREZYYkHX58EzO/AZ2H7vBEW9IIlX:vFdn1wgr7KakO/g2H75EKLJ
TLSH
T124A26D779898ED3B9EF79A00F54A3203DEB49167C595AB90EBDD991C00CB2DC234BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6030f185-99ab-4d60-85e6-470508c593b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6030f185-99ab-4d60-85e6-470508c593b0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 4a22a9752ba7e2e0a1e87c0e710123dae228bbf03b84ba497b460f3eb3df0451
MD5 35d2fe779047cf2dbfd4c7956545f5fc
SHA1 0620c809abfe90b14321ec5203032f92b27375ac
SHA512 09a6f61fb6893443290ff2d302d1bd218c837739561160647a1bee3f8c050d095d0317853f0234a574d9cb9c8745f2a6e705c72a6d8c23fa50862a3396c74086
TLSH
T188415B58A6EA114CB3B76E5A9BF7A86E447EB9732E06D05D10010E4F0B23B00C9A1737
MD5 SHA1 SHA512 TLSH

Submit Download