cb2e5a22a0121a0782833131923103896463f4cec60ba3663390809598b524aa

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
React-02/files/Basic_list_component.html
Size 587B
Sample261102-wzcmlaev4m
SHA256 cb2e5a22a0121a0782833131923103896463f4cec60ba3663390809598b524aa
MD5 b72f0ec1dcbdf83adcfdc5b69a053353
SHA1 321c1ad0a5f5632bb6f2e6f1f559c91f05adc33e
SHA512 93c35fbc7311a01e24100937a87e2905b7cbdd5eada05fea3b589893bb62258c2488ec617f5cdd8490b6be697775d554caea7cd256a4f0c88191c761e9b701b8
TLSH
T161F02D245CD4845840B1189137B2E997E9A7D64B56C9CCAD30E484532FF22CC8C07DB4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3964	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{248554A2-ADA8-4338-9DB5-2BC8A6D48C46}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1792	msedge.exe
1792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe
1776	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1776 wrote to memory of 1072	1776	msedge.exe	85
PID 1776 wrote to memory of 3964	1776	msedge.exe	87
PID 1776 wrote to memory of 4752	1776	msedge.exe	88
PID 1776 wrote to memory of 4752	1776	msedge.exe	88
PID 1776 wrote to memory of 4752	1776	msedge.exe	88
PID 1776 wrote to memory of 4264	1776	msedge.exe	89
PID 1776 wrote to memory of 4264	1776	msedge.exe	89
PID 1776 wrote to memory of 2196	1776	msedge.exe	90
PID 1776 wrote to memory of 3504	1776	msedge.exe	91
PID 1776 wrote to memory of 2196	1776	msedge.exe	90
PID 1776 wrote to memory of 2196	1776	msedge.exe	90
PID 1776 wrote to memory of 3504	1776	msedge.exe	91
PID 1776 wrote to memory of 3504	1776	msedge.exe	91
PID 1776 wrote to memory of 3276	1776	msedge.exe	92
PID 1776 wrote to memory of 4316	1776	msedge.exe	93
PID 1776 wrote to memory of 3276	1776	msedge.exe	92
PID 1776 wrote to memory of 3276	1776	msedge.exe	92
PID 1776 wrote to memory of 4316	1776	msedge.exe	93
PID 1776 wrote to memory of 4316	1776	msedge.exe	93
PID 1776 wrote to memory of 2180	1776	msedge.exe	99
PID 1776 wrote to memory of 2272	1776	msedge.exe	100
PID 1776 wrote to memory of 2180	1776	msedge.exe	99
PID 1776 wrote to memory of 2272	1776	msedge.exe	100
PID 1776 wrote to memory of 1336	1776	msedge.exe	102
PID 1776 wrote to memory of 4848	1776	msedge.exe	109
PID 1776 wrote to memory of 2604	1776	msedge.exe	110
PID 1776 wrote to memory of 1792	1776	msedge.exe	111
PID 1776 wrote to memory of 4384	1776	msedge.exe	113
PID 1776 wrote to memory of 4384	1776	msedge.exe	113
PID 1776 wrote to memory of 1792	1776	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\React-02\files\Basic_list_component.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c0,0x7ffd5092c188,0x7ffd5092c194,0x7ffd5092c1a0
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,2356136284627280308,15785521042978237557,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,9811821802110915317,9071767572439685967,262144 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:2
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2440,i,13414519203937638168,3495557200621183043,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,1610889328874269400,5545912735100401555,2097152 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,13350447235340757226,4714394854208182224,2097152 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,12701631410197350487,4438806701856011379,2097152 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4240,i,10989222108229428486,14577522970324424860,2097152 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:2
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,488706902167250281,6524965110083033970,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,4692287982193335490,16490172545933885866,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,18333671135184917402,15554907079350835184,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,18333671135184917402,15554907079350835184,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,15358069287244408813,14623001006217406513,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,6170953029731733287,11234493325944006110,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,6703577898287581494,15216895680222723635,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,15954555883840519742,1914562773238678704,524288 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5688,i,5709267553590008645,17937128178870385966,262144 --field-trial-handle=2376,i,17107142684051106564,3764287739863198480,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1792

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

13680afa-3f69-46a8-bbdf-ec7bc2a18844.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\13680afa-3f69-46a8-bbdf-ec7bc2a18844.tmp
Size 21KB
SHA256 1cf96dc45a65a517d2a953a35fabfa28fc8a359e4617c6e45ffe82c6ed4fcca8
MD5 151223e5e507559d0824c307247add5e
SHA1 6055a1947f40d35c0c78cf2590877896d4017e67
SHA512 d29720b7d3a4d23df8bc6cb0a797839a57d110773708215e3337ba7273e9fbda926c76e5b71acb92c57f01430a79125ed8a48533ee0f9ce4039c96c1abccc301
SSDEEP 384:3BiFzQkUSvvzsNL8TUNTUlIlfGwpb6zAh//kXxYodGH7vBEzOIIlS:YFdL+wg8c/cVGH75EyLs
TLSH
T133A26C37A8989D3B5EF79B40F14A3613DEB040A7C9D55E90EACEAA2D01DB0DC1347D15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4196f87e-1610-45ee-b378-4c71e1da09f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4196f87e-1610-45ee-b378-4c71e1da09f9.tmp
Size 8KB
SHA256 b1dcf7400c01d59f13ee3e300b265dedf875ef7eec6512e20e5a2ec144e12aa6
MD5 24e2dab6ac2b866458c8c9a3e9ed9fd1
SHA1 238e6f3d623b4237e139218a04285799b91b7908
SHA512 c52ffe330640ab97910e2125ce18cf27d89af625d5c13513bdeb6d361ad05a827cc21aae836d611ff6ab8c28510a96b2b16317219c2da3e644fd06ee963471ee
SSDEEP 192:5ONM6JUnQmiUy7Ygo//gywXFnPwoSNxfqNU6:5ONM6+Jzgo//kXxYo4GU6
TLSH
T17D121835B868BC7B5DE3A590F08336139E644167EA896F80DADD7B1C02EB1AC5307D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4412f4da-bbff-4e07-925f-7af87c2b53ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4412f4da-bbff-4e07-925f-7af87c2b53ab.tmp
Size 8KB
SHA256 2560b38070f06da2b5d7ba52cbac3f6b8be35d3a4a3c0d2e9c63563c5ecaeb3c
MD5 897d433cae63bddf2c66ed14736ce48f
SHA1 08854ffc959f0ec39e25c1bf852e353b8607e3d9
SHA512 6a97a4a1baf5831349afd4a6de5671f27d3d7a8e37c2a937e3a3fe0c960264f1ad372f478ee7781fa38ce7a0a4b485100fb3cbb3d9b542f989a03867d96f3278
SSDEEP 96:KqONkvQsjpfbUmjH5ih/cIPURHl8h4otop5WaDUBKP4v+Y1xf//ojdpxBY6ywMd5:BOND6JUm0QmiUyrYso//gyweBCD4U6
TLSH
T11502D839BC687C778EE3AE85B08777239FA4107BA6951F84DAD92E1D01D715C1303C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b332a94e-a780-41d7-bcc4-f70737c1bec6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\b332a94e-a780-41d7-bcc4-f70737c1bec6.tmp
Size 105KB
SHA256 e2d1a78ddd4a2613e2e137a9b8a6ee6a025f24ce78c71783944f051445e3063d
MD5 a68138180bf134fe6e360a0e37c3184b
SHA1 359c64103a0eb1cbba384f963ad47bd6cac7e41c
SHA512 a8338bac44852d511db583b349822cd7e5ec3c426141655b68ecc184832731c5830c69e5af34998dd6e85c0ddb2400530e818deb283053d561c8afc2b615cacf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T178B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 04d384e503ac7726cb96f043e69cad98489c2eafc2665c80e33cb016d873b6e5
MD5 c5a323aac1462c81d1642ed0f7b1b5a2
SHA1 c07fc90a5c5d549ecbf33b4bc8cb6cb9ca204f88
SHA512 222a743460a5faf30304aa1d67f0e10e2db3eb1a339b1bbf5ca524b4a2fcaa1361289e4358333bae502b5bb38029cddb6902b4cd64293b0ad42b474cee75f892
TLSH
T1B2D02BA4A3D839C9E112183602214366348D40A15057E010CCA0518907C91538281460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e249170bbcfe30a2a7f421f287b6f81c1c4b71b07e845351f15d008b660ff09
MD5 81d112607d82fd2070ddb7aeeb981683
SHA1 14d14f6413d240f3629ae2eba8f5d1139dc415d0
SHA512 983c5ff8fde2dccf9dc8cf1c11f0008f124b59c2922b2ae470dc2c7595c82289abfd0b4819d73f1bf062a77e62e9ed53318e5f62978a688554f46d0a6c41cbfb
TLSH
T1CFD02BA463D83DC9E512183602204366348D40A15057E111CCA0518907CA1938281460
MD5 SHA1 SHA512 TLSH

Submit Download

2ae65a0e-c250-4d33-a08f-a740bbadc928.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ae65a0e-c250-4d33-a08f-a740bbadc928.tmp
Size 10KB
SHA256 73fb9355fc3c82818f602230110424f8d7bf2accda79136fa85c69ec92850204
MD5 58365ecf309b1b3e512f98a630e6d54a
SHA1 47dac42e1494b3581e992cac2274620eea726b0e
SHA512 3ce3846705d85b1e807f83a1b6150304e6e9d860dfaaab03a5aa073bc9a8c265e33d7ca6dac637b29d539f9eef331504c5ff646c4dad11e8193e2cdbfe2a235e
SSDEEP 192:sxZSbRPW0r/fWs1dVtMIdpdayHW6+WNGY36W+oXIg5mJ:sxZSbE0r/fWs1dVtVgyHbGX0g
TLSH
T19D22C9166E38697B8CCBD20DBA15BF53E6F9503251D11E48BAFC9A1C05E66CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

93f7acd0-5f7c-416e-b62d-0753f30a7242.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\93f7acd0-5f7c-416e-b62d-0753f30a7242.tmp
Size 9KB
SHA256 240835b7f2cbbc45bf9709a54e4cb18b2c7287895f07a8ccc7d99fdc7b89e269
MD5 fbea33f89a63a59b3d16143f1457fbc7
SHA1 c9dc33a9b22fa7e40f21b336e4a6669a34e08573
SHA512 a0f63f71c920590871e39a105d7ae59a7bbd9feeb6ba88de6136de375c3a894636a1691fc5764de7f65e653628b45a402d04b192c801fb5e00fbd597325d0124
SSDEEP 192:sxZSbRPW0r/fWsadVtMIdpdayHW6+WNGY36W+oXIgrJ:sxZSbE0r/fWsadVtVgyHbGX09
TLSH
T19422C9166E38A97B8CCBD20DBA25BF53E6FA503251D11E48FAFC9A1C05E66DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9512d033-af76-42b7-ae98-d3beb1525545.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9512d033-af76-42b7-ae98-d3beb1525545.tmp
Size 10KB
SHA256 5ab09eb8ec8f8f9108f683f65842a816e5d4ab48f3ecece97fa2d467ffa0d52e
MD5 1e9f8a5c8e5dc3428ffa76bb6d5738ea
SHA1 25ced6d40b3ebcb0de0f4d64d07344105745f576
SHA512 9f4a3ad7dc42efed6d719ca2df90352e97d0b0a540de44d8216c9f225791bcd15cf1017764e0aa6e5006165e49e3fbc63414bea2107187e75ed0b2c03e876e34
SSDEEP 192:sxZSbRPW0r/fWs1LVtMIdpHayHW6+WNGY36vXHXIg5MJ:sxZSbE0r/fWs1LVtV6yHbGXv6
TLSH
T1ED22D956AE38697B8CCBD20DBA15BF53E6F9503251911E88BAFCDA1C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 951ef420b5e9cc93c4a2e5ce5d92404eee65f125562502acef80098ab1d80d60
MD5 54904869a8fb850348ed4101efc165c7
SHA1 1b8fecba805e586e0d12d03c50cbcd1f43246a0a
SHA512 4c1868aa9693293779187298e4f8aea210b93cabef09691e8ad45fdb978da1ec95c78c07c553f8dbd3a3729b7a28ed749fbd432704f58d45db103766ac37efc4
TLSH
T1D2517070DE6080A8FF9841BA94D00DBB363677A024739F3B1EBCCAF849363D949C8042
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 25c442fda8cec0e2eb5bb6b3a5b44e47a31594d9129694fb82f4a7fa0156efaa
MD5 b5621fbf21510763a367e5d2105d0093
SHA1 29bfc262c03c2f338ede7253512277866e9a490d
SHA512 fc31793eed5469532f6af7fe38d00347bc1abe634e5d99bab837c5b0503051cac8a68aafdcc47cb1e511da54d59ac486d267939c4b42886b049d3b9047407f09
TLSH
T13F517070DE6080A8FF8841BA98D00DBB363677A024739F3B1DBCCAF848363D949C8042
MD5 SHA1 SHA512 TLSH

Submit Download

4bc661c1-81c1-427c-862d-e16ee07d584a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4bc661c1-81c1-427c-862d-e16ee07d584a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

1bc7c7da-1d63-42dd-acc0-527401d99019.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1bc7c7da-1d63-42dd-acc0-527401d99019.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

8cc1eaaa-8451-4fe0-8600-de8c436a6ad5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8cc1eaaa-8451-4fe0-8600-de8c436a6ad5.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

da19c308-1d38-4735-b4ed-b4ff9196368f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\da19c308-1d38-4735-b4ed-b4ff9196368f.tmp
Size 949B
SHA256 ee2235e62fa9a76583924d00cdac675d27e279e48b407de6904f15ac7ce0d13b
MD5 a36078ff7cf96466de456b2a37572e73
SHA1 f2406055ba474e2bfc12b82d836178a4f57ac94e
SHA512 b9df6bd91259b47bd1d9fac024e079f69c34662725581d75e027ae40faa8c06fc704d00172faefecdfceac7a5df68c120d5929d41bebcb913780de70a8a68a2c
TLSH
T12B113DF3C3D585AE890156F0AA28AE2BDE2D0506421C7C1585D4EF27D7F3475E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 491daea564fb849921fe5d8db44ea399d059ba1b8fd82c8decc9ae3ca7b59f88
MD5 1acac733ce758a8334ad98823ea6ae3b
SHA1 648d349bee1cb9cb20abae9a10d600e12d6da86f
SHA512 fcf490cb373dcaecba00fdfcece6e11a445a360935dde468688615fc8feff9dbcdb8f77dda7a8371151a3654f0158d7290d4bd93bfae4c086573ab674bbfb5e7
SSDEEP 768:zvKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/kroRQ:zvKlm7QWvUYe0u1ja8/L/E/vRQ
TLSH
T1ACC2FA3B640CCB7E4FC05A9DDC5A6F976EA802C7A6588D404BFA984C02C77EA51274DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 2b5015ea33a56cdc1f08da39e52f4dc818c75224f7326b0d337e24e6bb4c0105
MD5 ac8ce967a7303e5ed90f228636c6e1c7
SHA1 737abf028ba54dcf2b6d2fb9c5b299692e609960
SHA512 c059960c196f79495a409bb170569ded92b56e6eabc833e70830b70938394f72257341e58a98b29e100d8523e9a20b11e2fb4c11fe971417dad9f92a102ec41d
SSDEEP 48:K0HqTnpJZybRcBIS3yK931dyx3iYUFn7yLAPGKQ6uvbG9mISivK9+1Evx4/YF2eU:K8Y4KBm++HiKocL/2KQwGicgKZ+i
TLSH
T157B1FC4130BB024439BE25889075975E52423173355CFABBFFBE00A68A6BE541DFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acfdadc8-e37d-40b7-bde5-b1d497a31f52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\acfdadc8-e37d-40b7-bde5-b1d497a31f52.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

bc5e0e29-1b14-47e9-b322-038136235ded.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc5e0e29-1b14-47e9-b322-038136235ded.tmp
Size 10KB
SHA256 12e733d81b20a44d3f016ecd3e1549daae8b8e63aba70a598feb276055d934c8
MD5 43b838669817c910ff24e476ab6fcfbf
SHA1 2d344f5c9c486792c3c99ad028ce71eefc56d142
SHA512 b2b84fee962ef094c869fd1f0454765b0b46fb69997047e4dc498b9d26b9ac81779f7dc59e63e85d64c6d7dd4b4bbbf4b62648c757e319c5a36495d05bda18c8
SSDEEP 192:sxZSbRPW0r/fWs1LVtMIdpdayHW6+WNGY36JkoXIg5MJ:sxZSbE0r/fWs1LVtVgyHbGXH6
TLSH
T12B22D8166E38697B8CCBE20DBA15BF53E6FA503251911E48BAFCDA1C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eee1e509-9f8a-4b26-a629-ee91138f687c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eee1e509-9f8a-4b26-a629-ee91138f687c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5e4d8c28-3102-4513-9321-b1c6166cecbc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5e4d8c28-3102-4513-9321-b1c6166cecbc.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b2259184-3f33-48c3-859d-5a7ed2ace395.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2259184-3f33-48c3-859d-5a7ed2ace395.tmp
Size 18KB
SHA256 0a3e6b45d3acda6a6a36b8e8c2ab45040135255f23bf06d4ca278ec4d46bd415
MD5 3265890098f5abff590bdca861a4c243
SHA1 272bcd566775b5d9ff26c329cbcd0b4d1a912194
SHA512 ac76a33733ff538d5c78edcd86206e83153e564487c6156973e027f644b0f0c3aa8d42d608428a625cdb02f03e03c65b8bb07655802b27038ca3bd151cbb353d
SSDEEP 384:AQkUSv0sNpfGwpb6zAh//kXxYoVGH7vBEzOIIlS:o0Bc/ctGH75EyLs
TLSH
T16F827D35B8686C370DF39650F14A3A13EE748067D6D90F90D9DEAB2D02DA1DD2347D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b2d7319c-534d-42ac-88cb-f272961e8ebd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b2d7319c-534d-42ac-88cb-f272961e8ebd.tmp
Size 18KB
SHA256 cfb31738e5b324a3161f3552905ce05a5ee163870e2a37e17b3e0fbb7dccd155
MD5 164eac5d9bae1e55372c85edf48e88a4
SHA1 18be5a3bab2a33d60ce82191bc0e60510c0f2161
SHA512 bf83650d7bad23dac874d7af34bb7d6ee3134821178b65c5957afe9dcdbd138183f8f8c8c071e7c738b701a5d980f026161020289e60cc9cf8d41a78a6f5413f
SSDEEP 384:VQkUSv0sNp+Gwpb6zAh//kXxYoVGH7vBEzOIIlS:v0yc/ctGH75EyLs
TLSH
T17D827C36B8686C370EF39650F14A3A13EE748067DAD50F90D9DEAB2C02DA1DD234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b6ca245-9f63-49f2-8c29-51b0541b8f7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9b6ca245-9f63-49f2-8c29-51b0541b8f7d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 43f944735f600abe2dc9e8b924842a2bee88668f4661bce594b0f92b2211628a
MD5 f189063a8adc552c63d6500096455d03
SHA1 600f8e00a4bbf203446a22a61928a58eca771400
SHA512 eec5a69223acae0b78ffbb36b0f112770486baedc437184b19ccc6589ef20ff799996706162611d18a8e4be9e2c2a2f83bd5e822a534184664096b40dc768bd6
TLSH
T1DF41EC58A6EA1108B3B76F2AABF6585E487A79372F06E45D10110F4F4A67B40C8B1737
MD5 SHA1 SHA512 TLSH

Submit Download