d99fecf9f10d0ffd9bf4bfc26a322f0254ebfa7bb3e8241b3114b9d9c7d8895b

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 18:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
React-02/files/Conditional-render.html
Size 587B
Sample261102-wzcmlaev4m
SHA256 d99fecf9f10d0ffd9bf4bfc26a322f0254ebfa7bb3e8241b3114b9d9c7d8895b
MD5 e45b55a5f2eace269d462fb62c643460
SHA1 e815b95815f23edc53f92e25d62c421663c7ee21
SHA512 3ccd9a4d5dadcd2e17b7cd6ece4df0e7abc2fa6930e40cf8996dedc495c62b5f917f081d87ab441f3569b7c816b83842d15a11f01aa9a6ea50d786834114e73f
TLSH
T1C0F04C265CE484988031589467F2E99AEA6BE68B57CCDCAD30E444572FF72DC4C0BDB4
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4172	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{D5B328D6-2926-4B31-9475-C58F3D17E2E1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe
1200	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 1200 wrote to memory of 2788	1200	msedge.exe	84
PID 1200 wrote to memory of 4172	1200	msedge.exe	85
PID 1200 wrote to memory of 2680	1200	msedge.exe	86
PID 1200 wrote to memory of 2680	1200	msedge.exe	86
PID 1200 wrote to memory of 2912	1200	msedge.exe	87
PID 1200 wrote to memory of 2912	1200	msedge.exe	87
PID 1200 wrote to memory of 2912	1200	msedge.exe	87
PID 1200 wrote to memory of 3752	1200	msedge.exe	88
PID 1200 wrote to memory of 1156	1200	msedge.exe	89
PID 1200 wrote to memory of 3752	1200	msedge.exe	88
PID 1200 wrote to memory of 3752	1200	msedge.exe	88
PID 1200 wrote to memory of 1156	1200	msedge.exe	89
PID 1200 wrote to memory of 1156	1200	msedge.exe	89
PID 1200 wrote to memory of 2152	1200	msedge.exe	91
PID 1200 wrote to memory of 2152	1200	msedge.exe	91
PID 1200 wrote to memory of 2152	1200	msedge.exe	91
PID 1200 wrote to memory of 1684	1200	msedge.exe	92
PID 1200 wrote to memory of 1684	1200	msedge.exe	92
PID 1200 wrote to memory of 1684	1200	msedge.exe	92
PID 1200 wrote to memory of 4344	1200	msedge.exe	98
PID 1200 wrote to memory of 4332	1200	msedge.exe	99
PID 1200 wrote to memory of 4344	1200	msedge.exe	98
PID 1200 wrote to memory of 4332	1200	msedge.exe	99
PID 1200 wrote to memory of 3720	1200	msedge.exe	101
PID 1200 wrote to memory of 4496	1200	msedge.exe	108
PID 1200 wrote to memory of 1804	1200	msedge.exe	109
PID 1200 wrote to memory of 4124	1200	msedge.exe	110
PID 1200 wrote to memory of 680	1200	msedge.exe	112
PID 1200 wrote to memory of 680	1200	msedge.exe	112
PID 1200 wrote to memory of 4468	1200	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\React-02\files\Conditional-render.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa7730c188,0x7ffa7730c194,0x7ffa7730c1a0
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,11117814929463692846,8443872224871348402,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,2550447097396185995,14562854404557118124,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,14011029589223162131,14520183641387066682,262144 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,8911422137164263729,2935151932273953044,2097152 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,11753098830231927919,16285081229723114804,2097152 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,15655869518941183287,14140160468489326051,2097152 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,9540583686462531788,17605884706070809797,2097152 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:2
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,4951127730560756713,5485119789976875792,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11585691272606515028,12861362742755158968,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,7831801763451942456,10203976047136910237,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5576,i,7831801763451942456,10203976047136910237,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,2479844125994225833,11349850681312936760,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6340,i,388962263276182824,7404448662102082739,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=6348 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,1591790553088650026,15474600212061044591,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,17538681637808146047,3378316214604435420,524288 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=612,i,2739674343676712474,17919505825640361659,262144 --field-trial-handle=2304,i,13943629499856410057,12694324146664982211,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4868

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

20684530-5be4-4067-835b-8927a9c4fc5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\20684530-5be4-4067-835b-8927a9c4fc5c.tmp
Size 18KB
SHA256 1148694a732ed5afe1e5daa648d888fbb9b3c77caea694aae4306747565bd468
MD5 2f38afced49f21f844c324665d4babbf
SHA1 61bfc41ddb2554bc36dbd295ac1aab25abad6d72
SHA512 813f08ac55bde18eaac573a2b5d4297eb4cf5dd712eb31af6f3480ede34bdfe28a815ece0800a001bc07d4ae5f9024a3222040c646c07b8457061dbfeb5f799f
SSDEEP 384:4QkUSv0sNVvK/UjLup5u8i0+aSvH7vBEkXrIIlF:w030gkCSvH75EkXrLD
TLSH
T1BC828D36AC786D3B5EA39520F10A3A63AEB4816BD7D85F80DDDE971D02DB2DC1307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40687c04-4356-402c-8b1d-49cd945c554e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40687c04-4356-402c-8b1d-49cd945c554e.tmp
Size 21KB
SHA256 03f1d7417d3ca477f251b348ec2b5114412bffc4dc0c97c48144e07eb60afa60
MD5 d55b8a943b2c3e456892b8a3c670988f
SHA1 4b1234b1acb6e60873e5bcae38c0660eba37a9ad
SHA512 8f5f1328014cf57064540f4e0aaeba52d45179c03fd8c767b29a2444ecd6f4bb3a664aff3349b7fb9e053cd552e10ca71eac0d6fc7ef062735b1d9feb11367d3
SSDEEP 384:EiFzQkUSv1zsNv8TUNTUlIl+K/UjLup5u8i0+a5vH7vBEkXrIIlF:fFdNmwg90gkC5vH75EkXrLD
TLSH
T103A28C339CA89D3FAEB78A10F10A3613DEB441A7C6D8AB90EACD9A1D01DB1DC1347D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4fcd5c17-2cbf-47fa-9cba-83ea1d466c35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4fcd5c17-2cbf-47fa-9cba-83ea1d466c35.tmp
Size 8KB
SHA256 a1a43ae9363e25acd67497dcb2adeb553f5f5f7f66d36c3c0e3fa973249f800e
MD5 7bda6528fc0ed558f3cd00778352c217
SHA1 4df58e13934f67879d7059072ad083516176478d
SHA512 520fc5417a9aff69e36020c9b988b42909c9b63a79ad10bddc59305ea3b86264db4ffd47ff626c73841e5177a46b494c01fec079f4dd78b4b511f6afae2ef23b
SSDEEP 96:PqONkgQsjpfwDISp5ih/cIPURHl8h4otop5rmDGBfPGxvw45RxmJm78lFIxCYbq8:SONo6iDCQmiUy0WHq5u88PAgSqKaqU6
TLSH
T10502FA39AC787CBB9EF3AD15B5473B239FA4117BE6941B84DAE8162D01D769C1303823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e656cb9-edf3-4542-8a01-c02ff6b1bf36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\1e656cb9-edf3-4542-8a01-c02ff6b1bf36.tmp
Size 105KB
SHA256 e2d1a78ddd4a2613e2e137a9b8a6ee6a025f24ce78c71783944f051445e3063d
MD5 a68138180bf134fe6e360a0e37c3184b
SHA1 359c64103a0eb1cbba384f963ad47bd6cac7e41c
SHA512 a8338bac44852d511db583b349822cd7e5ec3c426141655b68ecc184832731c5830c69e5af34998dd6e85c0ddb2400530e818deb283053d561c8afc2b615cacf
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T178B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b6f38f22081ddaa1111b84705bb0452e935cba70ffda2b2886601f1d8df6360
MD5 ec02b779d41e6c7bfde9a979b0a24d5d
SHA1 d7bfaab5e399fd543bd91b28be91cb05e1603c12
SHA512 7039abea8da570fee0fd1cebc7e8feacc30cdd16fd0348ba5146c309f1696c541bd99a85a480ad3c227df6df586718bd26cf483ae0af65010caac2db1bde30aa
TLSH
T156D02BC8D0D43558E01630351027850233CCDD54F003224680450591C4402C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4953eb47ddf8fed591c7d8926a102a58328776c2f8bcb0dcc6c2f6f790020aa9
MD5 4dce79f6f910909bafe5b8817320847d
SHA1 e10678ff1c26e3e9d2f3bf3bb824dc7adf3c47e4
SHA512 9329ecf2bfca29939d71c91b740a18344d0c73d558771b355af8d5bafc3d053fd9c23a07e1db9b22bfa7909d7bb78bb5272f713dbfc950acdbf066383642330d
TLSH
T146D02BC890D43958E41630351026850233CCDD54F003234780450591C4412C205F0869
MD5 SHA1 SHA512 TLSH

Submit Download

20f65725-bb03-43c2-9a84-5468b4b99b61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\20f65725-bb03-43c2-9a84-5468b4b99b61.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

427f17c5-2bdb-4e04-aba7-c026856893ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\427f17c5-2bdb-4e04-aba7-c026856893ab.tmp
Size 9KB
SHA256 772903af42cc600725c570cb568908bd3ebe6c32e5bcddc9e8dacb4455f3fd69
MD5 4729270ce74c184282fe402203256f57
SHA1 b553d05ff7471513ba64ef1abe5c0d1f1bacfc3c
SHA512 068058d263269c85de0918a15db76a2ec2c54f6294853f83025ccec0a864b266d40b91f823bb000f38c49da569a6fd0eb85fdd23467a9e5ee95d03b32cc94ddc
SSDEEP 192:sxZ2RVWj/fwszbdNqIdpdJHW6+WNGYaJh5dIgrJ:sxZ2Gj/fwsHdNjXHbG/9
TLSH
T1B122C8126E28B57B8CC7D20DBB15BF53E6F9503291D41E88AAFCC61C09E6ADD125780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6df45979-3e31-4959-8759-c3e1d1a92008.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6df45979-3e31-4959-8759-c3e1d1a92008.tmp
Size 10KB
SHA256 b623180894b1ef900eca299c6de3fe3baf1899607d0592c68cb210977363f48c
MD5 8314c380ccf35ccd412c26a842923a1b
SHA1 62f6e0b3f47290722fc1f8bbb0c8df978b05fc1d
SHA512 d4540dd5a7bd863d48f2f261a924b58880fe4866d466867a1306744fad1da4008aadb67524ff06429f388c601c3139f5c280918fab1592e267e9d891da36fc23
SSDEEP 192:sxZ2RVWj/fwsxpdNqIdpdJHW6+WNGYavb5dIg5dJ:sxZ2Gj/fws/dNjXHbGHZ
TLSH
T18B22C9126E28A97B9CC7D20DBB15BF53E6F9503291D51E88AAFCC61C09E7ACD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f15b345-cca3-45c2-84c1-e32e55bc182d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6f15b345-cca3-45c2-84c1-e32e55bc182d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7e7e4b8a-180c-4b33-abbf-0b4c62c153c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7e7e4b8a-180c-4b33-abbf-0b4c62c153c1.tmp
Size 10KB
SHA256 51a13978ceae2449b872656f4df498a6a3b63cb116cf5c667d697cc2358e8db6
MD5 3d4c02b28a20585130e7767ec617e067
SHA1 3916072c037460b0a5374f41cfdf73b79960948c
SHA512 8320d121c2d2947e326d4547200c05fa0495e0a42384446c5047815e0a4d565ca6fddef324cb2aeef252497710c01d01535f043cdf86f92429a8b6f77d4f1cbf
SSDEEP 192:sxZ2RVWj/fwsxpdNqIdpHJHW6+WNGYabg5dIg5dJ:sxZ2Gj/fws/dNjpHbGCZ
TLSH
T1BE22D9126E28697B8CC7D20DBB15BF13E6F9503291D41E88AAFCC61C09E7ADD124740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 ff4f1279d7cfa314cd16f6d4d2d8cfbc30db8e14b2fb18b4a797ec0fa12f593b
MD5 b79351fe642e8df9c7d005fcab6324bd
SHA1 7a065086c50a41eaa01200a3aaf5b9dece242859
SHA512 c7e6174b9f1d072abe9004f8bd80304873c0f41748eed04f6831f990d920f459493847cf386907f37d4f74ae0b4c0c6cdd4fb274fa79cbdcdb3e5d1f4ca48204
TLSH
T1C4616178B8FCC4D5F7D8447CDBD52A8736BCEA829C979EF201A0DB786D8AF101154046
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f5deca409bbf5481f329804704fa9e22e1a669cb4b87ae80d674d3e976679f4e
MD5 20897956fc687c9f87202c7be1694ade
SHA1 e72a4369d06e56738ad89a24a2b0d951af1048f1
SHA512 871a2b60d4f04cd8b6e2753963325f274687ab4278d1262c4f6a734178b18f2640fae6d61175b09ad42cc2ccbe4cd79098888185e3d7d9eb7ee3f086c92739c9
TLSH
T13D615078B9FCC4D5F7D8447CCFD52A8A36BCEA869C979EF201A0DB786D8AF101158046
MD5 SHA1 SHA512 TLSH

Submit Download

76af32bb-bc4f-43e8-abf4-bbc2fc09239f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\76af32bb-bc4f-43e8-abf4-bbc2fc09239f.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

49e9f564-0100-4adb-966e-81beb819e574.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\49e9f564-0100-4adb-966e-81beb819e574.tmp
Size 949B
SHA256 a22a90126dd4ea10073136341c88fbb34d942ed7ba3667ea1abea49e1ee0f930
MD5 510b915a779455d9623dd8381325f60d
SHA1 ab8fb233a126a0a9066a83637d652881d0a51537
SHA512 62732776fe7e590cf59ee5f6a3cc6e6d12c17e9664ddf5ccaceb9c917db470ef8a1d82ae79c55f1451d26b51b45b12148a15c1354a8e6a97489478e1761071c6
TLSH
T1B2117DF7C3D5856E891116F05A28EE1BCE1D0906422C7C15D9D4EF2793E3475E10195F
MD5 SHA1 SHA512 TLSH

Submit Download

97600948-2461-4442-a9f2-f74f08773b12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\97600948-2461-4442-a9f2-f74f08773b12.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f47b14af-633d-4983-b585-a0d3bf8b08ed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f47b14af-633d-4983-b585-a0d3bf8b08ed.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a169ea3c07db9f900806b3d3681e8efe13d586eaadaa4bd0ae8b1f178eea8cfa
MD5 4620ea130fa4632ce729fe829e1f6e63
SHA1 8e3a003d55baddcede85dcbcef2a84f897136e9f
SHA512 9ffc8b538e82e101ccc4ee2a2043d86c489253c71d641e8fbf536e4095f1f6d37de155d97f84a1a3d8591cc2a39cceb9999f8446b6a484c3be3c34038632c7e6
SSDEEP 48:K0hwdR7/DcbvaHISpcK9J1jcxBMY6LBByLtMBdvbfAbzGTISVAK9V13AxFQYWXnM:K8S4K7S6aaoKnKgp6KCsKl
TLSH
T16A914C05316F064039BE284885B5962B564631F3302CE67BBFBC94F64E6AE141DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e363bab2-10f5-4acc-9904-b88a540150c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e363bab2-10f5-4acc-9904-b88a540150c7.tmp
Size 27KB
SHA256 507d103c1107abd96d9ddee7ed07917d6873682697c0e788203a8d703688fe8a
MD5 4b8077dd0baffc4e2b741da19e4ec1ce
SHA1 eb714fbe8e05162c1f8189abb0f619258ef492f7
SHA512 a6a13981ae3d488f8a0db0d7634fa71ec28b39cedb892e5d8b306d3e46d63879b899631c1d99a7a0f9c300ae31ffa6fc735a5d2f176844767e593938455469a7
SSDEEP 768:E9yQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH33roAZWzY:E9yQRbrWvvlpZu1jaXKLf33kAZEY
TLSH
T16EC2E93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fc1b6eb6-492e-4d74-81e0-d1ca5a19b104.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fc1b6eb6-492e-4d74-81e0-d1ca5a19b104.tmp
Size 9KB
SHA256 82331d29014ad03ffdeff705ab9a92c7a83a83f579bad878da7184560a5e89c2
MD5 5fd841390e390f4849733689712b27d9
SHA1 f40e69ef2b12b4a81dd4274c5ba5eee5947bc746
SHA512 2931758768023dee79b71b5c0e5e24b79887c39049af07e86838de76cd0da87578ec1a4341c77fa700879b2f52644f28c158493f05dc76861d14984f14519637
SSDEEP 192:sxZ2RVWj/fwsxbdNqIdpdJHW6+WNGYaJh5dIg5/J:sxZ2Gj/fwsNdNjXHbG/n
TLSH
T11722B812AE28B57B8CC7D20DBB15BF53E6F9503191D41E88AAFC861C09E6ADD125740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5cbdf51c-ab26-4bc5-9ec1-297c77d8a47c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5cbdf51c-ab26-4bc5-9ec1-297c77d8a47c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

b318f52b-f985-4874-908a-572767849f4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b318f52b-f985-4874-908a-572767849f4a.tmp
Size 8KB
SHA256 48163cf026f6ca1c09d0360743179e3bed9e53508f3ba0f2a292aa7e8736a597
MD5 9012c0b1c86906aeee62a9b7d5d9dfc9
SHA1 f5ced8b28a07f4bca6b2d90eb580e506108cf43b
SHA512 40015e2a1c02e8e754674edff7dea7014c8a008979c21d09b61220cdf86c539f56e5218d69c8ce838c240497469f30c8b691ba33ab49f6fe2f4a9bb751519e8c
SSDEEP 192:JONg6iD2QmiUyKWeq5u88PA9+aZuZDq4U6:JONg6Dceq5u8i0+aAvU6
TLSH
T1B4124B36AC78AC6B6EE39960F04336239EA4426BD7886FC0D9DD271C06EF59C1307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eec79819-8ea4-486a-a7f8-b24421787b24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\eec79819-8ea4-486a-a7f8-b24421787b24.tmp
Size 18KB
SHA256 b3dd311e16288cd92dfdc49d6a0da6d54954356f97db6e6880732c3570ec463d
MD5 7955e49185da061fa4604db0050a65ec
SHA1 a8eab2075e2eb9cd535e7e1daa90f797cf37ca61
SHA512 34d554cd6283424eb63ca1c63e92bed867d75da15b2c0f44edf06ac208b4a8eb855502a5a50ac56f0f82e071b144e2ab985e196aabfaaf22790ecb193654de81
SSDEEP 384:GQkUSv0sNV+K/UjLup5u8i0+aSvH7vBEkXrIIlF:m0U0gkCSvH75EkXrLD
TLSH
T1CA828D36AC786D3B5EA39520F10A3663AEB4816BD7D85F80DDDD971D02DB2DC2307912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

734abc8c-631c-454b-8009-387779039324.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\734abc8c-631c-454b-8009-387779039324.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2aa46cbf591ae86d2f1481bb957a0c05fb3193f6e9dcdb2957da170609996837
MD5 a6a2feaeaf140ff5378d822931f76cfe
SHA1 8bff0e4c309e805de692dc127a0e9536129d705c
SHA512 7ae7996fdfa3b5ceba118ea9f838bedfe153215a63d2478efa094a816e49ab01e021c53e17693b7a3c229a22e8ab132d971fa0868e8688ba0a0b656253e9ff80
TLSH
T10841FB58A6E91108B3B37F165BF7A86D587AB9773E46D55D10010E4F0A22A40DDA2733
MD5 SHA1 SHA512 TLSH

Submit Download