0c7f756e89fd442d62a8b1b1e3783c7869c98b6597de97cafc06b0e5e52ee476

Analysis

max time kernel
149s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ca/batalkan/info.html
Size 7KB
Sample261002-pmlleaaa49
SHA256 0c7f756e89fd442d62a8b1b1e3783c7869c98b6597de97cafc06b0e5e52ee476
MD5 9feca4c5194515d9f40786f3cba9b0c2
SHA1 abe469c3bbc8d48e44af165e859c69630cd4e274
SHA512 a4407dee15ad4ca51f344d3cb0d364ab59f304033e20d45a04bb9cadbf40d6bcff21b81e433c19a3b3bcd02643af662911777f8e62fea3372eaa47a93c0949cf
SSDEEP 192:6OnyAUIA+F/zyjpB/nR3POTtrh/wqU2IzdrH:6OnVBjFOp4trhqzh
TLSH
T1BBF1B622DCD3A08BB02780D9A5B1EEA4733E8543B746DD6871FD2571FF826E44023B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2132	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{CBDD9901-CC7A-4D41-B512-3191B3C4654F}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4428	msedge.exe
4428	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe
4752	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4752 wrote to memory of 4960	4752	msedge.exe	86
PID 4752 wrote to memory of 2132	4752	msedge.exe	87
PID 4752 wrote to memory of 636	4752	msedge.exe	88
PID 4752 wrote to memory of 636	4752	msedge.exe	88
PID 4752 wrote to memory of 636	4752	msedge.exe	88
PID 4752 wrote to memory of 1904	4752	msedge.exe	89
PID 4752 wrote to memory of 1904	4752	msedge.exe	89
PID 4752 wrote to memory of 2844	4752	msedge.exe	91
PID 4752 wrote to memory of 3008	4752	msedge.exe	92
PID 4752 wrote to memory of 2844	4752	msedge.exe	91
PID 4752 wrote to memory of 2844	4752	msedge.exe	91
PID 4752 wrote to memory of 3008	4752	msedge.exe	92
PID 4752 wrote to memory of 3008	4752	msedge.exe	92
PID 4752 wrote to memory of 2044	4752	msedge.exe	93
PID 4752 wrote to memory of 2044	4752	msedge.exe	93
PID 4752 wrote to memory of 2044	4752	msedge.exe	93
PID 4752 wrote to memory of 3844	4752	msedge.exe	94
PID 4752 wrote to memory of 3844	4752	msedge.exe	94
PID 4752 wrote to memory of 3844	4752	msedge.exe	94
PID 4752 wrote to memory of 3676	4752	msedge.exe	98
PID 4752 wrote to memory of 1956	4752	msedge.exe	99
PID 4752 wrote to memory of 3676	4752	msedge.exe	98
PID 4752 wrote to memory of 1956	4752	msedge.exe	99
PID 4752 wrote to memory of 1760	4752	msedge.exe	101
PID 4752 wrote to memory of 3148	4752	msedge.exe	115
PID 4752 wrote to memory of 3120	4752	msedge.exe	116
PID 4752 wrote to memory of 4784	4752	msedge.exe	117
PID 4752 wrote to memory of 3556	4752	msedge.exe	126
PID 4752 wrote to memory of 3556	4752	msedge.exe	126
PID 4752 wrote to memory of 4428	4752	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ca\batalkan\info.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff6da5c188,0x7fff6da5c194,0x7fff6da5c1a0
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,14877941489180075402,14389888323912047715,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,5079441894750556385,15003183260814755673,262144 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,2781277041742117154,8183216086179255667,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,17960728580507044339,2406459346953118241,2097152 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,5942654319573727524,4507920641811421025,2097152 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,613618283620301460,17776110463281906855,2097152 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,1957035941533419695,7407295432590953123,2097152 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:2
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,17899141180210606648,16172211383700554118,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,7598715700032490894,15806218316537117376,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7612079874532103384,2841275609675355393,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,7612079874532103384,2841275609675355393,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4268,i,5797673212363025096,888976155255621367,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,3068266893916650944,14800861322560996684,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4288,i,5809826901668704598,11672992657446362294,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3008,i,16873171619196123735,8319084316924139787,524288 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=1924 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5228,i,2135403135357175626,14373228385094542760,262144 --field-trial-handle=2280,i,17966274664769225400,14307378204706921664,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4428

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3780

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

140f9e47-81bb-47c2-a041-df5b5fe63a1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\140f9e47-81bb-47c2-a041-df5b5fe63a1b.tmp
Size 18KB
SHA256 3c40425a5cb6356e8aa51a02c717a7db1a109d2a8c4cc0bf27cc1d49946a9eaa
MD5 ed26e214cdf61c279353ababad7eac10
SHA1 8c52d3ef705cae10ec3b03ad6b0764ed6d2c6452
SHA512 f6dbd5ea73b83595f3848909cb28ad19459426a27becb49cadd2c3207e08ec6c5b3d534bacf90657d67bdee8e489e2d801e27261dcc785c98773c60c9825e458
SSDEEP 384:wZcIhsNKiwZNKFdwOjTV+WOiGewjE+26gtgOIwZOyWL6oa:OhvwDnzODjEl6gXsFeh
TLSH
T1FD828D32AD786CB75CFBB145F48A36038FB88167D6856B94D5ED6F0C01DA6A8230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68580476-a6e5-4cac-ac1f-2fc48a6a2d86.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68580476-a6e5-4cac-ac1f-2fc48a6a2d86.tmp
Size 8KB
SHA256 4c9e5da09d6652c9192814150f7c655407e717c38351d4bcfb9ed97a8dd89286
MD5 bce38c3d4cb043ea09c3896822dc3449
SHA1 f91e8d8134aa8f6a6035cbf32132c8c8ac5c2c66
SHA512 9c6ba41a3efb97f3f93f1c8f94f27540f56dfc5265e1d811776139a4af4f0fb37b74eab8e6d7cb34edd94a94cfc79abb02b81891e5124eea0a0528c6e74b8d49
SSDEEP 192:SONu6ygpQmiUyuJtOCTVg5WOiR0KzPYAU6:SONu6lHZtOCTV+WOiGUlU6
TLSH
T17602C834BC683CB79DB3AE0AF58B37179F98116BD9552B84D9D81E1C01D766C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

776881d1-d1a8-47b4-9139-40042b810477.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\776881d1-d1a8-47b4-9139-40042b810477.tmp
Size 21KB
SHA256 cbb8613218ad265b9f3b0d69f78c50de7f3de0ef240fcfa9b8a3ccdd756d3017
MD5 e6602c69ab7918eee086b8b1c4dd152c
SHA1 368678bb3db07941848be25b9fae852e8d3d7593
SHA512 c09187d74ec74ab7f47276256f44671fb22d38660634081640b6082fc75a17e4eb659541777a295b7c5a41c0643f4a40c67df27f1085c57fd59b538c1c9c6266
SSDEEP 384:liFiZcIqzsNS8TUNTUlIl3wZNKFdwOjTV+WOiGewjE+2XgtgOIwZOyWL6oa:sFQi/wgowDnzODjElXgXsFeh
TLSH
T132A27D739D689CBBADFAAB45F54A32038FB84167C595AB90E2DD6F0C009B5AC130BC15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7ff0d8b7-ae0c-4717-bb06-599755c9e1ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7ff0d8b7-ae0c-4717-bb06-599755c9e1ce.tmp
Size 18KB
SHA256 bfe7984d6a86edccf646b147d24fefbf02cbc130cb44c784f3c04971ef694f7d
MD5 75bb80a1ed0b9b72e73675896ee4931f
SHA1 d996bbe4bb2222698c246eb1ffa459b05c9081bf
SHA512 39e1605423e4576a2f0402b44386643342d212e268cf032ba122548c1c8043abcaa7f780f6ed40447c94d8fc7204cf3b9eb82f4313b9619e065fdeb68706bbe2
SSDEEP 384:MZcIhsNK3wZNKFdwOjTV+WOiGewjE+26gtgOIwZOyWL6oa:ahIwDnzODjEl6gXsFeh
TLSH
T16D828D32AD785CB75CFBF145F58A32038FB88167D6856B94D1ED6F0C01DA6A8230BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a93b8d05-3b9e-421c-9eac-a0abcb1e17bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\a93b8d05-3b9e-421c-9eac-a0abcb1e17bc.tmp
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f6bff0f027b4593220ead05713bffd7b3d5423f6191a2524fd76dd83ff0eb23f
MD5 30591b0f3de624921162fd3a45ebe21b
SHA1 1875648c4ccd30a3e9006368fd4fa2368d87828f
SHA512 597d1be49f44efaefee912dc403509ac948d2981ce2a8c8038290e6f3e098f8b373930b866b23d4fd25432dcc9ac6f1d6e1bb26298fd76bf73c91db3821a921c
TLSH
T108D02BF899C80510C08230792137824133D9E6108103200990E107040C103A31200460
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c02af0b53b7fa79987f046aeee8ae8328d6e30eec401b85fb659fff3686e22d9
MD5 60b4515826d1c9f4b017a7d286115708
SHA1 91a906bd437f5276b450fa960823a1d8884f5b5c
SHA512 49ec0ba508a1c4d76e366cceb731579d594d5a8727c9089704a8f0f492164a13db6579377d36e91cd39359f1ee2ac85e2aa9a737f1640db34a67d8a1c0d408df
TLSH
T176D080B49D685AE4D0A5307D1335454173DD97529603210D65D10A150D743D31551CE5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7ef3b734c787633afe5b1c08a8ef08bde9d8879f31c826caf2e652aa614df86d
MD5 f6bf3c2e07439d9cb62d723d60e7ac3a
SHA1 572358d019a9f66b124eee416f35ea7195ac64bd
SHA512 f50fcdc5af36ec0684d7e4bcb343b9b713dea31b4539d18b949e37972279e41e6475068981ccee1ded1bb56eabade7faecbd57382d87939c090e6bc1fe3826cc
TLSH
T1CDD02BF859C80910C48230792136824133D9E6108103210A90E107040C113E31200460
MD5 SHA1 SHA512 TLSH

Submit Download

4b86d7f7-5a38-4f0e-9620-4e23a3f18dad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b86d7f7-5a38-4f0e-9620-4e23a3f18dad.tmp
Size 10KB
SHA256 0e1e421af72e9cbe23853cd8e41e781c27cfebbd293062277a1a98eaf6689f52
MD5 7dd21dc6f4d5da61b0fe0dcd503e5138
SHA1 a593dbc99bb9eb03156baae5e8cc3e426e95abd8
SHA512 a275e8c870b2a2e98c90af6c5c4c4e89f29e27df9e8bc8f1a0b057f4a23c0aab5300762fe631056d22f3413923f4e9ba9b37f43c1f9a0dc2ef8870aa999e4348
SSDEEP 192:sxZvRQWC/fSsgCIdpdzHW6+WNGYRPB5IIg5hJ:sxZvdC/fSsgrhHbGmMV
TLSH
T14F22C8556E38787B8CCBE209BB157F53E6F9503251D51E48AAFC961C05EABCE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a86adbf-b8e7-415e-8bae-48fee75be0ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a86adbf-b8e7-415e-8bae-48fee75be0ac.tmp
Size 10KB
SHA256 cf1d46b55e6788361acaa7cad4fe60537217b7b5b1bf15a4758cd62e8d47d26c
MD5 de057da3335c8c2363f30112922514c4
SHA1 cf2a57ea93fb9d395d13fc1bd8c9666d7cad5233
SHA512 bca1181afece8ef6be2a5de78575361687766af8383b42ad45bf16ebee9c8ac3138cf7bbe21855a5860792b0f0ea7bb055296371896c0bbb599f7dc1ac7ff924
SSDEEP 192:sxZvRQWC/fSsgCIdpHzHW6+WNGYRPi5IIg5hJ:sxZvdC/fSsgrTHbGm/V
TLSH
T17D22C8566E28787B8CCBE209BB157F53E6F9503251D41E48AAFC961C05EABCE230740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 16282e624f13d40a4764d27d81f078d343292bef420b1db4c6c75ae77b7f9353
MD5 0435fd06b8a7bb08e23adafb578dcd65
SHA1 91c12e880976b0a5bbe3df2bf8757a293e733db1
SHA512 156aa4b7f79a759507ef382c440a8f1dc771a2b7cd8cacf8e612f8ef2cc1e69c5871d7197a91cbbbe7fba8ea9392c90f1441974988ca9c09c7afdc272e849ee5
TLSH
T14C613D8181E2446DFBA5C973D2F91E8B3E35994099932D4222BBFF758C0BFC5E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3d758fbe108e23e34254bd12eb9d64a321ff30a68b9fd8780908bf2174aa9f88
MD5 6fb78b477f06d7f121f29319c24cae71
SHA1 5da21cb96bee29e59c3bbc8ff43889c8a61e1ae0
SHA512 d72257a9ef41273e2dd8801617b3be74b7cd923d8c5ee7ce134ac8b9ad3b86f5693e19d188fca9e842ace157176a3967bdac9c0bb231f5e530007b46e9cbe84b
TLSH
T119613D8181D2446DF7A5C973D2F91E8B3E35994098932D4221BBFF758C0BF85E16C058
MD5 SHA1 SHA512 TLSH

Submit Download

b218c364-4808-4ef3-be88-c5ff56886b23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b218c364-4808-4ef3-be88-c5ff56886b23.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

7a677e18-65a8-421e-bf65-bdb381dbbb0b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7a677e18-65a8-421e-bf65-bdb381dbbb0b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

abe80b44-6004-4bb1-b50d-6d3681b5142b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\abe80b44-6004-4bb1-b50d-6d3681b5142b.tmp
Size 1KB
SHA256 aafbb4eb7ce3ec0f812d7667157dbd715b8b337faa3d9b91e256a2e03b6f09ed
MD5 ec1e13ad8ca8d348dd5b2f30a408b9cc
SHA1 225da2354f1e75ea85c59137b52f00d2bf77372e
SHA512 86bf404ecd6296196eab92daf32be8e4f53bee1be47d3d4c801ceba0dfeec1863020c1c81a4755521b380cfe1b3997d4e31e9c55decb4ea0a2c92bf7e7d1c7e0
TLSH
T1D42190F7C3E587AE891156F09A24AE2BCE1C0506532C3C5689E4EF2B97E3471E10169F
MD5 SHA1 SHA512 TLSH

Submit Download

bfd48d21-7e30-433c-b602-0831e781b9b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bfd48d21-7e30-433c-b602-0831e781b9b9.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 70eeec4e18792f75f9dd6479385e0fe92c8e090402843b8f0b21970ea8c61908
MD5 476896c89adcb56ed11b758e47b76ea8
SHA1 df1ff9d43d46b5daf060a9d9aaefb555ad0dad7f
SHA512 980fcc9c89d957c14f93b400b767d31ca4e7883b0584aa1cc3fc6c165c7a941a76bfd1f3669e461f78d06ca9bd3786c237087477717494d78dcb998b97a198a1
SSDEEP 96:K0mgyR+isQMoIo77iKoK6tiUomqqrUilPHKlZH1VRI5YMiBRK6YinRmP3gBktyKJ:XpncE
TLSH
T12191225271BB12913CBE295881B5861AA25131F23518FA2F7FBD00E14E6EE045EFF8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a766abad-2297-43a5-967e-1854a68144d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a766abad-2297-43a5-967e-1854a68144d3.tmp
Size 10KB
SHA256 e0104d76dfcb38b38919d4f2e5e4eb4f3d5212dd785386bedadaa30a574303ad
MD5 2a754863d5308e5c8ecda749b229c656
SHA1 e4640f21492fbc53f8600eee807f5a116ef3438d
SHA512 9141bd8781d39b51ff7c69fc5ae10e4b1ca4b3b374ae58f3b589725050b0324c4c76592121ea577f36e5d05a6bfa17a4af299eb00dca9ce447181430981610d0
SSDEEP 192:sxZvRQWC/fSssCIdpdzHW6+WNGYRPR5IIg5TJ:sxZvdC/fSssrhHbGm8j
TLSH
T14022B7556E38B87B8CCBE219BB157F53D6F9503291D41E48AAFC961C05EAACE230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b7fbfffe-04af-4c60-bbb9-0b18ba01a0b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b7fbfffe-04af-4c60-bbb9-0b18ba01a0b1.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

c2b0333e-11ab-4e9b-8e0e-ad221168f314.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2b0333e-11ab-4e9b-8e0e-ad221168f314.tmp
Size 27KB
SHA256 7486d76e3992649b9f3ae9a0a73f751bf07aebf5fd69895f67acb877824b9703
MD5 9318b7cf04591f58ba6bcfe4dad3df6b
SHA1 f195bd91b73bfc5c5c8d432491da233efabef81b
SHA512 f63e5c229ea0051d2d864cf2f6c530852c29f4ccbc764224f70e2bbea5bdd0c9d02cf5d926573cb2f7aff982d9b61e989f2fcb0e26bec4e01a9426bd040d8171
SSDEEP 768:MSK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3vrof28+oT:MSK9uzYWvcQWsu1ja0HL7Q38fr+oT
TLSH
T106C2F93F640CCB7E5FC01A9DDC5A6F973E9802D7A6584D4047FA984C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d26ae03f-6701-478f-a2d9-dfad24c1e6f5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d26ae03f-6701-478f-a2d9-dfad24c1e6f5.tmp
Size 9KB
SHA256 a1a7194924df477642f8c279b86667f4c992744680611a05ba7b1886a8bfcffc
MD5 a86148c6f4dfc1e3e639fea02e52acef
SHA1 61ebcbd017393140da23f712d8771464549dee1c
SHA512 71a63a619aeb074b03bf2c132a9e3253cb0184c31d6625e197a374ac14a9f4d712eadae39a6ccf10cf63d8f13da78c2b1d0caf7141e0b88667527be828219636
SSDEEP 192:sxZvRQWC/fSs+CIdpdzHW6+WNGYRPR5IIgrJ:sxZvdC/fSs+rhHbGm89
TLSH
T12322A6516E28B47B8CCBE219BB257F53D6F9503291D41E48AAFC961C05EAACE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f0644a44-e831-4787-b2a7-c2c12bcfc0de.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f0644a44-e831-4787-b2a7-c2c12bcfc0de.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2df4fcf3-6377-4d34-938d-be5bc0a341d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2df4fcf3-6377-4d34-938d-be5bc0a341d7.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

de4f32e8-38d0-44de-820f-45eecaa7a7d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de4f32e8-38d0-44de-820f-45eecaa7a7d3.tmp
Size 8KB
SHA256 2097e2f5c9ba51fbea82d9a9eb67e6efca966a520f20fde67a4e2ec8c9f09b71
MD5 a9117c999a75b627555ab2ff3861764c
SHA1 4760ca9f1cb1c57b23da29ae7fe4cc6e0dc46b06
SHA512 198a6a10ecb2e3f3ff18b6f6089345219f9f07a538bbf8e05ffd42e627af7465fbdaa82c52ec1c3874f21bb4cc6d5dcbdea985cb9a67fc8ba48c733bee075642
SSDEEP 192:SONr6yLQmiUyYJwOCTVg5WOiR0ewjE+273U3qvU6:SONr6atwOCTV+WOiGewjE+2IgU6
TLSH
T105120835B8786C775DE2B645F48732138EA84167DA867B80E5DC2F1C01DFAAC230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6845963c-5e54-48cf-882d-031a177d751e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6845963c-5e54-48cf-882d-031a177d751e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 98bbe1500c64616b841a33f5b02ce01a5dcadfe00cce87c033ce589fc14f1127
MD5 e527885fc25c8fd1fc309b5a6bc3f2b3
SHA1 793c9e1f8f5f245b00fdfda58a6a9779a63cbb8d
SHA512 f74c76cbd7ee216978b31d81e105bb8d33dfc650cd05211e28ca7615590dd178d6459e70d92b2efa023c17303bb32ecfc13ace176ae8a0f98c09dede2b8d04c9
TLSH
T1E041FA58B6E91158B3776F5AABF6686D44BB78732E06C45E10110E4E0A63B40DCB1737
MD5 SHA1 SHA512 TLSH

Submit Download