bfa2f80049312af0d02b69369a7a233a708d11f0e628047228c21ba4d1934835

Analysis

max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 12:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ca/blokirkartu/index.html
Size 28KB
Sample261002-pmlleaaa49
SHA256 bfa2f80049312af0d02b69369a7a233a708d11f0e628047228c21ba4d1934835
MD5 e61a53506371496fb775e40754665adc
SHA1 ba7cd284119b6d9c04af3f8502b5457cbf0169dc
SHA512 44dcc2aac1d6cd88bb0a6d892614eaa90cb319be71fe4d24723e8cd44bcde814139e475f4b4f07b3803722ab08ec4fe93d87945658f0012aaf5324654175ab7c
SSDEEP 768://rf1PPVEr6eJZqsZcWZ1AdG65Z8eqzCVcUyrATomOx9c:TnJXEY0eEjc
TLSH
T13AD2E733F2600108A267C516ADD2679DF219C403DE439AEDB9ACA610DF4BEDB4673B5C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3136	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{A66CD12F-D547-4ED0-842B-0E689F856727}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4344	msedge.exe
4344	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 2492 wrote to memory of 400	2492	msedge.exe	87
PID 2492 wrote to memory of 3136	2492	msedge.exe	88
PID 2492 wrote to memory of 2676	2492	msedge.exe	89
PID 2492 wrote to memory of 2676	2492	msedge.exe	89
PID 2492 wrote to memory of 2676	2492	msedge.exe	89
PID 2492 wrote to memory of 2744	2492	msedge.exe	90
PID 2492 wrote to memory of 2744	2492	msedge.exe	90
PID 2492 wrote to memory of 4876	2492	msedge.exe	91
PID 2492 wrote to memory of 4132	2492	msedge.exe	92
PID 2492 wrote to memory of 4876	2492	msedge.exe	91
PID 2492 wrote to memory of 4876	2492	msedge.exe	91
PID 2492 wrote to memory of 4132	2492	msedge.exe	92
PID 2492 wrote to memory of 4132	2492	msedge.exe	92
PID 2492 wrote to memory of 4980	2492	msedge.exe	94
PID 2492 wrote to memory of 4504	2492	msedge.exe	95
PID 2492 wrote to memory of 4980	2492	msedge.exe	94
PID 2492 wrote to memory of 4980	2492	msedge.exe	94
PID 2492 wrote to memory of 4504	2492	msedge.exe	95
PID 2492 wrote to memory of 4504	2492	msedge.exe	95
PID 2492 wrote to memory of 3980	2492	msedge.exe	99
PID 2492 wrote to memory of 3980	2492	msedge.exe	99
PID 2492 wrote to memory of 2572	2492	msedge.exe	100
PID 2492 wrote to memory of 2572	2492	msedge.exe	100
PID 2492 wrote to memory of 2176	2492	msedge.exe	102
PID 2492 wrote to memory of 5028	2492	msedge.exe	113
PID 2492 wrote to memory of 1032	2492	msedge.exe	114
PID 2492 wrote to memory of 4276	2492	msedge.exe	115
PID 2492 wrote to memory of 4212	2492	msedge.exe	123
PID 2492 wrote to memory of 4212	2492	msedge.exe	123
PID 2492 wrote to memory of 4344	2492	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ca\blokirkartu\index.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff6636c188,0x7fff6636c194,0x7fff6636c1a0
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,16929023609981842358,16220249536411425242,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,33730944494950085,9555483349010073056,262144 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,13681676327752173255,18274310168352086406,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:8
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,14961389842018077353,2099937801039227722,2097152 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,2721613623088142951,5094963518649250132,2097152 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4184,i,9621332136194915060,3772257329004252475,2097152 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,8113804565537108850,13112059682261847937,2097152 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:2
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11484337192063037377,7409261577864630627,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,2306379143636377386,15354473804354289015,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15977644474378179674,5070207384863633701,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,15977644474378179674,5070207384863633701,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,9831092016350506913,10762714059414190642,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,7868704334722420963,2500972369711471401,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4224,i,10835194867338907799,16188502787981191036,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,17558704399793813652,12576739712089316452,524288 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=780,i,9251616169263542072,9807331764362299663,262144 --field-trial-handle=1984,i,6172298519266554270,1781704743606869167,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2308

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2c094eac-d1e0-4ee8-9f13-286b401b6eb0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c094eac-d1e0-4ee8-9f13-286b401b6eb0.tmp
Size 18KB
SHA256 70cce421fb004869f8f90a981073865c985f7ebca1bdafc312dfc0d2b3e93145
MD5 100f0ad7434ef46f12ec06f810aeec9f
SHA1 20c71b6844ab7801ee018bc37499dcc73fd5147b
SHA512 6277b4c49c95349be53d61899472af6b003e52eb88be368df8500af62a369e149eb72b8c4f80e9f3e1b19046b3f2685c67fb5690e885fd030a549c7f774832f6
SSDEEP 384:MZcIhsNGVFdpbN3Qh//WIC1c51tgOIwZOyMLSoo:ahXs/57Xs7e3
TLSH
T1A5827C329C78AC7A5DFBE145F08776034F788467D2C59F909AEEAB1D01DA498130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

35978285-ea7e-4a19-b0f3-3a0f242b0889.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\35978285-ea7e-4a19-b0f3-3a0f242b0889.tmp
Size 8KB
SHA256 f04d1893316fa2365b15b5a5b471e97e125df9c9cd3a909a0319aef64b4fceaa
MD5 e6b43104b6da69192c0a07a06f3a3465
SHA1 37d3469358a1a5109a54fff9545ef20b6e83e35b
SHA512 5d156f8ccfab36bb92ff97112d63392d625e80e5307fdc0b1e6d41eefb93e8a1802dfd64ba2e55ceffdc7154315f47b9321b1930dc711717ea79885c7547cb40
SSDEEP 96:KqONkLQsjpfbUmjH5ih/cIPURHl8h4otop5ZaD5BKP4v+Y1xf//ojdhxlDeYu7Mn:BONz6JUm0QmiUySfso//WA7MBCwPU6
TLSH
T1B402E939AC687CBB8EF39E45F04777239FA4107BA6951F84DAE92E2D01D755C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7361bae0-0a44-4077-91e8-82137f7e1a84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7361bae0-0a44-4077-91e8-82137f7e1a84.tmp
Size 21KB
SHA256 4a1ab2295fcaa08ee7db629763a76a7f7388fcc9226e0acbb72bb62d55b511ae
MD5 11d9143dc9cf7d72193c83197f0af65f
SHA1 4fe8bbf43c09502d61595561e125684f450963c6
SHA512 2d4338520e6a943df709230fc69acb7199528d77d396018d392a1f6d527176629ba43edad99acebf6d767d76db65861ae23ebe4b3288d1094cf8e0694cc3b3f7
SSDEEP 384:TiFiZcIizsNG8TUNTUlIlIFdpbN3Qh//WIC1u51tgOIwZOyMLSoo:+FQqjwg4s/B7Xs7e3
TLSH
T1C9A25C335C68EC7FADFBAA45F54632039F7445B7C6C59E90E6DDAA1D019A0D81307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8b4447e9-1ad6-4ca0-a38a-7e6840e5219c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8b4447e9-1ad6-4ca0-a38a-7e6840e5219c.tmp
Size 18KB
SHA256 ef11cdc0708acfdb3f30b31128cf212fb03bfda1f72cafdb10f436dd4b32c24a
MD5 48d59ff7729525b663a96240b27e4d71
SHA1 ee60803bcd9591a01ee87073fc54c83453d86f74
SHA512 063610b00e34defaed9dcef6b53c5254e94d86bfe2072b598528aaf835c965c040cbad0aff7bccc3a6aed700c6035cd1a7eca8ef868bd1446926cbe5b683fb01
SSDEEP 384:hZcIhsNGIFdpbN3Qh//WIC1c51tgOIwZOyMLSoo:phss/57Xs7e3
TLSH
T118827C32AC78AC7B5DFBE145F08776035F788467D2C95F909AEEAB1D01DA4982307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

91c55a34-939a-4e23-a5d1-a03fea0df410.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\91c55a34-939a-4e23-a5d1-a03fea0df410.tmp
Size 8KB
SHA256 8046f4ddcafb25c0b41ee4481595188e8bb5d73acef40a9b5f5376ecfd99be8d
MD5 fec45af3d32a1eb476db42ca51fded56
SHA1 dc765fa76607f23b137eec48005040bb67883008
SHA512 eb7a6ce55d7078876980eed42d200d57fd3fb7be397387f7329f9493f9d2199bc4961ca2098883d53cc941342dc8d831a43e7915be8b346295e3762f5793858a
SSDEEP 192:BON36JUAQmiUyvfQo//WA7C1GezBNxpqO1U6:BON36+AEQo//WIC1/51U6
TLSH
T1C7121A35A874BC7B4EA3A551F08736139F744167EB896F90DADD2B2C02EF49C5307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

59397496-f822-4575-a6a2-cc21b3c6920b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\59397496-f822-4575-a6a2-cc21b3c6920b.tmp
Size 10KB
SHA256 29972e1173456ad3db8544196d5f87046842de527d4e591742797a6944486d1e
MD5 104b1590a25079e1eb8b5e743a2f558b
SHA1 99ee6dbb7e0c900d2b819bd865dea374ccfd86ae
SHA512 82440db31940714ff88ec744a1caed5260676fc84ca8fd6955282eb5223f44f19a82de14de47b4984d41a0f9a01f23a3c5f52fa8b9a7406db7491ecccee7a4ed
SSDEEP 192:sxZsRTWU/fUsuQnIdpd1lHW6+WNGY36asGrIg5MJ:sxZskU/fUsuQohHbGXAa
TLSH
T1D922C9516E38B97B4CCBE20EBB55BF53D6F9503251D01E88A6FC961C05EA6CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6bd6976e-dfc9-4348-80e7-fc964330e66b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6bd6976e-dfc9-4348-80e7-fc964330e66b.tmp
Size 9KB
SHA256 e437b29864e0e64ca1b1b9a14937d5721e311013b44e78abe672fd8a05b103e0
MD5 55bac298dd7c79bdd60bd569623f24b6
SHA1 e93b03a385c55eaf3f84459c2d4a6af7f2cf6856
SHA512 a965aa7a38d5b59b4834c52ed0761dd13360f2d9e9e29fa7302d701a479f98c7d7da66f43a1fd2cbe3e155faa2a5c32a388d6a0fb4d7785b61f996eb1259d4ab
SSDEEP 192:sxZsRTWU/fUsCQnIdpd1lHW6+WNGY36asGrIgrJ:sxZskU/fUsCQohHbGXA9
TLSH
T19722B9516E38B97B4CCBE20EBB55BF53D6F9503251D11E98A6FC851C05EA6CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

80058757-887a-44b9-b14b-4701299c0f83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80058757-887a-44b9-b14b-4701299c0f83.tmp
Size 27KB
SHA256 a1e7efa8d638214eabde100a69bd86c1f47955f5eda95cab7b8c5d21e4dba6c2
MD5 c7725b23ea14dee92d1eb54f3b63e6f2
SHA1 31e251f033b45b211282a7113db7076123283bbe
SHA512 b0957d44f45888bbb85aa98bc4bf3b831227a162db739d046ed85e14f7fe76b3da961b8fd5d4d5ee1b7feb1888683a4b4546fc64aca2e02a020f656961956769
SSDEEP 768:DbKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Iroi7z:DbKlm7QWvUYe0u1ja8/L/E/zi7z
TLSH
T1B2C2FA3B640CCB7E4FC05E9DDC5A6F976EA802C7A6588D4047FA984C02C77EA91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

99b86cec-5c60-435f-8a6c-e107c26e59e2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\99b86cec-5c60-435f-8a6c-e107c26e59e2.tmp
Size 10KB
SHA256 d5f1bef49176d20713fe8b2836c0ecca14bb0103d0bedd30bb292895ca8e9e75
MD5 4976be3768ca86914496f922cfc67dc2
SHA1 f5d210cd322312bb9f9b543c38e30d812682b438
SHA512 98dc710acb5396ad0c5590c4fc6dacb7a580c9b8367a91579b8976c4b1603f2418e1d75c12838462a563deaae12865ce02353665a3a5dc40c8b9b5bc47371850
SSDEEP 192:sxZsRTWU/fUstQnIdpd1lHW6+WNGY365sGrIg5+J:sxZskU/fUstQohHbGXro
TLSH
T10122B7516E38797B8CCBE20EBB55BF53E6F9503251D11E98A6FC861C05EA6CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 19f3d82d26ea30124d64fbc21c09a26ad181a459d95a23783a39babacbee5eaf
MD5 cc4ed00d2b118784fae1b86ae46986e6
SHA1 886692ba3e1ef65cf088c92bfa6848f754c821f4
SHA512 aee30c6043b6963c2a5cfbbe4bed3adefbb49137ef963bc615a2396d3657664f4be817f9f809a18660277ff344d5ebc265d4caa81343384379123a65c19a464e
TLSH
T141510FCF63D44461FBEBA17C81DD3E87363755C1249FAEC234A8C8BB940BBA04118464
MD5 SHA1 SHA512 TLSH

Submit Download

afae2f26-611e-4df7-b7d8-95dda2be609a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\afae2f26-611e-4df7-b7d8-95dda2be609a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

3d739fa9-5852-4b90-be5d-636ca9e3d11a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3d739fa9-5852-4b90-be5d-636ca9e3d11a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

442380fa-2752-4497-881f-3b94dcf55485.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\442380fa-2752-4497-881f-3b94dcf55485.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

fe609548-79c9-406f-baea-432ae02633bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fe609548-79c9-406f-baea-432ae02633bc.tmp
Size 2KB
SHA256 28a4074b93a6bf185b3d7bd4625c3787059aeff27e7f4ad747c7b3d9036e1bbe
MD5 9fc24a33334060f97c3776e0473c0674
SHA1 a6d69e65c7572467e445ed4bb43d96168d7ff486
SHA512 f4efc1ba9fe668debac784629dbbc0f04c9c5269ce6b93d707a4353dc52a975b5c0ec00d6d2c3190b70d7ce7c5eda2ffb8b65718785d1872864c9d67ed9d53f6
TLSH
T1F5418EB7C3D4877E890116F45A246E26CE2D0646422C3C1AC9E4EF5FA7E2471E2025AF
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 3f72ec4aa1ed2832d345ca2ed8355064a7d87f1cbd20e19cf64b91c8db04dc18
MD5 53edc23382da75f6df71c665ffa4dc9e
SHA1 8ddd29a5683a1d963541f08c81add92eccbc2386
SHA512 026ba4cff565100cf2927b233a0421ed9cb6f8e2d5a912acc11304af34e484a605a22f4955f97253c028b56ab838f447f9b11a40a1eb8007d3e22ce10beb8982
SSDEEP 48:K0q1YEqo4pb0TkIS8pK9g1apxS5YrMYayLo3uyYCmnb+l+ISKnK9m1cnxw3YNuO4:KIZCK6QK2/eKgIHgoKxG25
TLSH
T1BA915702746712903CBE254842B486AB9A4231F33118E96FBBFC51D34E6EF145DFE9DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b211a0af-8a2d-4039-a301-2adad1f25b47.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b211a0af-8a2d-4039-a301-2adad1f25b47.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e886232d-f718-48ff-ac1c-d6790bd3f0ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e886232d-f718-48ff-ac1c-d6790bd3f0ff.tmp
Size 10KB
SHA256 ff667dd5742182e3055d3f1e101effa7fc1f72eac483d71fda70e80255d85663
MD5 8af9395ad853044577ac8ed8d93efb84
SHA1 dc89c39211a138a787e1415960d9d4ddab19162c
SHA512 7f34c0b9ec07f42abbc2c4aa3d8f11c21ce039a177fbf0aca280d93693fa8243a31144d7d626a2f3332db32f3064700da9970b1add6e6212eb8fc838fd283583
SSDEEP 192:sxZsRTWU/fUstQnIdpH1lHW6+WNGY36rsGrIg5+J:sxZskU/fUstQoXHbGXxo
TLSH
T1D222B8516E38797B8CCBE21EBB55BF53E6F9503251D11E88A6FC861C05EA6CE220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f1c92eb1-05b0-4090-a285-d065bd748f2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1c92eb1-05b0-4090-a285-d065bd748f2f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

60dd9733-a612-4d74-9247-4a47f7ebe87c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\60dd9733-a612-4d74-9247-4a47f7ebe87c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e453b086-9fce-43be-8ab7-8dda3e877f3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e453b086-9fce-43be-8ab7-8dda3e877f3b.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 83f17bc6cab78027f8a58b48d6270a280f5b6395603758cabf978590ca4dd7a0
MD5 4d1aefcba708f470ac1c5750ded94a24
SHA1 ee034aeb8bd5728a3dc91da32c543aad74f3a7d8
SHA512 f781b0be449fa8ebe55b989b0500359ff02697900158d79cf2354122ce9ae2522039fb9aed69179db40ebed42e138b135ebcaee2207990daf1d12b12b57b90bb
TLSH
T106410B68B6F91148B3B37E5A9FF3B46D447FBA772E06959E00110D4F0666A40C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download