4b452e6ae07b9bbfaf6c63c3eab8e54f060ed9ec19f25b210aa4ded8b3ac2a1c

Analysis

max time kernel
148s
max time network
134s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/10/2026, 17:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bflumod7.html
Size 61KB
Sample261026-vkxhsat19n
SHA256 4b452e6ae07b9bbfaf6c63c3eab8e54f060ed9ec19f25b210aa4ded8b3ac2a1c
MD5 e3e0b0342413101784e6cce83ca2fb22
SHA1 b51101f8d08df8af6fa622829070bd664fc624b9
SHA512 90bbc8814759dc08507e55ccc23eff88d65c507a2f5ce7e1c598f21a17af70643bb8777ad8f71bc6c6265164be197ff27924080a9cafdb865b662f24f7382a06
SSDEEP 768:2JG5RcDkTJjCb4/9A6XDBe5XBb5A8auyg0XTzCJvEs6av:D5RwkTJUSe5xbXrvEs6av
TLSH
T14353E6B260F01877019386E9A669AB0EBF93D107D60B5949B2FC07941FC3F979C477A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4360	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{8772F361-C3C0-49DB-BB6C-1CE71553F3C4}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3164	msedge.exe
3164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe
5084	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5084 wrote to memory of 3508	5084	msedge.exe	83
PID 5084 wrote to memory of 4360	5084	msedge.exe	84
PID 5084 wrote to memory of 4712	5084	msedge.exe	85
PID 5084 wrote to memory of 4712	5084	msedge.exe	85
PID 5084 wrote to memory of 4712	5084	msedge.exe	85
PID 5084 wrote to memory of 1036	5084	msedge.exe	86
PID 5084 wrote to memory of 1036	5084	msedge.exe	86
PID 5084 wrote to memory of 4268	5084	msedge.exe	87
PID 5084 wrote to memory of 4268	5084	msedge.exe	87
PID 5084 wrote to memory of 4268	5084	msedge.exe	87
PID 5084 wrote to memory of 4072	5084	msedge.exe	88
PID 5084 wrote to memory of 4072	5084	msedge.exe	88
PID 5084 wrote to memory of 4072	5084	msedge.exe	88
PID 5084 wrote to memory of 1856	5084	msedge.exe	90
PID 5084 wrote to memory of 4680	5084	msedge.exe	91
PID 5084 wrote to memory of 1856	5084	msedge.exe	90
PID 5084 wrote to memory of 1856	5084	msedge.exe	90
PID 5084 wrote to memory of 4680	5084	msedge.exe	91
PID 5084 wrote to memory of 4680	5084	msedge.exe	91
PID 5084 wrote to memory of 2020	5084	msedge.exe	96
PID 5084 wrote to memory of 1300	5084	msedge.exe	95
PID 5084 wrote to memory of 2020	5084	msedge.exe	96
PID 5084 wrote to memory of 1300	5084	msedge.exe	95
PID 5084 wrote to memory of 3048	5084	msedge.exe	99
PID 5084 wrote to memory of 2316	5084	msedge.exe	108
PID 5084 wrote to memory of 1276	5084	msedge.exe	109
PID 5084 wrote to memory of 2904	5084	msedge.exe	110
PID 5084 wrote to memory of 1636	5084	msedge.exe	112
PID 5084 wrote to memory of 1636	5084	msedge.exe	112
PID 5084 wrote to memory of 3164	5084	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\bflumod7.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff86466c188,0x7ff86466c194,0x7ff86466c1a0
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,16476915860992092688,3896684801240453514,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,17175763485321533697,10319243888750218359,262144 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,8290493665738018804,12176227814292807304,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,364877992584698530,13964019008504929080,2097152 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,15582949058821303014,6941591568523375591,2097152 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,2880253058402782629,4569699358359295501,2097152 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,16817338738026627453,7726606054003881586,2097152 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3608,i,15124068332937783336,10568159005531110841,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,15790633704214467185,8993987017488716712,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7791061605528173093,3630753157180276728,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,7791061605528173093,3630753157180276728,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,8491617898249897484,15578742136311231557,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6152,i,16685730215985478635,7291054408270915378,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:8
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,6328739957104728663,2468725691979486646,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:8
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3008,i,8989684369458023839,17490138041092148831,524288 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6196,i,4931924458054318690,1651032314093264026,262144 --field-trial-handle=2300,i,10730810293022949393,8741037807170489944,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3164

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3500

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

35eed0da-fa9b-4b65-91cb-050a10ae28fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\35eed0da-fa9b-4b65-91cb-050a10ae28fe.tmp
Size 8KB
SHA256 c2186e9f9d26624f496a851940cab5bee64f2b3367706e0e4ebd2523881db7db
MD5 7acec8a325cf0298898547c6b58c15e0
SHA1 d767cda34cd9df2b642e45e20a58069ec1ef5682
SHA512 fd44e1b785f14c61a6eb37322269fa4941124fb0002a39ceaa34c53595fd2fa8dc63edc3e54807d5efc6d45421c2d47a6ebf9de4408eaf467c1b43ac3ed1dfec
SSDEEP 192:cONR6iDUQmiUyCJOq5u88PINuAPwoduZ/fq9U6:cONR6l/Oq5u8iI8AYok/WU6
TLSH
T171122A3568787C6B6DD3A865B58B36138EA4821BE7C97FC4D8EC1A1C05EF29C130B613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5243ca0c-b541-4eff-afdc-87e1552dd9c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5243ca0c-b541-4eff-afdc-87e1552dd9c7.tmp
Size 18KB
SHA256 53aae8104f5cf2c53f0e4534da22d6d906375f62910466f579f7cf1c5125f26b
MD5 56f68db62481a273d173d5bb6a1344d7
SHA1 6f4e753cbbcb0f4053bafe535f1045faa55d3273
SHA512 820645558f20c90099cef35cd992031a20a39aeecc39755daf92a0d501597612c5e052043538c6382ee192ef33893b088dbb1a985db7d5a2dc5a37d349cc1fbb
SSDEEP 384:PQkUSv0sNA3XZkUKSp5u8iI8AYow/W2IbNIIlQ:R07ZgQkI5I/W5xL+
TLSH
T1F3827C35A8A87C279DE79921F14E36038EB4C25BD7C86BD4D9CD6B2C05DA2DC2307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5752bfde-7c72-4701-8506-63c0d342643f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5752bfde-7c72-4701-8506-63c0d342643f.tmp
Size 21KB
SHA256 0cee0421049df6f93ea283dfaba3256a6b4c6ac3162aeec9911a35199973ae15
MD5 f470c7fed5c9edba5a2a4d17b7246c98
SHA1 374187340cd52a67a49e0be139a963e789b5b181
SHA512 0c1820c489d87f258e755353fc52333548fb4ce5d98557616820e545a814bf0b9ec16ff8933dcf8877651dc5e22bfd0a9652ee21ad8dc7c42ed8d9fe677362a8
SSDEEP 384:miFzQkUSvFzsNA8TUNTUlIl2XZkUKSp5u8iI8AYo3/W2IbNIIlQ:NFd9lwgeZgQkI5f/W5xL+
TLSH
T102A25D365898A87BAEE79E51F64E3603CEB0815BC6C9ABD4D6CD5A1C01DB1DC1307A13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71562eed-a2cc-44f0-b927-ed182dda1824.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\71562eed-a2cc-44f0-b927-ed182dda1824.tmp
Size 18KB
SHA256 8bd40eeec6028a33cc2b2b8f993e0cccc00e821d49b345e0eaccc1732353e97f
MD5 689eb091ef41a9537fd21934c00db8ec
SHA1 d719c53e0bfb9cb03151bac6d900dae4712c9dfd
SHA512 490cab6d7babfe03ce03783d1b5e93c53f26b9b90554ba878658e5592c73056260319427e5929b3ca45624f925cae6517d04b3fae704c38142ac1573b4ee6553
SSDEEP 384:tQkUSv0sNA2XZkUKSp5u8iI8AYow/W2IbNIIlQ:X0wZgQkI5I/W5xL+
TLSH
T1F0827C3568A87C279DE7A921F14E36038EB4C25BD7C86BD4D9DD6B2C05DA2DC2307613
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

721c420f-6256-4720-8d31-f69d09992afc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\721c420f-6256-4720-8d31-f69d09992afc.tmp
Size 8KB
SHA256 5da372c97e99eddd8cfe348c916d77bde1a604590c371954efa14c99236f74ff
MD5 4e860b34cbf61ad9fbc4916addb423b0
SHA1 132b6addfe9412c3e88caf99b2a3d0ff091bfd85
SHA512 5ced485ca7bd38ff464270455a811d73e3930e1bace2280e43e4a98eb745b4115adef6aaefca701d0759ff5e9bf280025a2fb3b19d51ae2f97ad6dfcc4380427
SSDEEP 192:SONX6iDCQmiUyTJHq5u88PINhSq/D1bU6:SONX6/AHq5u8iIZ/FU6
TLSH
T123020938AC783CBBAEE3AD15B5477B179FA4112FE6952B84D9E81A1C00D729C1307623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

301a0481-7442-4f62-ab4d-5f52b10069f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\301a0481-7442-4f62-ab4d-5f52b10069f9.tmp
Size 27KB
SHA256 3f0df2b98264adb715b9278d3f66a9c124bd1fb0c2002973910f49c6722eb8c9
MD5 bcaed54b2d8a16be74b1384f5a959c61
SHA1 e2e178cf5076cd4d094eddb3087b317693934309
SHA512 74e30cf85352d97eb391704a09e8b85e1ba4f8f72489370fc9eca7f1c0b443bb6626120df944852d389e9345161a02d8e9eca655be4087f2889329a305d1a797
SSDEEP 768:sxyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3+roXZ29f:sxyQRbrWvvlpZu1jaXKLf33VXZ29f
TLSH
T178C2FA2B640CCB7E5FC00E9DDC666F976EA802C766588D4447FA984C02C77EE512B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54f962fe-5dea-4ee5-aa67-100dff676a06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54f962fe-5dea-4ee5-aa67-100dff676a06.tmp
Size 10KB
SHA256 2ede0c438b8814070514ec80bb86c10aca28b64a3be44e3e7ff9e7b133edc61e
MD5 36067dd21a425c9742ff94a1c10992a1
SHA1 e7d362a9263dfac93a730c10bf6006fbf83fc4e8
SHA512 b0d1297ca5dbb88bd00847c57ce1166338d6b3c61c361070a1d4763b5833c334139024f2596ae9ee89095b926f2558c27b309e914618f40011422dcf4b821628
SSDEEP 192:sxZ5RFWb/fbsiTj6IdpdeHW6+WNGYab3YWIg5UJ:sxZ5Gb/fbsiTjTQHbGT6
TLSH
T19E22D7516E28A97B9CCBD60DBB15BF43E6F9903291D11E88EAFC861C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6ecfec16ec1609c01a44c94e0662d1b3d8ab8511f8361b5fcfc8bc70866dc9d2
MD5 8d24888f4be7723353b60f28e537fb07
SHA1 ddd00d319ef717a2469584488fada1e2718e70d0
SHA512 fe1fe11a2d1a8a77dcedc88679de6ba63f0f39480655a47020b716e3ac709e9434db8a18abca165f16d7673702914ae3578b8dcee9bc2177af5cff89ff3ffede
TLSH
T1926194A954A00471DB986132B2F0A0873675F0B55FA3EE7200DCC8BFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 a0d59a6f00caca20ab9b475f161d6a4152e83399f1d3305f54b206c020b210c4
MD5 ad4614ef6ea1a68f09ca065a092f1745
SHA1 9674dd27dc01465084021ebbe730b729bf651f0d
SHA512 7236bd08c5d9c2935f690d05edefddbc77b97762c5f5bb37d82900b8142d2239c13e066eb723adafd0e56940ce3ffe72f0bc03395d718ac27b2bae8f0447ce86
TLSH
T1A36193A954A00071DB986132B2F0A1873676F0B55FA3EE7200DCC8BFBF4A7599387220
MD5 SHA1 SHA512 TLSH

Submit Download

35c0a392-dcb9-4932-a932-63d46dd8baba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\35c0a392-dcb9-4932-a932-63d46dd8baba.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

500d66f8-3180-47e4-a8c7-6e7ffef8e29b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\500d66f8-3180-47e4-a8c7-6e7ffef8e29b.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

aff81874-0070-4434-b580-d3ee1bbea6bd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aff81874-0070-4434-b580-d3ee1bbea6bd.tmp
Size 3KB
SHA256 a1b15a8da5c6d7674401543e1f9bc9fc2c64c7a1ca950868d5c4d916039ab66a
MD5 128bce910d92b297325534ec932fd920
SHA1 330df86f9fc81bb2aab02c2e6eaecac86fa64618
SHA512 fbfd39fc4d2538a6cd5b6613a1ab8a68a6408dfa039191b661863e3cf9fd1058216044219f21386543c0be782542ce1a3be51ae90f0131612d4a669bd8f09964
TLSH
T1AD618CB7C2E4477E892652F0AB256E2ACD1E151B422C3C5689F4AF5F63F24B0E10129F
MD5 SHA1 SHA512 TLSH

Submit Download

ece10d1e-f237-461a-8af3-25209223e4e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ece10d1e-f237-461a-8af3-25209223e4e8.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

a0b390b1-1756-4cea-a1fb-75ab210c403f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0b390b1-1756-4cea-a1fb-75ab210c403f.tmp
Size 9KB
SHA256 6899cce4b0c267bba7ffad3e8cbc6b65e9b08da5214f7b721861452c70aff41d
MD5 0e6a86bc3b0d8385652bfba19b8b1bc7
SHA1 99ffa39b6ef9deb7430d1a33cb25dad50ad2d355
SHA512 8854e081b2baea3980386f11736eaf114dbc0ea81587285258ab13df133754615f61bf2e325d6ba74ee2ce9871318cb7ed215c2615d0c40328511c5e60700f73
SSDEEP 192:sxZ5RFWb/fbsiSj6IdpdeHW6+WNGYaJlYWIg5+J:sxZ5Gb/fbsiSjTQHbG3g
TLSH
T1A622C8516E28A97B8CCBD61DBB15BF43E6F99032A1D51E88EAFC861C05E76CD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0dbdff2-629c-4fbb-838f-37767e25d54d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0dbdff2-629c-4fbb-838f-37767e25d54d.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

df447693-8aa8-450e-96fe-012f6fa3a8f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df447693-8aa8-450e-96fe-012f6fa3a8f0.tmp
Size 10KB
SHA256 4dfc86902a2bd88770ecc151196c0c3114cdfee638d14ed69120e01b84656299
MD5 d937970173f064f0284b05cb78498189
SHA1 33bc66a0b84c49fee267c42071c7ad660f9d7b09
SHA512 0c3cb608bcfd4e2ad0bab9bda4910336f65427a709dad6e2f657025c978ebae6d34ba59fd5b51634009c476363b617f4eb3671b9e4981b0c1a10cb371bbc7da8
SSDEEP 192:sxZ5RFWb/fbsiTj6IdpHeHW6+WNGYavsYWIg5UJ:sxZ5Gb/fbsiTjT+HbGu6
TLSH
T1DA22D9516E28A97B9CCBD61DBB15BF43E6F9903291D11E88EAFC861C05E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa04370f-945b-445c-bb12-0fc540d4ae7f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fa04370f-945b-445c-bb12-0fc540d4ae7f.tmp
Size 9KB
SHA256 7e35b835c376dbbc70964feaa2830a43feae8fa7a61c6513aa009852d57f29ad
MD5 f3f9540ecc7c138839a577a158b0d7d6
SHA1 8cc17bc33026a1294eea50b71076b1b9179a9c1f
SHA512 e6aa194717e5959ab1315ddce28010419599c037763137028998ea4e5ac551dfa5f8e71e45dc03b5af80cf43a0c674df3040379af92b06bd0607490937412259
SSDEEP 192:sxZ5RFWb/fbsMSj6IdpdeHW6+WNGYaJlYWIgrJ:sxZ5Gb/fbsMSjTQHbG39
TLSH
T13622C7516E28A97B8CCBD20DBB15BF43E6F95032A1D51E88EAFC861C04E7ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

68aada85-feac-4440-8661-098cab584940.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\68aada85-feac-4440-8661-098cab584940.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

0f3b35b1-9e5b-4e68-a843-fbfb01066225.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0f3b35b1-9e5b-4e68-a843-fbfb01066225.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ff9e43635e42ecdc0afa662461bcc043eb36c2ebfa91d1eb7b2a2717d4070465
MD5 145e9c41539f9a48c908066c0b026e3b
SHA1 ab385401527d39f3939fc004e0b6fd5344ecc4d0
SHA512 711ee01fcd75325797c22c0ac410fe7697e1a32fd65d58dd75b2d0648ef862513049f842e41cc42046cc5dfd2228eb926c62520060798e963e40adbb491824d5
TLSH
T15D413B6CBAEE1108B3776E46AFF6B46E487ABD772E46D49E00010D4F0663B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download