fe2ad4fbf28e38ea8e55ff91788ce93b8860c098cd07a7fce9e24407a0bd3f06

Analysis

max time kernel
148s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 12:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
gearsofmedia.com/22bet-alternativ-url-35000-huf-bonusz-regisztraciohoz.html
Size 71KB
Sample261027-pbb8ladd83
SHA256 fe2ad4fbf28e38ea8e55ff91788ce93b8860c098cd07a7fce9e24407a0bd3f06
MD5 5e666ce2cf5d83554994ab8f5a620fa7
SHA1 fff7f8cfc34cd47fa86abae6f5917575a62591b9
SHA512 7df7a52919ac37a29609895bd2b739af89846e2902dcb828cc6454574d4798d57daea68767e7edf2fd8ae5deda57b64883b8d7168e9b0fd26c909cb5fe0e8f67
SSDEEP 1536:DapKNdUGjYKWTTmDrBjfQLuXUkOw6VKURPTxbTURB7yp:mYNdUGjFWTSHB14w6VKURPTxbTURe
TLSH
T1026309723D5F485A361F079F6053371C40DD89B9D614A6BA70F3802825F2EE63AB3D9A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4608	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{DEA56C73-3223-4AFF-BFF9-228CAA98143C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1972	msedge.exe
1972	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 4360 wrote to memory of 4448	4360	msedge.exe	84
PID 4360 wrote to memory of 4608	4360	msedge.exe	85
PID 4360 wrote to memory of 896	4360	msedge.exe	86
PID 4360 wrote to memory of 896	4360	msedge.exe	86
PID 4360 wrote to memory of 896	4360	msedge.exe	86
PID 4360 wrote to memory of 4764	4360	msedge.exe	88
PID 4360 wrote to memory of 4764	4360	msedge.exe	88
PID 4360 wrote to memory of 2296	4360	msedge.exe	90
PID 4360 wrote to memory of 2296	4360	msedge.exe	90
PID 4360 wrote to memory of 2296	4360	msedge.exe	90
PID 4360 wrote to memory of 4948	4360	msedge.exe	89
PID 4360 wrote to memory of 4948	4360	msedge.exe	89
PID 4360 wrote to memory of 4948	4360	msedge.exe	89
PID 4360 wrote to memory of 3676	4360	msedge.exe	91
PID 4360 wrote to memory of 3676	4360	msedge.exe	91
PID 4360 wrote to memory of 3676	4360	msedge.exe	91
PID 4360 wrote to memory of 388	4360	msedge.exe	92
PID 4360 wrote to memory of 388	4360	msedge.exe	92
PID 4360 wrote to memory of 388	4360	msedge.exe	92
PID 4360 wrote to memory of 4868	4360	msedge.exe	96
PID 4360 wrote to memory of 2008	4360	msedge.exe	97
PID 4360 wrote to memory of 4868	4360	msedge.exe	96
PID 4360 wrote to memory of 2008	4360	msedge.exe	97
PID 4360 wrote to memory of 4496	4360	msedge.exe	99
PID 4360 wrote to memory of 3988	4360	msedge.exe	108
PID 4360 wrote to memory of 824	4360	msedge.exe	109
PID 4360 wrote to memory of 1188	4360	msedge.exe	110
PID 4360 wrote to memory of 4948	4360	msedge.exe	112
PID 4360 wrote to memory of 4948	4360	msedge.exe	112
PID 4360 wrote to memory of 4732	4360	msedge.exe	113
PID 4360 wrote to memory of 4732	4360	msedge.exe	113
PID 4360 wrote to memory of 1972	4360	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\gearsofmedia.com\22bet-alternativ-url-35000-huf-bonusz-regisztraciohoz.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c4,0x7ffd6610c188,0x7ffd6610c194,0x7ffd6610c1a0
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,4773478781183980236,12657074052201824951,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,12401959262393826147,11318823828376331028,262144 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2664,i,8177332680465769112,16206505482534393285,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,9730605099591318223,14417306664429491203,2097152 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,7034010560945796866,11233224119815830637,2097152 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,16925400442120981346,15039972607576700883,2097152 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,4186234655425068337,2666532169876244033,2097152 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3516,i,10893125665399504748,13246243748700881075,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,14241910209608985393,5951251263909388378,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,11388422827861889987,715372478787775781,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,11388422827861889987,715372478787775781,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,622453583171662700,7651535242346080747,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,6654331317537594742,10432304898185424391,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=4512 /prefetch:8
  2⤵
  PID:824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,13586264856371496872,5356367459000702184,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,16387792846257214723,8517059700506669364,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,1291784877520515545,3940107095086457795,524288 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5544,i,17430407492292661685,14870659294723250364,262144 --field-trial-handle=2328,i,15786343269807860883,12785284796336781825,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:60

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

55acb56a-c6ca-43c5-b7ed-d6fe73feb60b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\55acb56a-c6ca-43c5-b7ed-d6fe73feb60b.tmp
Size 18KB
SHA256 d204c42f2aba50ead7ec2376f30ea9966bde47e0c3b93cc1c8eb58d95f8e988c
MD5 d134119418e420337575c5cc33a18396
SHA1 c947d34aba009fc0b1705fba99acf54b68268d16
SHA512 e06a8f03cd953fd4c261cca5cc01b9590ae1661edca9ffbb99fe7c1beebffe5d446b1c51c6ee57f55f3c791948bc1c98e00a3446573e964ca7f3425a195d50d8
SSDEEP 384:xQkUSv0sN1cPeL5Dk/BGYX5EE6qvmIvaTZc5IIl5:j0PeLSJGYuE6EmIvaTZc5Lz
TLSH
T132826D71A8B8AC2B0DE7A550F18B3603DFB4D127DBC46F94E5DD5A2C01CE298230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

581f777c-4b39-4395-b2bd-fdb4d5fdb6c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\581f777c-4b39-4395-b2bd-fdb4d5fdb6c7.tmp
Size 8KB
SHA256 0cbd878399c28884bf1e5dda58f11d7eae7dd0b8153ad7983ae7131a66943c96
MD5 ce81d7b9616e614b734cfb825f0fb9d1
SHA1 a49852477cb9337bcef6dadb83dfe6b6270532f8
SHA512 41e7e82fb25abd1ff324ad4254002e6e1e2b5549e2ba78369bdbfa198f722367da92fdde896690d791946a8fc73605c92ada3a722b3c3c9f1a27cace184a73e8
SSDEEP 192:LJONi6DphmqQmiUy0Hq8wGYX59ezlCwm0kk7UgU6:lONi619jRwGYX5EEwVU6
TLSH
T1B602EA34EC79BC7B4DE3AE45F4473A139F98112BAB956F84D6E81A1C01C768C1307827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7c9bb0ae-dd83-4b70-830a-171cd5df9764.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7c9bb0ae-dd83-4b70-830a-171cd5df9764.tmp
Size 8KB
SHA256 1f4e9ef01fdd404af12bfeef4a0a6d87a09f4d94e12a9d70b6537ae9dad63825
MD5 527cb835df5fc5b712eb16213334278c
SHA1 b20308e07cfa0aa97e3a013cb1d7698d5f4fa958
SHA512 07d8919888f931de91593874082a0d47feb8bac0709ccd72435f82d887f8ca07142f966d434ddefd62da4efb11a9549af796f1d5bcd36561b28923d53cfb1f5f
SSDEEP 192:BONA6DphzqQmiUyAHdwGYX59ezlCwmIqvzkIIdq5XU6:BONA61wpdwGYX5EE6qv0IU6
TLSH
T141121A75A8B8FC6B5DD3A591F48735039FA8922BEB887F90D5DC1A1C01DF29C130A91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9207ff80-7c4c-4336-9a4e-48d9846a9517.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9207ff80-7c4c-4336-9a4e-48d9846a9517.tmp
Size 18KB
SHA256 429e7f5afe390cb10130853c2b64c08e488dddaf4de5712f050b7839e6696370
MD5 ce2b485a5906a69515271840618a9a45
SHA1 6249c6fff60ac7686035e054a63cd54b7c85a56c
SHA512 87ace16273e4a445ff2695d4c113cf4c2a2c88789ccd93d082e49e329e4d8dde033e04d50667624f39a9480d1208cfdec5086529453be2a0ab92b457bc703690
SSDEEP 384:2QkUSv0sN1tPeL5Dk/BGYX5EE6qvmIvaTZc5IIl5:W0aeLSJGYuE6EmIvaTZc5Lz
TLSH
T101827D71A8B8AC3B1ED7A550E58B3603CFB4D127DBC46F94E5DD5A2C01CE298230B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5933d0c1-3b7c-4aeb-aead-66fb93d39043.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\5933d0c1-3b7c-4aeb-aead-66fb93d39043.tmp
Size 105KB
SHA256 aa204e7f585c1f2b64ec2dfe226fcda3dd40e2d6c7acaecb8bc39c51bf5021a2
MD5 82ef5ef3fd97f3d79a47f09529d45307
SHA1 4d70248d33884063e95777b4e6e0d998931440a1
SHA512 a3e3e08187ec16facc64907edae849970f4fffaceb0ff69b6b9421c352de4ae4396f6c7d28c814160c616bf604747c73d4cf8a04f10f2fc8fa4a07c14210288d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T1F8B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4945E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
MD5 a91eafa1aeb7b35d5c7abac6d2c83384
SHA1 a76b97105496dbfe28857282f5b661789a032b25
SHA512 4bebba8a121156a8e7e31bb49955c0375f1ca3be7dcd3c9b113d261a4618ecdf6781fce438d8e56020e438286e1619d3844f48e91b2b2c3cbb4a55d4c199972a
TLSH
T17AD02B24C9E41E90D0131434002241453F8CC03858023012D0B812AE15419D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
MD5 75bc6f9debcf49d2312740dfba56733a
SHA1 af0f5dfe4b330cf62c24c0003f6c57159b23e268
SHA512 c0a6cf9272c224460d1e7d25cf8159aa43733ebfb5f2761293ec6a5f2b4d71e061daa60092335856322f566a072c79184d7ad45d2b04b7cf8f3628e3a4bd4d35
TLSH
T176D02B2489E41E90D4131434002141453F8CC03858027113D0B812AE05429D60A21020
MD5 SHA1 SHA512 TLSH

Submit Download

1f8fc04b-a761-4244-aaf7-b35abb7e8e16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f8fc04b-a761-4244-aaf7-b35abb7e8e16.tmp
Size 9KB
SHA256 5f5367d69f2e8c2c06649d3fd51468ebf73905fff084246b1760ef56ab36028b
MD5 f3cf650840db1660edac6e212b52e1c1
SHA1 0985a3767b55b7cb0e3b7318f097da6e75d39e56
SHA512 3ebaa419da7ec41f1a5b6111847cf2f99b226d01c7eaaaca8207738abcdbe78fef46166c083633987deff8e703df98ef27db02b57d953eab44482011f1bdd0e3
SSDEEP 192:sxZGRsWL/fZsFyIdpdZHW6+WNGYgd7ENIgrJ:sxZGtL/fZsF7THbG89
TLSH
T1F022A7516E38A97B8CCBD20DBB25BF53D6F95032A1D51E48BAFC861C05E6ADD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4b0ef914-0fa1-4cd9-b655-1c7e37b4481c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b0ef914-0fa1-4cd9-b655-1c7e37b4481c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5c1ff819-0a83-4680-a1a2-610fdd496850.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5c1ff819-0a83-4680-a1a2-610fdd496850.tmp
Size 10KB
SHA256 04b3936fe10033123f6b047ccb38571935c11afa1f198e502838be444bc44df8
MD5 5789bddacbdc29c4ea8913226453245a
SHA1 b956822d47ae777c770730dff017bc3d78690212
SHA512 469572ff7396dfbb7d431e76d104ed6b6c17510c7a67e33030b00070c3720a184f76e1d0500388fe68222dd2e45c10546cc7c2697a61095191cb1b8b201bae76
SSDEEP 192:sxZGRsWL/fZsHIIdpHZHW6+WNGYgvuTNIg5FJ:sxZGtL/fZsH55HbGuF
TLSH
T19222A7516E38A97B8CCBD21DBA15BF53E6F9503291D51E48BAFC861C05E6ACD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6619767c8cf779f4c3e3acf37c0d28ea42ee40e268b8c1a40afff60de0c1d15d
MD5 470faf83878e43610c25063c68185d3d
SHA1 c1d5890334f9fa300d313b35161318885346b143
SHA512 a081e614c7e4f1b1fe172ed0af70eded1ed04a0ae84e5b2454459402108e88099eacce77f4a1f05e601ceb619298ce3ec5b7bc5e1b7ae628c7510c5ac4ddbd4f
TLSH
T1A6E020D495C4C21F93847547017CB70C979126AE96C0FE1E1F08CD88714704073A69D0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 b6e8abe52e64018d04d00cfa24d3ea98c73a2dc155910fc4bf68ccf00828a945
MD5 e3000d6bc5b06d11b6eb9bc1b2b66edc
SHA1 5a514a95f46aa9cf9d18a8a887ecdb938cd97435
SHA512 500b702574e6dbd47f41f0c152073c37924e1820761db0b7b107070438dd5c2b5b1d9dbbc1d10ec9ef78e5a3feb2da14e719909afd30df870e64bd331fef29f0
TLSH
T1F4612C81169190D5EBA44D30D5FA129F3F3988B255C3BD3211FBD1396B4B364DEF4450
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 65dbeb4ef54aabb2e5033e9f4e3d8b50930756172f47e3d448dfd1a3db2ce303
MD5 b649f11d05ff87616a0c2c830ea6fb0d
SHA1 8d87c1b8aa8dbc8af490c70fd3d6530d3a741ea9
SHA512 dd6ae9d4c78cb0cfb812e7167375caefa35b7f518dda5240c846871a4dafafa633e4b8645dda88801414126ee06b1ea0ab037e2121e6b77b8bda36f77bb88112
TLSH
T1BB612C811A9150D4EBA44D30D5FA229F3F3988B255C3BD3211FBD2396B4B364DEF4050
MD5 SHA1 SHA512 TLSH

Submit Download

3132537a-782e-4680-a192-434ff9eba23c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3132537a-782e-4680-a192-434ff9eba23c.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1c638912-0cec-40f7-94a6-70f7017882be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c638912-0cec-40f7-94a6-70f7017882be.tmp
Size 3KB
SHA256 d11f397f80404c6f57d7a9aaa76a556d2f917a49f70e3c281a29020dd6dc9da0
MD5 ccf61a28400e6af73d0b2e7033f22372
SHA1 42921d6946a55929d7ba53527028b3da446f2c16
SHA512 92af39be66bd9a359a06145d5baecba081fa76b27e4915dbbdac3bb4452f299f3f3e2cebbb9df65a6a2b3055c9dbf0f540bce4b76bdd265256261b16432f5cbf
TLSH
T1D9518BB687E8436E842656F08A24BE2ADE5D111B422C3C658DF5EF5B63F20B1D14239F
MD5 SHA1 SHA512 TLSH

Submit Download

7dc0fbf1-8585-4859-9772-9bf23fe51215.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7dc0fbf1-8585-4859-9772-9bf23fe51215.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d492aa69-cd2f-4b5c-bf1d-499bc78d2458.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d492aa69-cd2f-4b5c-bf1d-499bc78d2458.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 cbf6ef6b6dbcd7e55e81d127c9a07b383c0123fa156f5266edf1e18b868552a5
MD5 3d4fec91cb1627a828ccd3bfd2c20b44
SHA1 d3a97a2db5e21b141396b0ab1d8714dd9aae9d71
SHA512 ef52d00f1826b6afb57a86254184d07a74ae5e7d1ad9c0b60e9ebe222331cac7b7fc4d11dd9e873a89df484735a433a652dadad34ebee0d2e763bb4c5329ce2a
SSDEEP 48:K0hwdR7/DcbvaS9AsSwQhbM78ISEhK9I1ShxqxYzEwiyLjGnDtFVWbFIdISDWK9D:KUSFeKeYyicIKh6GUAKF6ug
TLSH
T1D391FE4170BB020438FD75A945B4CB2A965231F73055E52BBFAC41A24EAFE045EFEDCA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a7d47bc0-2dff-4a08-8611-75b7b5bc1f7a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7d47bc0-2dff-4a08-8611-75b7b5bc1f7a.tmp
Size 27KB
SHA256 592c06bf7d48d27161acb0be0e8c72ee8793192edee1bd1960a48840ce87b78c
MD5 d54b6224843fdbce3d2bf5cbd952bda6
SHA1 f4554d73b5ae52743204a8a55c2309eb3788508c
SHA512 ecc23f31a69b71cc54ed7027fa193c9c6c774da6ee819c32549e1e413f1b1a587010ee85d5955fa9ed25125a847978f7c2127697fe41cba0883e4123e2c6a033
SSDEEP 768:OjichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzFroU+r:OjichfPWvPZplu1jan+LKgz+zr
TLSH
T1ABC2F97B640CCB7E4FC01A9DDD1A6F9B7E9802C7AA588D4047FA984C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bc0f6914-bf3e-4d52-a5e8-41ca0628dbc4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc0f6914-bf3e-4d52-a5e8-41ca0628dbc4.tmp
Size 10KB
SHA256 4e44f33960d7c7bc52d18d46b11bc4d06b3a1c9d58d90cf16eff2672f5bc8cf2
MD5 c504507e8da6e5c94a89d0f34e7f1a4a
SHA1 d6ed12212f022e8b7d8469a6cdbb0a3c350bf043
SHA512 0dd52a991c8b37743b84dd14a94ab836d37800b0ce9e47e986d97908ef054cb4d601eeb5eb597079179101c707a8098cd39f71fbac23198f7e4961f92bb97d59
SSDEEP 192:sxZGRsWL/fZsByIdpdZHW6+WNGYgd7ENIg53J:sxZGtL/fZsB7THbG8T
TLSH
T10E22A7516E38A97B8CCBD21DBB25BF53D6F95032A1D51E48BAFC861C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c0bae0a0-bf1f-4366-9c89-9338b28c2f2a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0bae0a0-bf1f-4366-9c89-9338b28c2f2a.tmp
Size 10KB
SHA256 440754d290cd1581ea731bd0585838dfe95f4e30749dc85c1fe774f37fac4223
MD5 5074673c13cbe3f9fcff6b14b5b47be8
SHA1 5a861c7fe0c85966e0abcc6239f162f2000368b6
SHA512 2a9b9a76616a4cd32a58c6b607f78b51cbd0ad52b5cebe0789e59aa79112871bda36521d52f6dffc014479c72408d2b5873fd901b026cf56804bcff9814c18f2
SSDEEP 192:sxZGRsWL/fZsHIIdpdZHW6+WNGYgxhENIg5FJ:sxZGtL/fZsH5THbG2F
TLSH
T10A2297516E38A97B8CCBD21DBB25BF53E6F9503291D51E48BAFC861C05E6ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

364478c0-045a-4088-a875-242fb1ca0f16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\364478c0-045a-4088-a875-242fb1ca0f16.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ed4463b4-ce70-4b15-8a93-0a2eda91f29e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed4463b4-ce70-4b15-8a93-0a2eda91f29e.tmp
Size 21KB
SHA256 0da43a418228c75177a6224c33e526f9f0bb4be7471d5bb50290ce232044d02d
MD5 521ba4f0a613e5d1a4a731395b4b775d
SHA1 092a48b6a27ba2350fb9b1fc0e1eb78fa4b0ec44
SHA512 0694b0c934d9b4dbaaadcf1c4412edceed111f50b3542531276594bd0995dff8240019250807e8acf3bf7c792d9d7949e2d6c04702d3f51af832652d506f86b8
SSDEEP 384:QiFzQkUSvuzsNP8TUNTUlIlcPeL5Dk/BGYX5EE6qvuIvaTZc5IIl5:rFduKwg4eLSJGYuE6EuIvaTZc5Lz
TLSH
T1B3A25C7298B8DC3B5EEB9A50F54A3603CFB49167CAC4AB90E6DD591C01DA18C234BD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f14572da-305b-430d-9f8f-07b631726366.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f14572da-305b-430d-9f8f-07b631726366.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 e2a4be2895c55f454a2a5e29394157b0d01eed9567d6709a8ae02519180990bd
MD5 c17c09fcf5f8ee7e965b46fba3af7ed5
SHA1 377c53c6d5a6ccad0626abf76826fc9a2542d2a3
SHA512 9adac85ceb6b398e54547cc0d0b905b29552d890524aa82152ba087db750daf70fea41e3f402264eafc18c2eb478e8c0697cae8792ee016f3c3ee9395eb9cf31
TLSH
T1F3412C98B6E91148B3B76E5A9BF6686E447FB8332F06915D10110E8F0A27B41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download