hxxps://achiit[.]github[.]io/dukaan-freefire-topup-site

Analysis

user interaction
yes
max time kernel
148s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://achiit.github.io/dukaan-freefire-topup-site
Sample261102-sev2navsf1

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2940	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{EB3B1E57-9237-49A1-AE7C-792132ABF43A}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
680	msedge.exe
680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe
2400	msedge.exe

Suspicious use of WriteProcessMemory 34 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 3796	2400	msedge.exe	85
PID 2400 wrote to memory of 2940	2400	msedge.exe	86
PID 2400 wrote to memory of 2028	2400	msedge.exe	87
PID 2400 wrote to memory of 2028	2400	msedge.exe	87
PID 2400 wrote to memory of 2028	2400	msedge.exe	87
PID 2400 wrote to memory of 4148	2400	msedge.exe	88
PID 2400 wrote to memory of 4148	2400	msedge.exe	88
PID 2400 wrote to memory of 3380	2400	msedge.exe	90
PID 2400 wrote to memory of 3380	2400	msedge.exe	90
PID 2400 wrote to memory of 3156	2400	msedge.exe	91
PID 2400 wrote to memory of 3380	2400	msedge.exe	90
PID 2400 wrote to memory of 3156	2400	msedge.exe	91
PID 2400 wrote to memory of 3156	2400	msedge.exe	91
PID 2400 wrote to memory of 4892	2400	msedge.exe	92
PID 2400 wrote to memory of 4892	2400	msedge.exe	92
PID 2400 wrote to memory of 4892	2400	msedge.exe	92
PID 2400 wrote to memory of 2428	2400	msedge.exe	93
PID 2400 wrote to memory of 2428	2400	msedge.exe	93
PID 2400 wrote to memory of 2428	2400	msedge.exe	93
PID 2400 wrote to memory of 4772	2400	msedge.exe	98
PID 2400 wrote to memory of 4772	2400	msedge.exe	98
PID 2400 wrote to memory of 4152	2400	msedge.exe	99
PID 2400 wrote to memory of 4152	2400	msedge.exe	99
PID 2400 wrote to memory of 3340	2400	msedge.exe	101
PID 2400 wrote to memory of 4120	2400	msedge.exe	112
PID 2400 wrote to memory of 5080	2400	msedge.exe	113
PID 2400 wrote to memory of 1416	2400	msedge.exe	114
PID 2400 wrote to memory of 1712	2400	msedge.exe	116
PID 2400 wrote to memory of 1712	2400	msedge.exe	116
PID 2400 wrote to memory of 1808	2400	msedge.exe	117
PID 2400 wrote to memory of 1808	2400	msedge.exe	117
PID 2400 wrote to memory of 4520	2400	msedge.exe	118
PID 2400 wrote to memory of 4520	2400	msedge.exe	118
PID 2400 wrote to memory of 680	2400	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://achiit.github.io/dukaan-freefire-topup-site
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff84068c188,0x7ff84068c194,0x7ff84068c1a0
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1788,i,8026434127500885973,5721817246160938359,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,13897969628637037314,11654196309239352507,262144 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,11685157858635860837,1286792193183691771,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,15951252066050699538,12696633421460672654,2097152 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,15956022358921133477,12727113363402421157,2097152 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,6241450853985420020,14575398181389374622,2097152 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,2063242487165459769,541154482777014140,2097152 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,5602204213682394985,7036386918062694670,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,15310038972318849633,11777959724897651218,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,9895090112438026351,10462707273764109282,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5920,i,9895090112438026351,10462707273764109282,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,14610468810594901764,18135086961378698979,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,3257472386242672107,6238518916292698649,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,5269214941279007906,6449723385731339469,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4396 /prefetch:8
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,6568864780648700362,8020690451134873734,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5856,i,5942536491506638213,7004511536057141444,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5472 /prefetch:8
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,14391134156301268660,4194209140062737427,524288 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6416,i,15517890471557362764,10769754426974272031,262144 --field-trial-handle=2424,i,1559500956382305373,8430749791267347099,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

314b6edb-aac7-424f-8264-0d04ab6dae43.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\314b6edb-aac7-424f-8264-0d04ab6dae43.tmp
Size 18KB
SHA256 b271d0fd3cc8a9e1c44e2b40b59e6b9fe414aa723f20aba356d9ca3e383d6960
MD5 76fcf492c5ea31a5da11eef42fac1119
SHA1 415785c5ce10e25b6bb44941f8a763bf051bf916
SHA512 e88a18ff97158d3278b16d667e78e216730f598d5b71c8d95160323c02674dc94830211c1d8b9b809e35f778fa98db555124a1c4ba0c4b1254da7f226397af66
SSDEEP 384:8QkUSv0sNh1wQdQcOjTVKjGYmmtuwH7vBEr0IIl4:80n3nJm7H75EgL6
TLSH
T1C1827CB1A8682C7B0DB3A601F48E3613EFB8915BD9D51B90E9DD5B1C01CA2DC234F926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4e2d3054-3b78-43a4-a8e0-6be7352e6d14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e2d3054-3b78-43a4-a8e0-6be7352e6d14.tmp
Size 18KB
SHA256 70dfb1e2dc9bcfaf293d1702efe191a553bed28a6a3bd4dcf8725347096cab6e
MD5 7108ad61fb20cc26b031c5088156745e
SHA1 cee1dd60b877abdde406a2608857af52d64ce7f8
SHA512 8895e922e7c29da6c6e8f2f30180a6d7a2daa46b10bb0b0b68d472bda3d8c3511dbf3ce0160815a44e79107f9add090c49050e9075741b29acb2bb56a6ddda20
SSDEEP 384:9QkUSv0sNhswQdQcOjTVKjGYmmtuwH7vBEr0IIl4:n0e3nJm7H75EgL6
TLSH
T1B7827DB1A8682C7B0DF3A601F48E3613EFB4915BD9D51B90E9DD5B1C01CA6DC234F926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

53c4cca6-dc97-45b8-bfdd-6078b0e2b063.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\53c4cca6-dc97-45b8-bfdd-6078b0e2b063.tmp
Size 8KB
SHA256 86ef1c1891ab1e5db2752aae06c320f5dd45280fc88e4bea90f99f7744e56b56
MD5 68a79245e7af6281af1be0b320da2910
SHA1 49c7aaeedef1efcf40f893907b1f2bd6cb07ccc0
SHA512 0deab00df1cbbf74238b05a514b7922a177c198d0e9876430e42bb36e75d878cf458147ea7aef765923130313b64b11557b4a53846c50c60ed26da5cdadf18bf
SSDEEP 192:0ONE6yHQmiUyo8MOCTVgVHDR0p+L9ERQ3UtiqOwU6:0ONE6CMMOCTVKjGYmbtuwU6
TLSH
T1B812F975B8686C7B5DE3A501F48B32139FA4816BEA496F40D5EC1F1C01DF6AC234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

22e4a849-4ecf-44f4-afd6-6de0a9c03131.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\22e4a849-4ecf-44f4-afd6-6de0a9c03131.tmp
Size 10KB
SHA256 ba5640b5f84b236f0e3749642957d993963941849e9438e7cfdde9a8fe58174b
MD5 3a5d7d0f304befa908381b61f11ef2e7
SHA1 45498ea9d0dfcbfc3b196907baa2f6ea5d116f58
SHA512 02d1fe57bf96e385caef784aadffa5cae723dc6ecd6636439848e70678aab2ec2cbfba8edf256e91545fc1ebd7067e3137bf57c63d23dccebe973f1bfec87de4
SSDEEP 192:sxZdRCW8/fJsAAIdp0lacHW6+WNDQV/YRP7wpBIg5fOJ:sxZdv8/fJsABOHbY/m2o
TLSH
T1F922C992AD28797B9CDBD209BE25BF53D6F6503291900E48AAFC871C05E7ACD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2622ee8d-1d29-4416-b232-b16d5faf1a80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2622ee8d-1d29-4416-b232-b16d5faf1a80.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3618257f-4055-439c-9b88-92730eee5c38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3618257f-4055-439c-9b88-92730eee5c38.tmp
Size 10KB
SHA256 136ea4b49ec39c621642a92efb11f8e20281be2268e0b633af2cced8d6c688cf
MD5 ed7966d67396c82b1040bd7c8b797ef1
SHA1 56c633735d797f6c51e4b39da9b826a1e215ad43
SHA512 12ebe75df001bc2778e9622bbac26a3eabaac56e3bd5de3b98f87c86daa5061d0a5cc62fd243dd0c935d8575ca9ff159f6b49cbf99c547804979ed1ab2753869
SSDEEP 192:sxZdRCW8/fJsAAIdpylacHW6+WNDQV/YRPZ/pBIg5fOJ:sxZdv8/fJsAB8HbY/m1o
TLSH
T13222CA926D287D7B9CD7D219BE25BF53D6F6503291901E48AAFC861C04E7ACD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

42d3d85e-e391-4f82-8a8d-c3f6afc102ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\42d3d85e-e391-4f82-8a8d-c3f6afc102ea.tmp
Size 10KB
SHA256 0ea5fb9aacd00d64fc5e4766c9e2dfeb208ea864ee9280884df90c3405962dea
MD5 68955106137dcfeb88fc2330220bd7c7
SHA1 eb437d080cb70d33c65cb35f967b73e99e8252f2
SHA512 74becc9638d03c9364d106e7585a54d0cd80d63d01025df97e63d991816eb2ddedee8f6d8e7487c585909377cbf599e54e3a86f2499da561e4b5434ad2726b6f
SSDEEP 192:sxZdRCW8/fJsxAIdp0lacHW6+WNDQV/YRPpwpBIgrJ:sxZdv8/fJsxBOHbY/ms9
TLSH
T19A22A9926E28797B8CD7D219BE25BF53D6FA503291D41E48EAFC861C04E66CD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 43c415b41e39be85aacc7fa38eb25fc23f50dfda11686d01004a73764b92f0b7
MD5 1a1a2bad6b72f898b431494697211a38
SHA1 bc5c6568fd96e10ab93a5b822999379ae859f36e
SHA512 5c66fa201f8f6637dc0b064b917d0a0e868ff5a51ed30a2d5e8a0663ec749292c114055013f31e9c95621ed942d11eec848e5b1e8627e56e2890b90da3eb0637
TLSH
T127E026C644C8C22EA218A54B01EAA70DC2E03E2B93CC7A0E1700C4887243841E3CAAA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ac04f6c9e87e5e9ee7b5586e133e7e6e2856ce4d259b573e9497313afa17db82
MD5 34c5ae648bce4d08d2cff4df821da29a
SHA1 e8e9541d84f91e26b654d81672ee2764bffac719
SHA512 33d64c45195c7c03cecb892497ef83bd10b6c7286f00ba861971dd763036bebc9c636f4476b6bd0ab517bbe45fe8720e61bf09ae99de92b9c88f1a3235d71f96
TLSH
T138E07D8608C8C23FA20A644B41ECD70C82A03F2BE3C86D1E3B48C4847101940F7F66F4
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 6451c59e61c2aa7b7b05fc3bc8e458cbc2a4739f09de141f550f80f03fd1cba4
MD5 b22d82a77b13a26db532c3ab852ccd4e
SHA1 fb75ba27afafa77cb2cc540357a71990ce06662b
SHA512 6c3ca8e958b703a302b364650b404ef8baff9881393b4ddcfd6e97d555509c3f6a9f02a2f6972e3711c53a2569031099b9a0eae714c6e5e490b37b494d8b1940
TLSH
T15D61B74DC5944274FF68047381D221E33D35B68A46F7AFE207A9F9BADB3A364539801C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6414d446360bde37d07eb86f68478a80bd27cedb8956ba75a25a8baf12b7b4b5
MD5 5c7b1866bfb67b42e74c0b25b1b7ce03
SHA1 8d3b75ab3349a2f2ee3202b0306376deadf9b7e9
SHA512 42789c1ef08d4f65cbcb8d31f67fe4e36d7a5ddcd874ca4098fcb128c42c1e901248995943f1bb273fb9095622b774e8c31930806d646b62cf88d3039c0f0fc5
TLSH
T19A61A64DC5944274FF68047381D221E33D35B68A46F7AFE207A9F9BADB3A364139801C
MD5 SHA1 SHA512 TLSH

Submit Download

c85ccbb9-5016-491b-bb32-5feb9d21cf53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c85ccbb9-5016-491b-bb32-5feb9d21cf53.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

2ca7c6c2-408a-40d7-8c12-d0d30d152b0c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2ca7c6c2-408a-40d7-8c12-d0d30d152b0c.tmp
Size 999B
SHA256 6fd381641a47690d9f10daf4266078be62da0f4b22751bc22c7cce6939c1716c
MD5 5f63421a35b668894e6c177dcd7d87a3
SHA1 30aac31c109c300b28f123a3f22545ade8268bf4
SHA512 0fdc2a2be4bf22de2fa47ebc38b922e5907c0ac5382f32ed8812f876bd730115cf1c534e1fea9a58db2b5c4d50cef6149dd8fc51391bcd95c479c36e245bf72b
TLSH
T1BB1192F783F0996E9E0152F09A18DE5BCE1C0506432C7C59C6D4AE17D3E34A5E04199B
MD5 SHA1 SHA512 TLSH

Submit Download

4776688d-3794-42e6-8517-a4d74da5fbd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4776688d-3794-42e6-8517-a4d74da5fbd1.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

b795f6aa-5b09-49ca-b77a-12cb33cdf959.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b795f6aa-5b09-49ca-b77a-12cb33cdf959.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a0bbf64f-1100-4bfb-a44f-68791c88105a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a0bbf64f-1100-4bfb-a44f-68791c88105a.tmp
Size 27KB
SHA256 8ee93f9c7025c1733bc29922624190cd94e4ceb660dd61ffef496e2a53e58f86
MD5 0c3835f47927281f483c5d6d67d55dfc
SHA1 f91eba99b74f2dd5d2c9906719c75e1994216f4d
SHA512 e0947b56602353a9407999a377767e8f23a4e485a5594fd7582c46c51b0c9ef9faee3fe54e43beb6c86112231c3ccb8ecbe6436c87dc23654e0e4b23eefdcca9
SSDEEP 768:SwK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3troc+qpX:SwK9uzYWvcQWsu1ja0HL7Q3Gc+qB
TLSH
T156C2FA3F640CCB7E5FC01A9DDC5A6F973E9802D7A6688D4047FA944C02C77EA522A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bfcd8d40-56bf-4914-81b7-53127bceb656.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bfcd8d40-56bf-4914-81b7-53127bceb656.tmp
Size 10KB
SHA256 db30e64be8ffe447a848bb73b8e6440b451fe16348af62864f646bc481548beb
MD5 5e6655ab77b183eb73bd8f028cb20e85
SHA1 b6a9bc4f9f18acf604a8b7a49f77fa6cba4d56e2
SHA512 16b5d299b3576320f216a7b7bb36b15c802db6035a6831991804cd7ff211c304830562e72c6ba06c2391f0e7c88242b790d2e62e3548fd802e91066aeefd9319
SSDEEP 192:sxZdRCW8/fJslAIdp0lacHW6+WNDQV/YRPpwpBIg5fcJ:sxZdv8/fJslBOHbY/msa
TLSH
T17822AA916E28797B8CDBD219BE25BF53D6F6503291D41E48AAFC861C04E76CD234740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8bed5edc-139e-434b-ae2d-65ad87bb956a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8bed5edc-139e-434b-ae2d-65ad87bb956a.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d190560d-bf5d-4b20-bf9a-13a64f69edc1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d190560d-bf5d-4b20-bf9a-13a64f69edc1.tmp
Size 8KB
SHA256 103c5f49216944a9eeccdf6f13f912e7690affe8924435e2652218bc0f032786
MD5 2afa1196eb9d44daa2c9e8646a390de0
SHA1 3c10fedadeaf2771efaf5fe56cb020f2db172b75
SHA512 f36a6866374eda14aed270d7c78c8fd55fbbdc25ab7246a5be2d964e4c650e034c32a38ee71db7ead14e7bfcf0caee7b88efb335b0843e41059ce69f7a3edd8e
SSDEEP 192:SONF6ygpQmiUyP8tOCTVgVHDR0pqzPTAU6:SONF6lHltOCTVKjGWEU6
TLSH
T12702D735BC687CBB9DF3AE06F48B36139FE4117BEA512B84D9E81A1C00D765C2346936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfbdf85c-fbcc-490e-8c36-5b8843779fd9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dfbdf85c-fbcc-490e-8c36-5b8843779fd9.tmp
Size 26KB
SHA256 e0d34bda622a3a4bfd30f1d28f77b8c5866db847f163c09ccc8d1a20ee597199
MD5 ba39f7a8fb70464287556492aaf3ea10
SHA1 a63ea05a3e88b85603f5c90b43cc3fef59c9d31f
SHA512 13406e04676bbe1f9fa93843d0303540a2fccf83b1064ae2df85260a3b834ae53850011934b00ccb0025787e2544f35f0ddb3ebbf9734aea62a8fdfcffb1c85e
SSDEEP 384:+iFzQkUSvizsNz8TUNTUlIlswQdscOjTVKjGYm8tuwH7vBEr0IIl4:VFdqmwgp3nJ87H75EgL6
TLSH
T1D2C227F298D75C3AD9AE9B03A77D2D039EBCC057F4945A50B7880A0CCC8A1BFD34A911
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

87b5adfe-3c2f-4266-8d51-f8198ac30f16.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\87b5adfe-3c2f-4266-8d51-f8198ac30f16.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bb5a9a38a4acddd8305740641bbe6b22c335be5d723e7b571bfb79de8f9b5f25
MD5 ec563bda337366c2cd43dd20ab7d588c
SHA1 d71dcd1562faadce488211ae79730e10790bcb23
SHA512 5c9040d1746d9b5e77be303c25959937c23bc4179230dc6603967d261a99c6f070ec4680840b69e388d9c88a9988ff9a041b04d87db0de1b07cab75ab536e037
TLSH
T1C841175CAAEA1148F3B76F56AFF6B86D847EBC372E06D49D10010D4E0A67A00CD61B37
MD5 SHA1 SHA512 TLSH

Submit Download