75c49ec78f92a8c7e1f98c579f693bb1a3a2fb1c4e695a1ed5912bfbb33f5a86

Analysis

max time kernel
899s
max time network
735s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
26/02/2026, 04:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$_2_/Features/x/interface.html
Size 1KB
Sample260226-eps36ah16f
SHA256 75c49ec78f92a8c7e1f98c579f693bb1a3a2fb1c4e695a1ed5912bfbb33f5a86
MD5 654bd04df4f45643537d9c5e0fd3d351
SHA1 ad180ca3831f29284c647096de0ddd632f8bb102
SHA512 e71017186ba40e1b7a732d1bd3b876344d90a48779e09e92decc250a79e6ee5387bea8ca17fa77a193e60ec23163026d56b18c149949b960c36588c8ef571584
TLSH
T14F21C00695C02803707BC37887A18211FFB60107C3021239799DF26B0FB7550C9DBBA8
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_724121342\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\auto_open_controller.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\am\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\manifest.webapp.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\Notification\notification_fast.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_724121342\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\shopping.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-ec\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\no\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-ec\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-notification-shared\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\fa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\as\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\mk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-hub\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-tokenized-card\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\bnpl\bnpl.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-notification-shared\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-notification-shared\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\sq\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-hub\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-ec\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-notification\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1063930831\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\el\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1076411040\_locales\hi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-hub\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-notification\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_724121342\v1FieldTypes.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-ec\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-hub\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-mobile-hub\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-shared-components\zh-Hans\strings.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4396	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134165524638365554"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2397528088-2630719772-1129911217-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2397528088-2630719772-1129911217-1000\{70DD885D-794E-4F87-A646-06679BDF0B70}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6076	msedge.exe
6076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe
2228	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 440	2228	msedge.exe	79
PID 2228 wrote to memory of 4396	2228	msedge.exe	80
PID 2228 wrote to memory of 3040	2228	msedge.exe	81
PID 2228 wrote to memory of 3040	2228	msedge.exe	81
PID 2228 wrote to memory of 3040	2228	msedge.exe	81
PID 2228 wrote to memory of 3236	2228	msedge.exe	82
PID 2228 wrote to memory of 3236	2228	msedge.exe	82
PID 2228 wrote to memory of 5948	2228	msedge.exe	84
PID 2228 wrote to memory of 5948	2228	msedge.exe	84
PID 2228 wrote to memory of 4284	2228	msedge.exe	85
PID 2228 wrote to memory of 5948	2228	msedge.exe	84
PID 2228 wrote to memory of 4284	2228	msedge.exe	85
PID 2228 wrote to memory of 4284	2228	msedge.exe	85
PID 2228 wrote to memory of 5904	2228	msedge.exe	87
PID 2228 wrote to memory of 3744	2228	msedge.exe	88
PID 2228 wrote to memory of 5904	2228	msedge.exe	87
PID 2228 wrote to memory of 3744	2228	msedge.exe	88
PID 2228 wrote to memory of 5640	2228	msedge.exe	90
PID 2228 wrote to memory of 1724	2228	msedge.exe	91
PID 1724 wrote to memory of 3176	1724	msedge.exe	92
PID 2228 wrote to memory of 220	2228	msedge.exe	95
PID 2228 wrote to memory of 5588	2228	msedge.exe	96
PID 2228 wrote to memory of 5824	2228	msedge.exe	97
PID 2228 wrote to memory of 5020	2228	msedge.exe	98
PID 2228 wrote to memory of 5020	2228	msedge.exe	98
PID 2228 wrote to memory of 4520	2228	msedge.exe	99
PID 2228 wrote to memory of 4520	2228	msedge.exe	99
PID 2228 wrote to memory of 740	2228	msedge.exe	100
PID 2228 wrote to memory of 740	2228	msedge.exe	100
PID 2228 wrote to memory of 5712	2228	msedge.exe	103
PID 2228 wrote to memory of 5712	2228	msedge.exe	103
PID 2228 wrote to memory of 2224	2228	msedge.exe	104
PID 2228 wrote to memory of 2224	2228	msedge.exe	104
PID 2228 wrote to memory of 6076	2228	msedge.exe	105
PID 2228 wrote to memory of 1172	2228	msedge.exe	106
PID 2228 wrote to memory of 1172	2228	msedge.exe	106
PID 2228 wrote to memory of 2416	2228	msedge.exe	107
PID 2228 wrote to memory of 2416	2228	msedge.exe	107
PID 2228 wrote to memory of 4984	2228	msedge.exe	108
PID 2228 wrote to memory of 4984	2228	msedge.exe	108
PID 2228 wrote to memory of 4608	2228	msedge.exe	109
PID 2228 wrote to memory of 4608	2228	msedge.exe	109
PID 2228 wrote to memory of 5272	2228	msedge.exe	110
PID 2228 wrote to memory of 5272	2228	msedge.exe	110
PID 2228 wrote to memory of 4436	2228	msedge.exe	111
PID 2228 wrote to memory of 4436	2228	msedge.exe	111
PID 2228 wrote to memory of 1928	2228	msedge.exe	114
PID 2228 wrote to memory of 1928	2228	msedge.exe	114

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$_2_\Features\x\interface.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff834b8c188,0x7ff834b8c194,0x7ff834b8c1a0
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,1178519852242680704,10161609074238946847,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1676,i,8869819320665188075,5681400730074238862,262144 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,14909556565992311262,12840826612205082957,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=2572 /prefetch:13
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,3600918105292649700,15168857904417228411,2097152 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,12170600569288853275,9083905825543825603,2097152 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,15289869570760946813,13868486825565935054,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4892,i,3286812035257167141,12902638565897473718,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,13419035346100559615,15703837980256724824,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,13419035346100559615,15703837980256724824,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:14
  2⤵
  PID:5640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,18339920378467221860,11002615947120542736,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1724
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,6319206566460641600,9432524583837641565,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,5590480959113316684,6119290417910962509,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,13912288643826325129,3866070726352264224,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6232,i,6170044849923325017,147165547374496495,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,12299398301414756269,9011464446973499893,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:14
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,1109913688247266937,9260433885129155136,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4992,i,4645059666245105518,8194033142854554232,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,3652173004919903670,9387840754326378498,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6624,i,151082903249516944,411696173484294907,262144 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=3300 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,6571549088004130408,6920516264665080334,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,17267417707625381947,5742983337696110327,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,8424062630690318186,11682906268700266718,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,11789252060938952008,2474180910656797876,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:14
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6828,i,16353464255257549080,12458344955913180212,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,1944203776532926488,12593884819419893527,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=3364 /prefetch:14
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,13152666303343742850,16815893914508246630,524288 --field-trial-handle=2304,i,6353050823895237404,320376926241299635,262144 --variations-seed-version --mojo-platform-channel-handle=3256 /prefetch:14
  2⤵
  PID:1928

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:800

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2172811336537a33607e0aadb9c5ba8cadf28b2a4fcb84d32213c685b1c34544
MD5 c6c88b3fb919f1f75228e4aff327fe5c
SHA1 70428f4ae69437730ef237674398113e1a3f3017
SHA512 1cda50c8b022751e3d3a7c73ffc9350fe02786e3000fa887544b774366bd092e165982f8e834c7eb67dc7a078a4dd76c0d5370912b7c3c7b95fc731b504ce5e8
TLSH
T19FD0803D1572BCB4C499DA714456372B6E1DCCE24DC65F116462356D4D9700186D72D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1eac715bceeccb15cc45a13a9b914a80ac00eeb9f178f8c94511c17b32720b1a
MD5 b42dc01f081a5fcaa564011a4fcbf9f9
SHA1 8bcee7db87d1cadc63412a4981a1a46bc8ac9a01
SHA512 70a6ffe00e23a197554908a478c6e06671c1c239e2134c7e2eb172c03b4237bd91a7d62847a63e20268dbfb9c9b77ec1b8df3b9c0e528df0aaa3f9289c5d6452
TLSH
T101D0803D1572ACB4C485DA714456372B7F1DC8E24DC65F116462357D4DD700186D72D3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 97940410d966d858c20eed03cb90bb2c90667d26b31c34a15302d85f325d8224
MD5 d4edc6222e8c1e3617f47fdaef18aeca
SHA1 9f427b55a2aa91bbedb8d198a0ecc9f8f4f1c7ea
SHA512 e74562c95fe0e3c9095cff60411cf426044e77bfb5baa976cd3a00296bf295151cd50f5b08ff6870e0cc05db432e2b85ef2436ce39330743ac296f58db164d3c
TLSH
T15CE0D8341BA6D368211894C680EC976B81807987F18CD4B933C47B9434C0025979A0E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 335B
SHA256 1774a6e9bbc6b60afbdca5061a3e871698b3a51a26c1a8e38fa94655a95b958b
MD5 85f69c117e172ba0bea8c48592b8fde3
SHA1 f281eb395659b8dbb97f61b42f77792772bba681
SHA512 1a86add59820651f14c1ec373e0ee4771ef80a1f63fb261ec0c56bf0934503105940df4af13d2a7c9d68ac8702b1511da01121ebb017d4f39efbbee309a94f9a
TLSH
T1C2E080764BD5C39E710C648B41F8C31D41513A0BEEDCDD5557188CDC71825546BD69F4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 9c80dc02d4495ad7f789873a89ee4eb9acd93b545618b3c630505befdf2907ad
MD5 45ca101e87f6825948a1cdc0eef409bf
SHA1 1602f5e4d634c98afb3627ad71b2948d82b1aa23
SHA512 2dc018071864722e7cee4230c8e1abe6e49237ab23707c1d485173e3fb4a9c36a7734831c5826c59e7dec9e56b289abb6d1e60b13873f83d7e7d3d2691a10ac3
TLSH
T13CE0D8771BA2C399A50AA48F90C493A918427406F5DC8DFDBB0C6ECCB5803A4D7A94E0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 385B
SHA256 7df1a8357d7c29d2e928cc2f45e1a238f95a20d4c1edda5cc5d5597d8da30413
MD5 7ba367fce8c602cb268afdb9f9f5c43b
SHA1 21ea11838c5c6968e322bd7cdaa6ea94e083e122
SHA512 da0a63d710ec250d0b628af60a7fa5a1cf00f09ec4ebb9b868457d29e08e0df42a1010bd746aff82a96d6846b4aa61e00f65476945e8f30ff9a9ed8abb245798
TLSH
T183E092AEFAAC9B8EE3E84D7EA7B6B0410B8802B2D80B5B1304307DC035D57B02E75520
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 437babe6e111d4bf0ee2420f1aa901ad4014d62d8308b5a5b61bc2054764080f
MD5 1257da27a01f35a3adcc025a65f45a1d
SHA1 695ba6967e55a0379cd67339a0123fef4ca9f66b
SHA512 b2e262a015b0f3f0cb747b38a1a621f8f4cf138da9c1f213ccef07da0da22f1e032735e45de2f18400d2a14e810826e4b610f3aefcea224c3cc91b6350774fea
TLSH
T13CF0F4B5C821EC2718FC0B2920A54A4BFB50136B2B50895F3F3D810C8FF4A3B8A9581C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 10ed80d364c5fe87cae793ac838beec93d576e7b7717cfc494e49bac266625a2
MD5 76cb1ac3c04981df902abc8d7f42cc36
SHA1 9621de3c71820a78962f3695db5ab6939fb1fdce
SHA512 e81cfa37460febcd10bdcd59a01139f5371961a61c0ee3d4b615654e6fecb1f7badede2439b5b373ac436181a364911f7800e07576f7e7186d33500e10558dda
TLSH
T1EE51CFF783E8856D890195F0EA18BE2BCE2D0554432C7D5AC9E49E1B93E2471E181A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 42f996417aa226f34e6d471f4fd1f0eab7ffcf264187a734441e7bc04ca6bce6
MD5 5676c9f547bfc89052e1d888c84cd61a
SHA1 39a504bddb923afc3fdb997b17a84d2117d16a9b
SHA512 edee6c36ef9c26704a5c2f17baa46321b864b5de5662bdada018ccf95bef9ada8c6d62b104af384dc5e093856fc34fcec808ef68e3428dc50e24265fb8570e5d
TLSH
T16E51DDF7C3E8856D890156F0AB187E2BCE2D0954932C7D5AC8E4EF1BA3E2471E24159E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 d97161434433b46b007c97986db864d3a0e0a625df6ca40ae49a65c411d20fbc
MD5 a1a0656124b157d53efd1938bf3ced21
SHA1 e10ca1ca6935666246d687e0c7f81fad7287127b
SHA512 ea2447b11e2b588b3c0b6ce505a94c77fddc6bb2328b079fa4bad9962859f50c45810b6cbe1e5d761835b8fc1084955073f0d53e89a7417b1a17aeb4e4bc4f44
SSDEEP 192:sxZKR0yMqZ/K1Ml8UQhFR/fdsSIS9XBDIIDPh4zodpEO/W6+WNGY0ETc6WGIg5IX:sxZK1qnR/fdsSIaVtLdP/bG5wfOiO
TLSH
T1C2721B156A389977CCD7D209FA45BF53D3F81463E1804E48AAFCDA0C04E6ADE621782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 50957be1a35ad6479283e3d4559b595e5383bf1ddf36b8a9a28b2042c0ddc4a4
MD5 d7b8d679eb39dbec34645cf22379fd89
SHA1 1b95c0a44a9c5f616e81bfb5b7c42ea1e9c9f8a6
SHA512 e414d6c1b79f2424edf84fad262700393945f01aa5ca44199b28fbf69d764d5871d16300e333d57a5df20e91b8a3e80a7c93b7bcf14d899d80424b37e9683c0c
SSDEEP 192:sxZKR0yMqZ/K1Ml8MFR/fds+CS9XBDIIDPh4zodpEO/W6+WNGY0EThJ6WGIgjkJ:sxZK1dR/fds+CaVtLdP/bG5wMjo
TLSH
T131620B156A389977CCDBD209FA45BF53D3F91563E1804D48AAFCDA0C04E6ADE221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 4b3569caae826e46e2bb5e9fe6e043affea464a4893fbceebbb444fac7a9e06c
MD5 e31f413d8f7e9ad507fbca93bbe757ef
SHA1 5bc52186bab22e17bbe0919a42ed7182acc1334f
SHA512 21f4201b5866088a9d788024b36925f41876ced2b879ebbfc15568d6af1659016e8db7e1caea17e26a21a098b19469c12faaca77b2a25e9f1094682fe20b78ac
SSDEEP 768:UnjXV8Zp2+m7pLuL/AAWRmAoQ7k8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3IDwvLlK:UnjXV8Zp2+GE/AAWRmAoQ7ku1jaKIDwU
TLSH
T1FB030B3B680CCB7E4F844E9CEC27BE9E6DE8018B9698895447FA444C03C66EF551B1DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0fb5ef40-558d-48c2-a3a3-30db6f2b1f3e\index-dir\the-real-index
Size 2KB
SHA256 e4e5356545b4877f64e0aeb88287ef3d18e6efe3bfb3898520216f0ecdb532b4
MD5 0a92822b7294a526cc6208d4ea4ebf3d
SHA1 725f615788f045a07cfdb77bfdae0217cafbd6fb
SHA512 675030049c60d190d107cc1d14555d0214accc07667e8c82e7699a35b14564e943825fb2e4ee81261471ec72afcc0c51fda411adf21d164c0759eeeb4385ca6a
TLSH
T17B51C99E9C430A32CDA095B345CA6465333D68994949BF0735FCCA33ACC77AD3D56354
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0fb5ef40-558d-48c2-a3a3-30db6f2b1f3e\index-dir\the-real-index
Size 2KB
SHA256 9bee6317eef84af29b1444351e02b7d3afae56aec4b26fb1d9dd0662676ee95d
MD5 1c32bd8890e6280be53871369ad682cf
SHA1 cb1ae8d4d7197acfe9c45ab57e91bb8beb8747d7
SHA512 25fdecb857ecba84eb7c8bf00ee0a3424efa520ea478a7ccac6e3d2d021232166541fd4eed5705e4620d5a6f833821979b5f109cba704bbd520a71ee7206bffa
TLSH
T1F0510A4D8C4B5B17ED3C93B214F6041933786CEE2B44170B78FC1636AC8716E29A6218
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 474B
SHA256 c77fcf15c258fb2b2ed3f96950cae243c0e6373584ae25453842016e4f6ff547
MD5 8e25a740833439135734a038bb3d7d5f
SHA1 e2eddc113e630e0d2171cda9201cb017bf4fa30f
SHA512 86cf61ae0e0f9d0cd53743afe06053b2cbfbe5e0ccd570d1759b6894fdd83d4f1512d31eaf240c6e3a17de29606db24fb9deab2615f50a26a5fc782ed283f7c9
TLSH
T166F020F72FF31814FDAAD3D564B182B50041BC08C686EC8F195EB69794B1359388AC62
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 93a5546a282c906920de80fb907e0527750002d7acdbc2087540165d3043a038
MD5 b15c12a1ed94fa24c98a9e9d8c6e0ba9
SHA1 1e168657a2cff333df37ff16556a3de488628677
SHA512 f8b0cc2de3438b3bce1111097e26e25d0b3b71386203aa16a41bd8c589be23d7a978ee8592e6e0bd2d6fec94d635e3136e532554aefeb8ad8aead5267a8691b9
SSDEEP 96:KUQAK926Wh+KiQRYAKJq+2xWKqgZ8gKRuiqsQKJyy1aKGg/qQYKxqqvOKMMaa20+:ardVTNBbfw8nM9fgzNJ9dvz9hj/o
TLSH
T1D9B23711753B03813ABE259A81A5B56F46C230633118E43B7BF841E68F67E24DDFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

wallet-checkout-eligible-sites.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
Size 23KB
SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
MD5 ed22bc3ded6df0109b9e594867473559
SHA1 ee39eb80dc23f7fd764199cbe4a153c4edc2e768
SHA512 fb337c0a0107dc37a3067bcd6f60ffb8f63ee892a0ff729dcdf67c7a21fec95a742a274853e8947489108d7543c13b9479e02574f490bc217e8a182f08543aa3
SSDEEP 384:rQR5dkrKzmQWgFlhpyZv8CTi8I6kxAvh0mD:reKrMP8d5JIVAvhV
TLSH
T18CB21064C9210DE11FE4412B6878224B1A3C951B8F90FAFE3B6D928C1F5E06F61B95FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-notification-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
Size 804B
SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
MD5 4cdefd9eb040c2755db20aa8ea5ee8f7
SHA1 f649fcd1c12c26fb90906c4c2ec0a9127af275f4
SHA512 7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209
TLSH
T1AB0189EEC8800EB216C24A3A163985C31A3756576C953D147FC9741C2F5D62F22FB98D
MD5 SHA1 SHA512 TLSH

Submit Download

wallet-stable.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
Size 81KB
SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
MD5 46ca0b1726448d9c7ed48735c246336f
SHA1 8e26f1f1c6f909f2f3d34c17e042e579f3b2b449
SHA512 c9ec0465c2c0eb0bc0316163f9a2dab9332c372dfc4ebedb0ef4139fe1195efdd8aa34367155c29e659d97d5a27e2395ce2f6012c115ef5791bad270de26bb28
SSDEEP 768:r7PEXSl9cv2tlNnqSBBoCJkQgXzwb7XARjMLVF2CYgYHFkJ/Eqajvapznp+9l:08W27jLgX2ZLSgYHFkJ/EqajvWnAf
TLSH
T1F283DB29C9120DB11FA4001A28BA290B297C960B4F55FAFD7B6C938D1F0E45F61F59FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-tokenization-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
Size 34KB
SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
MD5 ae3bd0f89f8a8cdeb1ea6eea1636cbdd
SHA1 1801bc211e260ba8f8099727ea820ecf636c684a
SHA512 69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa
SSDEEP 192:0NOKnK+QXzpTYaDEqIyVZ5mxzrIAfrXKoNKExGI+MmsMR6Q9GMKPrZnfB4FXZ8N:SOKK+QXzpTYaDEq/e5EAfrRoRI+B9wC0
TLSH
T1A3F2FCB1D9009C932F58850A20BA9505376C52237F86F9FA736D424E9F9F58F2530EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 78adff2542daa4fad0725bdfb456f74795c6792c9e40ebd2a9b2aac4e816e219
MD5 13e758565ea9f185909897804ea091de
SHA1 8ea08cc49d823f0db3f7a2ac591d9b74e7544458
SHA512 72b5da01f6a0241b019882876c545b0a92dd988ead72f86fcf4d4a289e2b6b27c9381678aeb3defb1399d3831dbd5c48fb69bc9144c02eb97f331817d6d77bbc
SSDEEP 768:JFK3v34wg47K8V6Ogrm3B8/jW0SPgD2qGbNtuF:g3mDmR8K0n4OF
TLSH
T14AC25B36D868DEA7ADE68F85B35A3603EEE00157D48C8EC8CAD95D1D01CB1DE130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a6c58baeaf3960208d01fcda1f3d149e4b8d87a2066445ddb7ed2d9892ba51a0
MD5 ad5968fe85d08a03782ac683158bc00f
SHA1 d8ccd4b94ad0a75d0e5d1ca9f81e625971423a1e
SHA512 c81aa0a761371c275cd652a65f6721344dab47e80d13d611948fb10a6c9b016c34d10f00ec8c5c609d72ee33a40cae90a018ffd997a45e80492f5c2fb442cba8
SSDEEP 768:WFayv38wgSqiK8V6Ogrm3BlA3dS4smfPi:tyv3F6DmRm3Bsmf6
TLSH
T1B7C24B35E868DEA7E9E78FD9E7496A07EEE00157D88C4AC8C9D81D1E10D71DE170BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5d4962cf3dd771eed188d4503f5e44d1133307d820fb7e994a3624787c356934
MD5 255a4203ac85ba30110b45ea7565b250
SHA1 7d087ce51f693ee9a67c4a450c3e0e3c5e46944f
SHA512 793e26fd7a269ea5bd309ce32c892667c219f7c44ca3b0cf5518bf696b02aab0ab8d6a4feec785c66ec781762dd393cc55e2f6ff62550985495e1f69e7af62e0
SSDEEP 768:lFK3034wg47K8V6Ogrm3B8/eW0SPgD2qGbNtuF:53mDmR8n0n4OF
TLSH
T187C24B36D868DEA7ADE68EC5B35A3603EEE00157D88C4ED8C9D95D1D01CB1DE130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 82189bd049150dddcf6d7c5e45afbb0db9de3b19d2e3eb8231d0077f615a2ad0
MD5 eb6558501fa848100f4b5bfcc6e879a5
SHA1 8592736309d33ee03c9178b85f0b2ddd8f4a6466
SHA512 98a77956255f649fb1349008a56eeb8f072124e63b1fb23677dd451052d4dde84ae4cf002cf3ada14d64329baf77fade7e3cfd921d6eaee30a56cfd4c6674dc7
SSDEEP 768:RFK3034wg47K8V6Ogrm3B8/eW0SPgD2qGbNtuF:t3mDmR8n0n4OF
TLSH
T178C24B36D868DEA7ADE68EC5B35A3603EEE00157D88C8ED8C9D95D1D01CB1DE130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 c8e0ea841eb9c26b5e66e98819dd1ac1b6b3a5accf9ac24f107645159cbb2fce
MD5 5587fd50c20daa0ced084c1c1099b862
SHA1 57f7ac896cdaa09d13eb7ebf7d247171cb18d405
SHA512 4910bc83a10f880c87d502c4ddca0aac1b050db3ff99d9cfc6f074b92a11cf2d87361c3d57c31294a11fbd46f7351a7363b7a51b6eaf82bcdb64f7483c16f913
SSDEEP 768:lFayC34wgE7K8V6Ogrm3B8/eW0SPgD2qGbNR:OyC3uDmR8n0n4j
TLSH
T1ECC24B35D868DEA7EDE68F85A7593703EEE00167D98C4EC8DAD81D1E00CB1DE530B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.2.24.1\typosquatting_list.pb
Size 1.8MB
SHA256 c81b63e1f23e7ad362c75f94d3009844335233ef0211619a7cfea2056605bce7
MD5 25ea96effbd4b90e6a308ce11be78b44
SHA1 4d3bb132cf2e4656b0bb74d6ff0e685452d08025
SHA512 7db06e523872a3cc845a2e104cc94ea6db15c38533a4ee32f79c8ab702ed7589c4039602b2827b6840a1fc2ef7e973967a035e6438ac2254661185ebac578460
SSDEEP 12288:2lPKKhcIwtlFs6vAc3ZxNp2YnqgLMY9rl5/9JXYXHW55JN3R/aHUTZOAmsO21s7T:8Po5rNAYnqgvz/9JXYXHW/nR/UOZwS6
TLSH
T1F395B4B9DFC00184DAB8112D20BF71D8181412A180E9DFEAFE7C85DF2BC598977E59E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 80121ce85cc49f7aece625568cf9ff983fe98be4372b96903e9413bd2dda7606
MD5 64e26d7b395f1fcf545f8c930f53a646
SHA1 487fcd0a71e71f6eb6d6efe8df5007fda5b0f692
SHA512 6ee9822231bb6463316d388bf91f9e13f35c9ae011e8f639f6cfa3236631ddf5fed5e8241bcd5a3fc38102314480cc5414ca1379a8fca6b1d1b1a1a1826b3e98
TLSH
T1425142D18C3D1AD2D4FD1E2EA48B38FC95ECC626F4A4347D6468E998463A61D604043F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 df842b67cb65261461860e4061c6de08db5b0deca198bda9856cadc3b44f0edd
MD5 8cdffeea7c929bd42e54546af7d3e3b1
SHA1 58f539cf5e8da38327e2cac294ae4f709ff42ad2
SHA512 0ae05d1aa4796b303991cd13432eb737553f94f220c0fd49f0fd6e6527d3aa694846e9bf8d4975c689cc059de954ad5d2f58e54b19867f7bf2cf863d4c8ecc0c
TLSH
T119513FE05C3D66D1E4BD0E2EA44B38FC91ECC626F4A4343D6828EA984A7A61D748047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5c52e4e74fdcfdd2d1b0ed7bc96c8fd25f6ecdd2e422bc90ccabe911850f3f00
MD5 71b765a0828111dbf18c8b822d86e559
SHA1 f4c5005f13d9ad9d2031b873a99dbdd8d1c99bec
SHA512 6efdde69a4dc42327da929bfef0b33a9adf03657b37729157e6049376c273b60ed499509591078420e8c3986551ba5c68404eb385def36ccc9739f8e0f2a1db2
TLSH
T1615150E09C7D66C1E4BD0E2EA44B38FC81ECC625F4E4743D6818E9984A7A61D748147F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d2d70ff550c65d5ffdc4a1a32e7c1477d5514fd6aaa8e620fd020db9c63c272e
MD5 80de0f983a9438ffa702d28bfaa61ca4
SHA1 0a6d25d6b6da3e09962c12a2c4c9c4c2036f97ca
SHA512 c12986d6c7e28899a35ee750a686cc37302917cd9a8e3967fa00401d36045d8a63fb224f099ed1cab414db586cfcf42722516a976afc5fd03ffbee895ff46971
TLSH
T1B05141E08C7D66C1E4BD0A2EA45B3CFC85ECC625F4A4743D6858EA984A7A619748047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 12adcc2676b46ae090b4813523aafe9ef9fb808ec207ca89b97c9bdf8057c799
MD5 c89423787cce55a309b94fabc6f6a716
SHA1 5ac4b5c2100eeee22cbe4c6b5eca180c010887e6
SHA512 fc0d34b686092c7bc9585a5aaddfc47967e9d28164394877a3124ad293b6fdc718dfa4d2b925940d0201cf102e6c78aa6c0a91a595d391a33e1e63f03ae6d403
TLSH
T1EB5151E05C3C66D1E4BD0E2EA48B38FC95ECC726F4E4343D6818E9984A7A61D748047F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fa8c4f937e7273bd06a0e718fae5716dcc045947c9360320728aa84074f2a137
MD5 51d9299fea3163e8714c4689bd920520
SHA1 442d7cedae4d6e5bc168e6260d13e349274a2497
SHA512 36f80d6fe92b27ece16dd0d5277d1d694046cb4efb3e7f44568d91aff452e0cdbd8d93dbef9bfd03df44eef76be0aab469b6404fa41cdb3c22baf75b60ca76b8
TLSH
T13A5162E04C3D2AD2D4BD0E2EA48B38FC95ECC626F4A4343D6868E9D8463A60D708043F
MD5 SHA1 SHA512 TLSH

Submit Download

31e3cb755cf2d66510c7f94c42df615dc13575ad2e8fd5a63887ca145424d34e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\31e3cb755cf2d66510c7f94c42df615dc13575ad2e8fd5a63887ca145424d34e
Size 146KB
SHA256 31e3cb755cf2d66510c7f94c42df615dc13575ad2e8fd5a63887ca145424d34e
MD5 98144a4b67ce21832c45a0d20d3163fc
SHA1 d5d7d718eb78e4332899326f111796da8604a2d3
SHA512 3e25330d1ce5810426da57aff275d2ecdd09b6c0cbe4f7534cf8bf17c39f595dcca147b204b6f74396b23160757cc030753c4c227b0dbea54f489b9016459ae8
SSDEEP 3072:w0mACj/voHPqreKLgf7UxnNvVx0v23PPb3jLqX0kj2y7uzTs/oGIZnn:w0mACj/Yq76U5zx+cPP73qX0kj2yEZn
TLSH
T1D8E3E06C6EDAC806C45B60BAB915F0CBC5068F3BAB49741FA64948684D70B4E07F1EFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 e192f7b1d0ccc851a40c79b09236a18a420f4bd29bc4eeaf3ef83380e1361175
MD5 b4e1acaaeb2a3c80aad33e4489d64119
SHA1 94f785f212ec3560309ebdd856c83265d189c846
SHA512 d209abd5c7b9778ae1e0a7483a2aae6a74e0eb5b44a5a5c231ae48103dd67f2cd402a230ce94b8a03cf5eb56010fbce93b1e8fdb6f75b3387afa240f85196e85
TLSH
T118C02B997C2735C19F0121FF221806BF4BD20D04902CC1F306BDC8040078778030049F
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1063930831\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

notification_fast.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\Notification\notification_fast.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

tokenized-card.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\json\i18n-tokenized-card\fr-CA\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1288533141\manifest.json
Size 121B
SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
MD5 8083caaf7f5bc5f01ede464e68db1c7e
SHA1 ed6cf18f79c4ee2968adfffe7bf1bce163ef3873
SHA512 60924bd5617ac5f994805f9a871999764ba93c6adda79c501a0b692dce51b9db6f6531a5e25129bc424ae7c4de868ba6e5a976d6bcfbac2bb8bd192c5513c7ee
TLSH
T10CB0922289429D300469079809B486A6E230674BE406F0397B7041CC8B785B8A4A2A94
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1834856968\manifest.json
Size 118B
SHA256 9d6d7003c4c01e68e6525f69b8f98af678b0df2367f3eb69a060e8b97aada74f
MD5 711942a4c8208004130917288867d5bb
SHA1 4c2000afb746f4dbb3cbfa083f0c6b6e474e441e
SHA512 034cd1ab32df341d04e814d878edb66dbc7537bfc030029a7d8b38dd00bbd0d434ad6a9dbbe69ae67d2569ff39ead4c5eeaaf03f4290cd24031bbc18f983c761
TLSH
T189B09BB00C19543B15805710DD7066C683F80214E455671904C035441F4417480352B3
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\edge_checkout_page_validator.js
Size 988KB
SHA256 08ace81343ed18e68e6549c1660931a4dc2c1ddf6f8977ac86aca3c4e26f4659
MD5 f71c7464705b0b3e465eadb1abb73caf
SHA1 495df57ffd33aa471ef6c0f9126f9504035c4513
SHA512 3cf2176cac4a9f3b3e5e12dac53c88119664fce0c393a6979004764eb621c644a6c5084a082e39053af716e274665f1296df6588984a2ed07e2f451068d8e71c
SSDEEP 24576:cs4DmRAps6vGNkrQAdHAQUwzEBCjiWctDBLIfIK1Rerpis89XKLRzMEiJsfasHP7:cs4DmRAq6vGNkrQAdHAQUwzEBCjihtDt
TLSH
T17C253C84E1E2253466D74CB960B7D2C4B9DC04583399F1E4FA6C588ADB0FD4723F6A3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_1845578897\manifest.json
Size 145B
SHA256 32abf553ff9a72b666596f7521b1244b656633e9a71e9900c7b20f3399bfe7aa
MD5 e3291bc8dc4e577efb9b6dbbf94c8dc9
SHA1 76bd76eae0ace79cb8e79d9d2dac9265c0e2360e
SHA512 aa51487f9d35a1e5954e53b1db14d116b304cfb8f2808699333d29e9be2fffcb0922fdd5126221c13790885ab777b29f648185a798900447268a0bd42c2083c4
TLSH
T19BC09B73C831AC7115744BD40DF59645EF74574BF511B0563730018E0F3D57550616E1
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_2143247837\keys.json
Size 8KB
SHA256 722047d2502aaec9c2c80b0f7d3b60b29d3f6aee27d656f489e4fbca9a7c1a00
MD5 48cb5a96ba70f0dfcca0a2185a9a0c79
SHA1 efdbdf44f7cfea2e3b34c6b2fc0dc37a1b5cef3e
SHA512 77eb7bc1bdea2b121b8d95fd8b5d14603d5e105dbf8c8e777b44109b1eb2ba65785ee3a094e18ffb591f81fe140ff83af1618d82680a5bb3a29144c58895dd2e
SSDEEP 192:uNtGbRgDMYPyR9Pm4lOvMwkoR9PuGMXcy:Ol4BKjA
TLSH
T10912B2BF14A01541CEBBC16E4F0B38B78FB038065BCA3983578BFA4958428AD173B4B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_2143247837\manifest.json
Size 79B
SHA256 8f8dae05e2623c591dc44dc5a91385b4355da91492a770f0ca99b509db6533e2
MD5 44791df1f32899ba8f0fd1f235cd4711
SHA1 e5ab30e8b7610e92c81c99adb110e3a429fc3174
SHA512 729578ec403ba1410c5826f622d4db774d68e243112351f50cb5fcf231ebdf7fd9759bb5e2bd4a7bd6433c147ede44b78f4eef2eb08c456d4a430b55a149edd2
TLSH
T18EA0126018019673148807600170878643501C012029380005521040258413611A312A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2228_724121342\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download