hxxps://www[.]freightos[.]com/logistics-technology-insights/procurement/forecast-freight-rates-with-confidence-live-walkthrough/

Analysis

user interaction
yes
max time kernel
92s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/04/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.freightos.com/logistics-technology-insights/procurement/forecast-freight-rates-with-confidence-live-walkthrough/
Sample260428-pystvsdw4j

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 3 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4088_1187466413\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4088_692391882\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4088_692391882\protocols.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1320	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134218539533686535"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2714754311-527593155-1440850301-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714754311-527593155-1440850301-1000\{31D9EE83-6225-450F-8DC2-ABE5CCA3AC61}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714754311-527593155-1440850301-1000\{D9272686-35A5-4EE4-B254-8F46B56601AA}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe
4088	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4088 wrote to memory of 2380	4088	msedge.exe	83
PID 4088 wrote to memory of 1320	4088	msedge.exe	84
PID 4088 wrote to memory of 4260	4088	msedge.exe	85
PID 4088 wrote to memory of 4260	4088	msedge.exe	85
PID 4088 wrote to memory of 4260	4088	msedge.exe	85
PID 4088 wrote to memory of 1060	4088	msedge.exe	86
PID 4088 wrote to memory of 1060	4088	msedge.exe	86
PID 4088 wrote to memory of 4092	4088	msedge.exe	87
PID 4088 wrote to memory of 2676	4088	msedge.exe	88
PID 4088 wrote to memory of 4092	4088	msedge.exe	87
PID 4088 wrote to memory of 4092	4088	msedge.exe	87
PID 4088 wrote to memory of 2676	4088	msedge.exe	88
PID 4088 wrote to memory of 2676	4088	msedge.exe	88
PID 4088 wrote to memory of 4312	4088	msedge.exe	90
PID 4088 wrote to memory of 4848	4088	msedge.exe	91
PID 4088 wrote to memory of 4312	4088	msedge.exe	90
PID 4088 wrote to memory of 4312	4088	msedge.exe	90
PID 4088 wrote to memory of 4848	4088	msedge.exe	91
PID 4088 wrote to memory of 4848	4088	msedge.exe	91
PID 4088 wrote to memory of 3320	4088	msedge.exe	93
PID 4088 wrote to memory of 3320	4088	msedge.exe	93
PID 4088 wrote to memory of 2316	4088	msedge.exe	95
PID 4088 wrote to memory of 2316	4088	msedge.exe	95
PID 4088 wrote to memory of 4852	4088	msedge.exe	97
PID 4088 wrote to memory of 1496	4088	msedge.exe	98
PID 4088 wrote to memory of 4852	4088	msedge.exe	97
PID 4088 wrote to memory of 1496	4088	msedge.exe	98
PID 4088 wrote to memory of 2400	4088	msedge.exe	100
PID 4088 wrote to memory of 4204	4088	msedge.exe	101
PID 4088 wrote to memory of 4204	4088	msedge.exe	101
PID 4088 wrote to memory of 4748	4088	msedge.exe	102
PID 4088 wrote to memory of 4748	4088	msedge.exe	102
PID 4088 wrote to memory of 2340	4088	msedge.exe	103
PID 4088 wrote to memory of 2340	4088	msedge.exe	103
PID 4088 wrote to memory of 2512	4088	msedge.exe	104
PID 4088 wrote to memory of 2512	4088	msedge.exe	104
PID 4088 wrote to memory of 64	4088	msedge.exe	105
PID 4088 wrote to memory of 64	4088	msedge.exe	105
PID 4088 wrote to memory of 3880	4088	msedge.exe	116
PID 4088 wrote to memory of 4800	4088	msedge.exe	117
PID 4088 wrote to memory of 3264	4088	msedge.exe	118
PID 4088 wrote to memory of 1028	4088	msedge.exe	120
PID 4088 wrote to memory of 1028	4088	msedge.exe	120
PID 4088 wrote to memory of 1028	4088	msedge.exe	120
PID 4088 wrote to memory of 4476	4088	msedge.exe	121
PID 4088 wrote to memory of 4476	4088	msedge.exe	121
PID 4088 wrote to memory of 4344	4088	msedge.exe	124
PID 4088 wrote to memory of 4344	4088	msedge.exe	124
PID 4088 wrote to memory of 4344	4088	msedge.exe	124
PID 4088 wrote to memory of 5032	4088	msedge.exe	125
PID 4088 wrote to memory of 5032	4088	msedge.exe	125
PID 4088 wrote to memory of 5032	4088	msedge.exe	125
PID 4088 wrote to memory of 2852	4088	msedge.exe	126
PID 4088 wrote to memory of 2852	4088	msedge.exe	126
PID 4088 wrote to memory of 4348	4088	msedge.exe	127
PID 4088 wrote to memory of 4348	4088	msedge.exe	127
PID 4088 wrote to memory of 4348	4088	msedge.exe	127
PID 4088 wrote to memory of 3768	4088	msedge.exe	128
PID 4088 wrote to memory of 3768	4088	msedge.exe	128
PID 4088 wrote to memory of 3768	4088	msedge.exe	128
PID 4088 wrote to memory of 3124	4088	msedge.exe	129
PID 4088 wrote to memory of 3752	4088	msedge.exe	130
PID 4088 wrote to memory of 3752	4088	msedge.exe	130
PID 4088 wrote to memory of 3752	4088	msedge.exe	130

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.freightos.com/logistics-technology-insights/procurement/forecast-freight-rates-with-confidence-live-walkthrough/
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffb2858c188,0x7ffb2858c194,0x7ffb2858c1a0
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,15377327123416711555,16708697899830745118,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,14204806556866888028,57675084976303872,262144 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2188,i,9197864963230938009,13838668889031969383,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=784 /prefetch:8
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,140598536321602533,613921674182858353,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,15703239453125370256,3503054726130416705,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,1657027817522309001,7249043428447853767,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,10899651153330154148,6567725054552587085,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,17544995403223236161,7784895798244158947,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,6464000133384777685,12138938540822855601,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,17737131555712402845,3341203657320430201,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,12114094529840272830,781024664800792974,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,14995426847896046932,9379833256282081073,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,14995426847896046932,9379833256282081073,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,9148066933944469123,1655148657031545323,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:8
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,2654157188225777655,3494081908864567663,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:8
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6552,i,16511833160390371794,3276685512930243371,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,10470707937902797000,11275268184189977739,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,6051240634307849684,5258828425369226013,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,7042674146114430477,18035000912829208031,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,6795917564245586100,10262191805653789657,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,18382190106528580077,8860869968214689432,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:8
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5980,i,2366988903173124918,472954284008905323,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,3136960300612528208,1866447481018956693,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6948,i,12307764079187167758,4947984321305212681,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=5964,i,5168208377063623458,4476855680617390365,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,8915628522991250060,14960537187599477637,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:8
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7144,i,10669479058401653789,12553460623539815292,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6588 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=4416,i,15957439800542377592,1194462676996179976,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7368,i,18262690026709779389,9831639435450408289,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=6400,i,17898625912510988415,3277466229018863073,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,12748487220269894388,13251900811484366982,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=7156,i,2527489816971008668,15698522358875387874,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=7424 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5104,i,9446368565509963128,13157851709493935001,2097152 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,637310534919655514,1173864473609788861,524288 --field-trial-handle=2260,i,12792714483179819493,7508293418906911825,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:5500

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4088_1187466413\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4088_692391882\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 329f09584b2d1b595fd09386d31dbe1eec1906f7d450ee40fb405617035e9b3b
MD5 c89978251aec9d90daf9a199726976fa
SHA1 72d52e478c5ea1ddaee134eed8228a6bfada9c3f
SHA512 898671bc521bd5dc24824557f42f33f18007179c03133a4c176d62af1a4afb01dd96179fb320915cfa4fc4d3e62c77cc770436b76ebeb4b092c4a313f9100f39
TLSH
T140D0228CC300A820C3CC88B220ABAB88282AC820820282082CB2080C2C82282300E082
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dffc23e237400efd661d1c30cb24b84d406666a0006e01d47c71dda1c139dede
MD5 d973725326969fa61f4c23d3ae69271c
SHA1 97064cb45ef73fc0983937604b28ed87d3c663cd
SHA512 d14168136aa3f83bccdc1401e1e3b177dd3fceb060f02d3d7a87f8bbc1c7f0f9388307aef3bb0e879d276489965f6c80f9d0b32c40ec3a6dde330f4f98e0e93b
TLSH
T106D0228C8380AC20CBCC88B220ABAB88282AC8208202C3082CB2080C0C822C2300E082
MD5 SHA1 SHA512 TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 71KB
SHA256 b7abd49feb1dd9889b1b5692a8fc5cf9c8c2d780a415b1c3e0e1a84b1d49e768
MD5 e0e0bcb3ab8fabaa77193016389bbb17
SHA1 820d47f4c629d0db2a889ee5c5c946992d46b9ff
SHA512 3e8d2cec2f05e563e94eb82a90e22f39491b8b92d98d4a272a2b78867b0f158cc099910e24629964bef62c6417de15168d2a66d866d2ef8fd6ad35f565e79c9c
SSDEEP 1536:QPe3VkJuzvE7KvLRSib4Q0EOJP4vhgpsvMG8Gxk6CkzWXGQjktsgTi:XkJEceFSVnJPUtvMG7xkqzXQjWsR
TLSH
T1DE73026F0654E4CD8DBD39670CB8C2863CC965B9B4BC30E9F81D8C57B5790AD49860BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000085

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
Size 96KB
SHA256 ba40ad0211793e3fbdc6653fb02997b5f8877cacd5c8c4b853b0822d769ba790
MD5 b212f22a28cac913f07d831d409e26da
SHA1 b5f8e95dbe9f3b3ed0ceedb3f2fdc3ce82f96be8
SHA512 43009311c6dc382dbb71fc8231de2134b80e77c72b445d9608b1ab8430e567e348358867eef37aeb80c53130d00b4f33218656722ce1094b68d3c549f9a9929a
SSDEEP 3072:y78t+2dpX4guRM1CebRTBddhzDUF52tXzkyX:yAtPPXBISFRNwF52tX7X
TLSH
T168A312E6D6FA68C32E249B533B98B5364358FF904683F2283CC3CB4259B1232D716169
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000091

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
Size 25KB
SHA256 f320c5dd81267b2a4972bc73af366277d40ee5b366891c060795a67dbd918cff
MD5 830f41a5f6f7b25424585e7010d0eecb
SHA1 aafd1ba30a3cab9786d7f8edc43e8a2a46fd4d71
SHA512 c80288641baea0f87d4ea208e60b023ccf6c501878dbfd04dff36f6c5413a5c994a908b10bdeee2eace321b972103358139a3324adde7eb9acc82d20349a9c7c
SSDEEP 768:diQfhztac7UNHGacTNMDcbWIqKvv9SOYnffJPbre:gcOHfcTNYcZq2lknfw
TLSH
T144C2F1A2C092FB54A08EB055C8E5A1373165A291FF7B0DEC3C75F94E6878362C09634F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 44KB
SHA256 ee7cf1cac5d688865e3b34c8d5196297d580ff8998ea18ee6ab945aead9e6a94
MD5 aca72d661e8663058e1b95934274c170
SHA1 3883507b7956c25806597fef7d4b89a7f2d0b527
SHA512 7b3f0ab17f889714129fc54b59281d54b521425b4a21e29a655ec46a6af2b1e340bbe8a49437990d341668d2c4f5e5620c54eff059dfa38cf74a100ec215a62c
SSDEEP 768:5205ABT24ns6Btz0UecJmTLYEl7NBUzlpPiOGwSbIdl8dM9SAxDsn3NFkue+t4Rj:5z0TPns6kCmTLj7ilpPiOCbIOwSQAnYz
TLSH
T1FC13F1D23102788A242D08FD8BA91EEB95B030639E0DC5713D2BFD70E91E75635976A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000098

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
Size 144KB
SHA256 5c5b1f8c4e4493bea89b115cfbaa3f1a42d012f15822bfc5a04ef3c11aa1ca3f
MD5 adcd8117d009538dbb21775b3bfc1140
SHA1 89c5e2780e853e681717932bfe87c0aa8e032d02
SHA512 8587713f5406c6974d949e3b55f0707d5b40ebbcfa4a67c80f46d82d317b1e2d7acc35a018340d45bcdb0abd590e05a2c11bfced086b8f704ab6cc7f3ac117c0
SSDEEP 3072:Ouivo1Pb3poZkF9OWfeDsHxgWRhXFgz3b/rdEBDoq0G:Oxw1j3poZ4ECcsbyn/rgKG
TLSH
T1E7E3231A98F4ABF59F990DD96405BDB40D3BD6A1DFBA6C0160A68EF1582CC13B3D0723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 32KB
SHA256 69d0033b3150b0ac1397654bc33f8e5daf1048be3adbe14990b7e77998adf8c7
MD5 b6f70ddf350d2302a6f2b5fe3e453309
SHA1 b99d7bacb395337b1ef9042e6b039360b1691289
SHA512 08a55405d1def8786fbb78456b816ac45c2b850b80c152b7c5c433ac25dbffd49f53fed7a9204cdce3d927670c7f88ada2ba096f4940129b8573e8b567596e3a
SSDEEP 384:zAVskkrvOYay70wHGLFSS2M4qWrwPo3EmbMv2qrSulOZCYHnI7IPfyu+DHz1r7ei:EDGL4zMS2u+wQLMuqrSuEoAfO1rAN0d
TLSH
T114E2F1A94E8EEE190531452215964BF3F492AAE93274C3A4CD7FED4637ACF1E8BD0701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 26KB
SHA256 4c495785a4daaeb723269262bd41ce93af0ff85042bb826b89d50eb0c72a98fe
MD5 4f8f3608871166d92a2003f2326d397e
SHA1 08d4168fcbe38b69cd9999e8a78fbc5b0a557bd4
SHA512 21b19a92836aa166d956d1eb97959910f244bcb6f564b8347bbac4197e3a3ee4a5741a51262468762121f65ba24c1661d21c465445fbdd42be258656dc022a2d
SSDEEP 768:NlrlshurNaoKBLSbkWY8giekrPDF5h6by2UMKv1WIWn:/lQoQOyJiecD30Dt
TLSH
T1ADC2E021B92A2478BB723D290C57D834041C507BB88B9FED106B2FDBA8E316195A7365
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 23KB
SHA256 917f8c178c852f410e08a4ce739802d10e36d09a5e424c2556b133ac7837d52f
MD5 622df83212864b73c4ddb7b7495397f3
SHA1 31a09ccd59237a751ca6c3b15eb83beac20aa7d7
SHA512 af9ba897888845278dd113c86a11c52fdf3fd93cd426dba7352779dcf4b76cb7e3da2a25ee18b6bea78c55854a70f2eafd3bcff09aa408f51f6cedfc7e8a822c
SSDEEP 384:XWe1wLmtoafeXabg4j7DsNPng3+Al9tJdZocardUP7XL+I7SOnW9A0E+yrwwIM96:9+afiIXYNPgOABJDaRUjXfCA0EiwIEn6
TLSH
T1A1B2E182EC526BA0B146F25BC973C9C5EA95B270DA8FB3E3240541CE1A405F4EE23D73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
Size 96KB
SHA256 3dda3d16819a1fbfb450addd7908ed1006fd6da3525198a34e029f0af803c706
MD5 b4d8ab18474067bc8de29015e0d8aef8
SHA1 271b4c04bdcf4f2094a17f8ab1f72f0c31be27be
SHA512 3ee0329d2bc1558d6f24150f3dc5e9b7270956803fbfb48a111ab6ce8fdb64c1470d59d54db251ab053f6433505727f62271498e362c8877cee729b4332d2907
SSDEEP 1536:h+q1NgkKtK5Db8iBccfnjqkKQqlnoKLgpk4maRarrDZ6XCMHIKQzRguc0ksD:sQmjQb8KjqkKQqloKS2rrDZ6SiQudsD
TLSH
T1B9A3139351F83E8FE465E0ED833B0A5954E133C6BA936A78C46CF4989505FD3CB521D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 18KB
SHA256 21240ede58aeacbb8a52c676cc1740a3f7b721ff392415f72f540ff91328bd7c
MD5 a57a215e35b3b2fad4793915c7204388
SHA1 5f2151369ae093c30b597da86c5501fa3022b129
SHA512 468bd73d2aafcf8955b1fe8aac53c67490a7fcce56b127fadd19a174596a3bf7de01477314db461fb45d00ded4edacf30b23595a714e80c856ae806e3859f6cb
SSDEEP 384:htwQ/Jhoqd79AzyZCDsRT8JciqJPmbxnimejaabhfY1ARUgM9:htwQ/no29yyZCDsRviqobdLAe1Aq
TLSH
T1AD82E1BC1688688035031D3E782DF97534B796E2D3738E57805B62D04BD65EB36CC438
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a8

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
Size 43KB
SHA256 75c1096cb83205f2253402c4e183ec97c477b3c4c5addb4e206327a5f0b76d5b
MD5 1671df574bd49fd5349dc164fb6c0400
SHA1 149e37771aaa390b515eefbcd77e8ba756bbac27
SHA512 4e7ec375d91701e53ccded1b48480b87a9a23e3cbb53c4891e8b92d6ddbbb9dc14a4e0b4021f98ee0fe861ab7ff425bf90fb12f09832822854d3075ef9ee78ef
SSDEEP 768:ZQJspw8Zuoj4l+cU6YGcqCK67hiMJc869jfs+YVnIWEJRuTb+w+Gl2fodWR4Iu3j:ZQJscqe+czKJLFkjDYVoJ4N2sW3u3IJ4
TLSH
T19913013A1CCAFC41BFAB7D5AE9AF004FA68F0C111BE1A0728B04D3F741D56279909936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 30KB
SHA256 a28aa077216b794e9de92b907a812221416a6a8a8cb4c6befa6e428d18295816
MD5 f1ee7fcd2de3b6e54475cec1f7eb37e8
SHA1 03f4cd2cb782e1e1202bd568f20bc8665fc6c132
SHA512 6d372c7873ca26ad30b06071e10d55c5877beafbc12594e2e56997bf7b87f90c72187fe6079183f78d40181b08a2dfea14412ff7769e951607a989b7bf2be6ec
SSDEEP 768:XKnQtO5CanwuFkWRNTBUN9g8RStifSavNfnZJABVr/:XKnQtO5Can5VNTC0tGd+r/
TLSH
T119E2E14BC30F6A16C59069C452CEE208897BCC6758FD48578CB686A56B1D55FD6C3CC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000aa

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
Size 37KB
SHA256 cdcc3656c2a02423a1afacb2bc85b908dad5cdae327c44057c7c3279434656a1
MD5 e92e6c24e24ba50dd2582d5f3c6902f2
SHA1 658a47d647e72bb19ab75c525fb2d96e2492fbd6
SHA512 77b154081b31d1bb54046688f150048f98b8102c1dcc66f99a865b7ac96b4ff6a0dc369321ce2b8ecb75cef2788708dc796dc649c22b44e65bf0481a5628d35a
SSDEEP 768:5ZYTICd+7V0jMzWOR4Wy3cTs88LdCPVkfQ7hYZQbCUy3pvfJ:RCkMMiVWAJLdPQ6Z0Q3Jx
TLSH
T12C03F2653B4F907F13DEB5F5AC093C4F36D55F3F20097042DAAD18AA42EAEE890456C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
Size 43KB
SHA256 ef1944f59153a0ebfa6a4fb1d8504b8f794089c207f5a0729424e17561d6de8a
MD5 c5a36996ead9d769a177bdb348707ee3
SHA1 9bd28568b7f81d5b8d119b9ccd0c115e6e522643
SHA512 74bd55faf4328dbd6428e5f538f24a34852dbf2f53552718919064e3e5a6299530a174620e3e255fca8a6c1be37da749f2cb3091ab8d34160d7c4a96d5a2e8c1
SSDEEP 768:eFFzEvaZk9hnmoEhKxz7GrgL/omR1VMyrsd8psrjPs7Hb8bRP8jyc2NxcmTtui:e3zEQChnmouKJKUL77qyrTMQb2l8Oc2x
TLSH
T10913F196454C79F4E042C09B57AAB88D154DF8B1B0EFD7B92D0E4B52104E649ECBBCEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
Size 47KB
SHA256 e76762fdbd142f884f24995f6b29d6b0267a2de0db55ebfe714d957cd565fb09
MD5 4bf340f5d06cc15b9e8ccbd6b64e2f5a
SHA1 0bbe26892df250c891ce9152b461ad1a954e0cbd
SHA512 da8de0ca49ea71832f5e7a63f9888f8bf3a2cc4ca7cce872e1f9120a3399ab1a82620648047098553185164d869e5e3f8bd654017ffee4b613ce0989c8961208
SSDEEP 768:mB3lEXf22tNQO2QLauUwTrEd72URaPRWwmamS5qeuwclrHkto3oPW1dlpkM:k3l2f2cL2QLauDTrGRaPRWwmeIe4rGdO
TLSH
T1DC23027DE0EB3A643A903C5E8128CE4124B39ED596C7F61C5E2E11E2B04FF996C99285
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000cb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
Size 1.1MB
SHA256 4e5704b39c74548033bcaee1a3db459f3aeee2e2b654a7c3e322cbf2543e9e37
MD5 cea23b3717886f29dc4cf36541838e48
SHA1 01034c965658d81b4f3fce68290a125f671241f5
SHA512 65c46d097292ab992b096c4611cae6f1ed1764e9dc62d075bc8ff6540a39c3aa0713c8f9a1358ceee84afa8cb1739711486aa4da4b0ef566846b7d0174f6bc80
SSDEEP 24576:Cl0BKargKTnIUn2GqaGadqLXRXQ1wxWX5HY8oJQ+SLt2YINj:O08MnIUxTdsYwxWJ48oql8j
TLSH
T1B445225A7BE2DC52FF22807D8400E21DE6F8ACA4D255DFEB58A5F598B5BC5C1C1AB030
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ship.freightos.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ship.freightos.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 396f9c484d631e655d50a3441c3cc261979fea4b73c12da3e20e91fcaa50ea82
MD5 6fb97cd69447e793543384284eb2aa2e
SHA1 2fad19e4842bbd3829866a7c77907ba6ffd0e463
SHA512 76215b930e714be32797dbf6a0fcf50bc7e2a857d716d54c8c5222fcd9276e11c3414c16b40542b8ae71cd6e44b3eb11a77fe76f33926c2fe35f72204224c833
SSDEEP 384:Dclf8j+Qw0WJe6pOg74VSeaJkGhnGIVhGHyGVRqj5GltqfZ/2CUJOk+fgGJsbrvk:qwrx0LvV
TLSH
T11F629EF783F4DA6E982196F2A6157E2FCE1C052A875C3C6589D4AF47B3D3472F101A0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 2d2a02e5b1c5ca87a48552cb201bddde9894b141836485b112330f8f2d30391a
MD5 1290420b223610a496c7105cee39e50a
SHA1 a9ecc81bd97ca22cdace3b4eb3586399035c6530
SHA512 acbe9c6996e165b8f9671b70d42f36af58214a3fc9115e65e946fab3ec01508e4597077e4bfd1f0bae1fb2ce471a7669ea02c938d16da71d6d8e87b49e480bfb
SSDEEP 192:sxZgRWyMojK1Ml8MkL/fxsqCw3GCU7LaIdpJoHW6+WND4Zd8zaIdSgfMjtv2tnhC:sxZgnML/fxsqCw3GLzyHb8dRf2Vd1Q
TLSH
T1CF72B597A67449778CEBD219F584BB27D6F90473D6941E84AEFCDA0C00E6AED3102C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1ed848ebbb238c71008a53ebad730784b3a58500d81dadcb711351dff52673d1
MD5 bb945df8a40bc906bfed5fdde883aac3
SHA1 2b91242af349192bd16ef0ff1d486faacf981724
SHA512 d717e82233e089cf5b3428ee9126fcd8c91a904b16cd543259e703dbfabb8c7b37db39e79306c863be5f42f7c982be97d5717fe7310c0f7779a74fecceb37fca
SSDEEP 192:sxZgRWyM/jK1Ml8MkL/fxs9Ch3GCU7LmIdpJdHW6+WNDsT/1ESgfMjtv2G15OWfS:sxZggML/fxs9Ch3GLHrHbg/zlc
TLSH
T1CA62C657AA3449778CDBD219F955BB67D6F94433D2941E84AEFC9A0C00E6AEC3203C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 35cb6a9b5ad448eea76dc8a52e92f6fb568dbb9a444331be09bbf1be3cd8b494
MD5 9a3e49e0993b8f84789b17162102fac2
SHA1 3e37b8eb89c11a84995b0e6f3a62bd90e392210a
SHA512 6eb4562c05c4a4d154af6cdbbeb9e8ae05f7361b55d99b2e1625cac1b8514c59bde19e15a90a4c71e385bc2a600287c102bb98d6a74aeb51d0789b9601424a9f
SSDEEP 768:us0G9xu7pLuLnFJWvFnSP8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVT18LlSMdF5ro3:us0G9xuEnFJWvFnSPu1jaAT18LcEFyxZ
TLSH
T1DFF20A3B680CCB7E4F844E9CEC2ABE9A6DE8018B96DC895447FA440C03C66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f5a7b50a-a4cb-4fc5-a3ee-f6bbdbd62b80.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f5a7b50a-a4cb-4fc5-a3ee-f6bbdbd62b80.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c26e6d204c4bb5a41b66b85782a18dabe650b0bfd3f01ae7acb389189901d639
MD5 0a73b7d4889bcd72b12f988bf7f3a3e3
SHA1 49d3cf36a240d181cd1dbf00213848988c678afc
SHA512 594afb43f32c832084e4c4e5d441e2f85ec0ea40858974ca71efcb4aa0cfa3d5e92668d1b306c198e0ad231a23e01731540b140d8d5d5d25a1cdafcda87f5ea9
SSDEEP 384:n6SxmoWEsN3h+CZW9CX+UEOpu2FxUmTV5fPCznmh8:rx0EDC6Y/EOY2FxUmDCzmh8
TLSH
T104826B361A384E779FA6A742F54B26136FF8517B95C42E54EACC9F0E04C72DC230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 38727a268c19a5b371f157a8e5199c762b33a33c7fcf5a67e6a9a05398747717
MD5 6a0559f577c845fa269200fd10441e3a
SHA1 f7d3b3e3f580bc349c576ebaa82366509d964fe9
SHA512 b06daa9082071d0eb31f0dccb628890b77b505c693570a717150b3dde122dd17227093dcd057ca0a0f4d4beef7ac4cb30cb6bd48808e8cba08cab11723d8c52b
SSDEEP 192:YONE6TZ0qQmiUy2olab+j4EOVf6o8NTU6:YONE6TCmolg+UEOp25U6
TLSH
T13502E93969282C7B8EA2AE45F48727239FE5117BE9852F84D6D85F1C00D779C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f7de36f13a606fcf13322937ad073e11023b16c1d1799b41b7e05efb8b841afb
MD5 0a2870c9be980f2984a0c6a48f97ffab
SHA1 458e4ffa3dbc98af9e5d3f7ae0b2e33a16ffc5d4
SHA512 c78851648148aad62b168a0d91e626d561ca11c72131deaeb93279b0236d746d576f1afa6ddaa43a72560dfdd86f4bf9276670bc5e52016c5f6952979697b6c3
SSDEEP 384:njSxmoWEsN3w+CZWbCX+UEOpu2FxUmTV5fPCznmh8:ex0EwCYY/EOY2FxUmDCzmh8
TLSH
T1D8826C3619384E779FA6A742F54A26136FF8517B95C42E54EACC9F0E04C76DC130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 d54d03a09224217f4eec8b3a4bea0f7b5647be50eeccbf4e46c3793dbe8e3ca4
MD5 d1aa19ec0a2d3c4eacaa183822b2c564
SHA1 322b44d9331fb12212e929d7b8cc863e5f95b176
SHA512 6df76e5083e199ecc79902627cd5b491735c8b79f90c4892cc3b9479d1ed1eddb67ef2e4402fab37a3d3c1a76694862df64f088161513d1ba9d9e2590c0a97c1
SSDEEP 384:nuiF4SxmoWYzsN/8TUNTUlIlw+CZW0j2ZDfcL+UEOpu2FCUmTV5fPCznmh8:FF9x0kiwgDCvjFL/EOY2FCUmDCzmh8
TLSH
T151B218369964CA3BAEE69BC2F74A76439FE4016785C96DD4EAC85E0D00C72DD130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3baea0042af95f6dc7121509cfd21bbb6305c82fc395dbb3fba6e1d94c3c0821
MD5 a2e34e4c53ed5b2cc37b8a96618e9e05
SHA1 9eeba6c6091efd97e30e7419ac38ba8fa4abce8e
SHA512 853ba2ca1dcda70580c1c92642f9c4e25d602af9ba236bc96d8d600da8d9e605dd8559c194cef57e1cef2f22c332d01995a0052a5c8fb5068aa29e098d567169
SSDEEP 192:MONi6TZ0QQmiUyCoeab+j4EOVfu2KEZcXrqHU6:MONi6TCQKeg+UEOpu2FUUU6
TLSH
T15212F93665286CB79FA2AE45F48737239FE9117BD9862E84E9D85F1C04C779C2307822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 fbe93e7a44c4b49f133940bb82f1174804ff0ce9af50162553c97e41b49f0aeb
MD5 4ab906097a8b3b4d09560e6e7a489478
SHA1 19786f2700b8d6d666731e40f23004b4496d0723
SHA512 88d6aedadb357b111651c9f40711cf6bf8ba9f3fc15571203da7b9f6b6f89e80f2cf976b1ac3268865a53bcdbee09cb49d85129b4f30e564939ce7b54aba23d8
TLSH
T1CEE00411D3041475D05C033100435F107FD1C03001F1030D5731055C3C317C03D14740
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5972a6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5972a6.TMP
Size 392B
SHA256 b95cdf931776345821312e8752ed61e466a2d2b1ced1f3d3e58a65b0ace4962f
MD5 098816c656e5218504eef6e9217a7980
SHA1 6eadce34a7f21f6fc3e4f148843955346cdbca1d
SHA512 182149710c998df7a3640de6b7ae0a5ce89ea9c144d298cf7b2246d86c055200140e99bf259732f93d01e807cd29538ac113218bf5da9b2ea8eb4e7c02c3bde4
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

2e76862d-4025-4c13-8f36-af4a16051044.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2e76862d-4025-4c13-8f36-af4a16051044.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9a35483079cc419dc0eece7acd2e40fb74747e20d86e650174c1d92d1412b4df
MD5 d1c6c33aec6a3801f7372b9499fa7d57
SHA1 386021f4720a4b98f94ca62b305187f2159221a4
SHA512 4b5effa10f7c8af041395a370c4347790f67cb25ed55f88e0de7d156cd5d4b87833b7a25ed16dafcb6f3edc51d537a272bec54b000128eb5b93cefa082012847
TLSH
T1E841F859A7F91148B3B7AF565BF6A87D487EB9732E47C4AE00010E4F0B62B40C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download

5880402f-3206-4c25-9461-2fe3edc6596a.tmp

Path C:\Users\Admin\AppData\Local\Temp\5880402f-3206-4c25-9461-2fe3edc6596a.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a49eeae2-000d-426c-84ff-4be1055452af.tmp

Path C:\Users\Admin\AppData\Local\Temp\a49eeae2-000d-426c-84ff-4be1055452af.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

275bbd66-4dba-4d91-8eef-3d3ecf3d58bf.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4088_1930807434\275bbd66-4dba-4d91-8eef-3d3ecf3d58bf.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4088_248496895\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/2400-779-0x000001E9A26D0000-0x000001E9A2E0F000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads