hxxp://www[.]acint[.]net

Analysis

user interaction
yes
max time kernel
600s
max time network
574s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 11:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://www.acint.net
Sample260507-nry7macz8x

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
5996	msedge.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\uz\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\kn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_10880530\edge_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\bnpl_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-hub\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-hub\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-shared-components\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-tokenized-card\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-tokenized-card\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Wallet-BuyNow\wallet-buynow.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_509872252\Filtering Rules-CA	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-mobile-hub\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification-shared\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Wallet-Checkout\wallet-drawer.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-ec\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1238060362\ct_config.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-mobile-hub\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification-shared\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Notification\notification_fast.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\bn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification-shared\fi\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-shared-components\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\be\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\hy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_2028458153\regex_patterns.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_509872252\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_509872252\Part-ZH	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-hub\th\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-shared-components\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-shared-components\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\af\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\bnpl\bnpl.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Notification\notification_fast.bundle.js.LICENSE.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\wallet-webui-925.baa79171a74ad52b0a67.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_584052690\_platform_specific\win_x64\widevinecdm.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_584052690\_platform_specific\win_x64\widevinecdm.dll.sig	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\te\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-hub\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\fi\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1731792789\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_509872252\Part-RU	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-ec\pl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-hub\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-notification\fr-CA\strings.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5604	msedge.exe
2852	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134226275247229353"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{86F96D12-9AE2-43C0-BE76-561B76AE6536}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1456842261-3464001825-2855069093-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1456842261-3464001825-2855069093-1000\{58F51638-6F80-45C9-B22A-041AE383039C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5996	msedge.exe
5996	msedge.exe
3816	msedge.exe
3816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 3224	2744	msedge.exe	78
PID 2744 wrote to memory of 1104	2744	msedge.exe	79
PID 2744 wrote to memory of 5604	2744	msedge.exe	80
PID 2744 wrote to memory of 1104	2744	msedge.exe	79
PID 2744 wrote to memory of 1104	2744	msedge.exe	79
PID 2744 wrote to memory of 3880	2744	msedge.exe	81
PID 2744 wrote to memory of 3880	2744	msedge.exe	81
PID 2744 wrote to memory of 5512	2744	msedge.exe	83
PID 2744 wrote to memory of 5512	2744	msedge.exe	83
PID 2744 wrote to memory of 3972	2744	msedge.exe	84
PID 2744 wrote to memory of 5512	2744	msedge.exe	83
PID 2744 wrote to memory of 3972	2744	msedge.exe	84
PID 2744 wrote to memory of 3972	2744	msedge.exe	84
PID 2744 wrote to memory of 4128	2744	msedge.exe	86
PID 2744 wrote to memory of 4128	2744	msedge.exe	86
PID 2744 wrote to memory of 4128	2744	msedge.exe	86
PID 2744 wrote to memory of 6000	2744	msedge.exe	87
PID 2744 wrote to memory of 5584	2744	msedge.exe	88
PID 2744 wrote to memory of 6000	2744	msedge.exe	87
PID 2744 wrote to memory of 5584	2744	msedge.exe	88
PID 2744 wrote to memory of 5716	2744	msedge.exe	89
PID 5716 wrote to memory of 3876	5716	msedge.exe	91
PID 2744 wrote to memory of 1012	2744	msedge.exe	92
PID 2744 wrote to memory of 3536	2744	msedge.exe	95
PID 2744 wrote to memory of 3536	2744	msedge.exe	95
PID 2744 wrote to memory of 336	2744	msedge.exe	96
PID 2744 wrote to memory of 336	2744	msedge.exe	96
PID 2744 wrote to memory of 336	2744	msedge.exe	96
PID 2744 wrote to memory of 2256	2744	msedge.exe	97
PID 2744 wrote to memory of 2256	2744	msedge.exe	97
PID 2744 wrote to memory of 2256	2744	msedge.exe	97
PID 2744 wrote to memory of 2284	2744	msedge.exe	98
PID 2744 wrote to memory of 2284	2744	msedge.exe	98
PID 2744 wrote to memory of 2284	2744	msedge.exe	98
PID 2744 wrote to memory of 5996	2744	msedge.exe	99
PID 5996 wrote to memory of 4300	5996	msedge.exe	100
PID 5996 wrote to memory of 2852	5996	msedge.exe	101
PID 5996 wrote to memory of 2784	5996	msedge.exe	102
PID 5996 wrote to memory of 2784	5996	msedge.exe	102
PID 5996 wrote to memory of 2784	5996	msedge.exe	102
PID 5996 wrote to memory of 5736	5996	msedge.exe	103
PID 5996 wrote to memory of 5736	5996	msedge.exe	103
PID 5996 wrote to memory of 836	5996	msedge.exe	106
PID 5996 wrote to memory of 5960	5996	msedge.exe	107
PID 5996 wrote to memory of 3388	5996	msedge.exe	108
PID 5996 wrote to memory of 2800	5996	msedge.exe	109
PID 5996 wrote to memory of 4924	5996	msedge.exe	110
PID 5996 wrote to memory of 4924	5996	msedge.exe	110
PID 5996 wrote to memory of 2540	5996	msedge.exe	111
PID 5996 wrote to memory of 2540	5996	msedge.exe	111
PID 5996 wrote to memory of 3140	5996	msedge.exe	113
PID 5996 wrote to memory of 3140	5996	msedge.exe	113
PID 5996 wrote to memory of 1832	5996	msedge.exe	114
PID 5996 wrote to memory of 1832	5996	msedge.exe	114
PID 5996 wrote to memory of 1388	5996	msedge.exe	115
PID 5996 wrote to memory of 1388	5996	msedge.exe	115
PID 5996 wrote to memory of 3816	5996	msedge.exe	116
PID 5996 wrote to memory of 5872	5996	msedge.exe	117
PID 5996 wrote to memory of 5872	5996	msedge.exe	117
PID 5996 wrote to memory of 5552	5996	msedge.exe	118
PID 5996 wrote to memory of 5552	5996	msedge.exe	118
PID 5996 wrote to memory of 5976	5996	msedge.exe	119
PID 5996 wrote to memory of 5976	5996	msedge.exe	119
PID 5996 wrote to memory of 5412	5996	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://www.acint.net
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ff8c1fec188,0x7ff8c1fec194,0x7ff8c1fec1a0
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,12265453962302835519,15793452817515812960,262144 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,18166414904780669058,5495646437215941262,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=1872 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,9689249332544877603,4267622894262627248,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:13
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,6886623833455574253,6535775915843069396,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,14765061123411483685,13374344292191649400,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4896,i,6355378488901864528,14829266500655417965,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,11232866269596994608,18389169182332538849,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:14
  2⤵
  PID:6000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,13128284426679557349,8167552331505634699,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:14
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,16506623378352749939,8170416741537652839,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5716
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1140
    3⤵
    PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,6904549399356631923,2599599926952490387,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,6904549399356631923,2599599926952490387,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:14
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,17046599937351876790,7375542334535150185,524288 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6308,i,6836793919039306676,15426203535219605394,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:1
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6184,i,11071415653316637017,7487175450592352283,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6700,i,17257001269960288503,3216285746452455673,2097152 --field-trial-handle=2328,i,7283346299086239493,12905146195609778632,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff8c1fec188,0x7ff8c1fec194,0x7ff8c1fec1a0
    3⤵
    PID:4300
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1792,i,4755577532907637804,4757156928851004207,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2852
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1600,i,4857865912696754388,14209752524397765543,262144 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
    3⤵
    PID:2784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,8533200792936907887,14010489378711414441,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=2504 /prefetch:13
    3⤵
    PID:5736
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,7681740807398353254,14574775590432941000,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
    3⤵
    PID:1452
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,7681740807398353254,14574775590432941000,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:14
    3⤵
    PID:836
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,10465305954477524748,454517103935672825,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:14
    3⤵
    PID:5960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,17937460554967585327,11924605279134816706,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:14
    3⤵
    PID:3388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,6562754920121240548,1142692047547764600,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
    3⤵
    PID:2800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,14687450342171560066,3336033318920250418,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4896 /prefetch:14
    3⤵
    PID:4924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,14699452034674488237,6688797095526544846,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
    3⤵
    PID:2540
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4328,i,4398011824588250575,10019593577873146174,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
    3⤵
    PID:3140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,12911124034514610544,11570810521498343863,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
    3⤵
    PID:1832
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,8855372699873277301,1669197596882354120,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
    3⤵
    PID:1388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5228,i,1224647523156904686,11335524730562387624,262144 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=768 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1036,i,13228601534628299678,890138207654423974,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4072 /prefetch:14
    3⤵
    PID:5872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,9466215728467411786,13333556231894662356,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:14
    3⤵
    PID:5552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,18418499435617718998,15394426056894069421,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4076 /prefetch:14
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5036,i,5866123301491707408,981115536777078479,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
    3⤵
    PID:5412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,2898563745475291318,17154934759928277283,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4032 /prefetch:14
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,11054683324894350280,9199745338101190038,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:14
    3⤵
    PID:5728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3756,i,11310002717219435865,811643899369932165,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:14
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3436,i,16894226007941674446,645963878386938409,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
    3⤵
    PID:904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3840,i,5322219092102987790,1355395561714652039,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
    3⤵
    PID:4856
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3040,i,10796513611994617427,9827474274873242773,524288 --field-trial-handle=2128,i,13161763712832669026,11781990115499316260,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:14
    3⤵
    PID:2072

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5984

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:540

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5876

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
MD5 38623c06e100113cf825efa6a44b2386
SHA1 479d8e0c6d7d10c05203a37707a6249d2537a9ed
SHA512 452d7012b949688cabc6afbf4badfe9d02c090f30c06557f7f87b606cd716cda97771136964935eaa4d1668303889011f75ff599a79a6837c285ef84ebc2c8e7
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosfxWMk8xVZ4YWI30otWn
TLSH
T1CD257885B34494FFC8C35A7189BE27902774F6DE5F02836B6A377A0E2E271D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2b1defada65a97097827096d86f0409e8bbf92205166cb70f4f40e9e3cfdf5d6
MD5 0234c6a6a184c4245ade9c192e1e6a79
SHA1 d5f4d3a55c22ac3ded8d2181f88988289bd3b2a6
SHA512 bb61c15cf42accd5af64f15757054a8300d7da84b8a9f7a0488742ed64fb353795971481b540ef11ba2734cadcc2f5dc68f01aa126dfa9acff09b54362d5a2cf
TLSH
T150D0A7372B0AF435E63C9170D1138B05263A54652C435602F328C45D85794E8A7C52D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9cf5acc3a4797f1d8e969ab1970c2330530e33f7dac25d2b42a810961a67ea68
MD5 6bbadb85852ef58796e988ee6bd3abc6
SHA1 f87a8c99cc4052067a5b532f97bd1ccc92f6a0b9
SHA512 a3813b64d663d976b681f2ced98d428dc47f49c99219d4a147277e7c8375b07692a5a14501eee0df77c86f9da6e3205c49e89510005d4f3b21e3afff243fb088
TLSH
T13CD080155FF27C70D014E8F694187B41392DACA68D43A6115471EA7E4C224D48BD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d224cd949ad11346419be622b43ca39fcfe48209c59ada89db83ac0243346687
MD5 04e83586339736cf3a97c89c0aa51f53
SHA1 63df3f26faa29128241a13bbff96b9db56c20648
SHA512 057f8695b715b27729ff0a5f3ee71badb76b9b3fce32b9b928e0b4f45ef83a082f03e3713721bf0f13a178ae98efaf35a2c7bac41285b76cb63388c42311c8ef
TLSH
T1C2D0A7272B4AB432D22C91B4D0068B013626146419569702F268981C99B55E4A3852C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0ab8d044e8437b8d68402b54ecbdec48a18ded4494b9ea9de90a08aafcdbbed5
MD5 3f9e931c285cbabf592db0baeead8a5f
SHA1 873e31da49ae711c382a265256ed8565ef86269c
SHA512 a663931ea32ec3f39937e1af467b79d5cb27ab525c87eae9e347c48fa59e35f932c2807cacc7d029c257688ab164cfea23621a68c82bb949da21272422a03974
TLSH
T170D0A7272B46B432D21891B4D0068B013626106519569702F268981CA9B45F4A3852C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ea750b8ccfa8d7c7a393cdf6c9c8a3be0f2f086fb814bb44905a02c83d9af71f
MD5 697a394c9a3ff43b8925489b648b073c
SHA1 5828315de0bd17378051f664204bff07d8659dea
SHA512 37519d78554ef3947030bf7fc74d2660bf2dc752f04de85daef8079fdce335d2e6ad77071de5a938f7422ad0bdd2acad3963260b61149fc0d91381c007a2514f
TLSH
T173D080115FF27C70D014E8F694187B413A3DA8A68D43A61154B1EA7E4C624D48FD0FE7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 8ccff0a9068db427b353df8383059f5ca245833ad2203263fc2bf12f3f59200c
MD5 1e814104115570e28e9f427d9e74eea8
SHA1 de2d517b44aedf89543b4c4566061d4a11e2eaef
SHA512 effc194cfb0b88ede10e301775af6e397fdb9e06e90866d3a11eb63480712e52931deb9094c7f733e543f1f828d0827cb0304041f3e5b40da87f390087def6da
TLSH
T166E0D11471DCDFD2410674CA415B77268CC7B00D954CF7DD2E45EC881545C0575195AC
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 385B
SHA256 7df1a8357d7c29d2e928cc2f45e1a238f95a20d4c1edda5cc5d5597d8da30413
MD5 7ba367fce8c602cb268afdb9f9f5c43b
SHA1 21ea11838c5c6968e322bd7cdaa6ea94e083e122
SHA512 da0a63d710ec250d0b628af60a7fa5a1cf00f09ec4ebb9b868457d29e08e0df42a1010bd746aff82a96d6846b4aa61e00f65476945e8f30ff9a9ed8abb245798
TLSH
T183E092AEFAAC9B8EE3E84D7EA7B6B0410B8802B2D80B5B1304307DC035D57B02E75520
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 1448ae5612baea32a7b400dc90ac79a41ce9c6add424e0ab3a4426418f7a808e
MD5 3eb83c2f2cd012c9da1ba30640c29273
SHA1 8c1b85a0d391b5d9438d936724d6e815d6488e3a
SHA512 275251340be5cd9468a399255d677b8877bdff37073b44b6d516a89c148cbf2fc82941034ab95ea5cbaae45e568c174696a63880ac959336fbe01ddf167979fa
TLSH
T125E02BAEC921EC3748FD57186048474AE75413576790585B3A3D920D8FB77374546C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 ac37008f80ae44bcbe21f349e548f3ac88f61cd75362ec022cf806de9ac65147
MD5 391b5941dee521e8cb3f1363531d824f
SHA1 ac139617f2457f1a2045a9c64965844faaf4111c
SHA512 d9c03701d13e68fd720775ae6498f85ffb795b58fbe5792ce98116c292baff318ff874f41d42554ad73dbef6eeae4291ad62320fd974294e43e972ddfc482da7
SSDEEP 384:InhdSqrlKs80L9+s9b1UQksUKbPqVDXhqk7exh4QdV8GgCnQX+h:izr8s8Ub9bVutxqaexmQdV8Ggeh
TLSH
T16C13197E722C0C01DAC6417C6E4F5A35A77AF960D4FB244B17B2B4900B1DF9ABA5F181
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 04bd26ad6580ef46d424b7712c8f3de455db70da19c3590755641a70deb74f99
MD5 caf7304fa29c986d4ef0e4032cd615f4
SHA1 920bd01cb14a30c5e73093f41089ed714bddefcb
SHA512 c09e8c3d62573ed4bbaf560d3aa157dad33df7b4d7df91dc4083091918e2f8c4d42216444ff4ead713ea6897072898a7ff7f7cd0a40c523c1d2f4410b66b8362
SSDEEP 1536:HkhGx2uFKUGS1s5j/nldKfBSzggvlfkIfXEFRYo0Qzq/:CUvspTbXEfe
TLSH
T16F4472F70955A01BCFA802F5E2033A3DD17B451D2CE5F9E9D6780C812D29B32B6BEA54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 a2227343cfff1218bd3a68ea6d55451d16c2ea9f33f008deb9180ae6ce275ffc
MD5 d57419918adcbcedb153f1ae149e6215
SHA1 5d22c01af945cd0098014aa35fdfc93f25dba1d9
SHA512 350ef74674a4799e9d770a018c3aa003bfb681b6bf8e05001f7009041e0b9a5cd3113a3aa269f92e75aadc8d53ba7e340f94c76f263fd0b0a0f2045c2774e4d5
SSDEEP 6144:m5Pm8GlVvvsM9PoE2Y65RZvgASdK6o3w8PufRA:m5P4v99PX2Y65RZvg5dkPu6
TLSH
T152257DDE8F346982CE678D70F8D4EC227CB421C3BA5AE0D35804C5A446867C66B976DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 70cb0546a010d9942431a54053573a2dd620ed1bf2bb96514bf84ce6596a14d9
MD5 a644b101c25317bf254d695987ca7751
SHA1 62ec872dea7270977e5de9b5bee1b01964572b40
SHA512 028be5969fc0da252a3cf43e78500fb72e2840e1bcd320d900a53057c436abe981704b9b9f1a7ece37bc14bdb72f99f712d309ac200db5fed9d32e80e328fa61
SSDEEP 24576:79WXLeJRguU3bjjKrThCjHCPU9Pz3FoAbOVJb5d+WpKPKtefjoMTcMCdoD:pbg73bYCjHCGzzOVZ+WQNfcMgb8
TLSH
T19C868EEEC6785C83CE678A30B4E0ED477C7412C3B595C1D38958C59406AB7C1BBEA2AD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 63729972e3f26ffe749c17f591bfa972855e59b36481281658b20172d550cd3e
MD5 9ca4875e8b5e4b4fec4a92ef16ce6bde
SHA1 247f00905ef57be2696a62cd25f67d6d50ee897a
SHA512 1cae3209440b1a9f3292936e80632e105488e669c0a82b835d7639c5c24a0d23fe77966c285245358167b30352eb8ed67494c868c6f7c591f06b14fbde5d8d0d
TLSH
T14A710690B1D78C29EFE901BD6AFE85D832F2D58F0A371F1731E88CBD858AB14708A414
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 08479dca4d5b244f09f82f661cdc83390bd816f60f026b788f514549676599fc
MD5 6532d95dd5cf4b7ffaef9c5d44b1cfa9
SHA1 f81b31a0c6af5b0aea14a12eef566b72ad686e4a
SHA512 27708957689dec5dddef3fa7f2dbed854f353d201fb01e005573db15d72aef4248cb90ed7e817f6a267bf19a39f2c0673e29d8f44cdadbdad7ad6200f7404593
TLSH
T11CE0D894A4C6CA9D6A1076E682647B18C1CA34C2E685BF832700C8D0BB87512F346557
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 5f92abcb4440aa63c6682e1dcd328a5a7137bcb8874378a47623a2c5bf9589fb
MD5 db3ea153e1cadf449870c9fe8e3c49ed
SHA1 42242fe50748391ffbca8e7c0af6a59174c67660
SHA512 b073294cbea4bf7335182777ddd6763010814ab85279c42376d15beb34613121188f25d47e758eb84d8d70f0c45e32cef5e5a7720609137c719028e794116d3c
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jSiVaW5LLVsK5fKFtIKqYpM:Tyi+7f+UZD4jJ/BRYWxLSCKFOKTpM
TLSH
T1C3E2008C3B11F511C4EC773EA0C2C5E06EBC293C864D7171513C9D728C53AA6F59E21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 513B
SHA256 388c5c95f0f54f32b499c03a37aabfa5e0a31030ec70d0956a239942544b0eea
MD5 c92eabb217d45c77f8d52725ad3758f0
SHA1 43b422ac002bb445e2e9b2c27d74c27cd70c9975
SHA512 dfd5d1c614f0ebff97f354dfc23266655c336b9b7112781d7579057814b4503d4b63ab1263258bda3358e5ee9457429c1a2451b22261a1f1e2d8657f31240d3c
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 591b8b1c774942b64d71d9532b7f30fa909a5f7892a7adfef01d0d619efc1395
MD5 c8de02d0531c90b002fd994f380cf0bd
SHA1 7a54d8cede95945dc69056f01ec63cfb944bea60
SHA512 f8626d432f1ff0de99305c6c76ecd55433807c715376c15dc1ba71ea489a0b19cb15b07ff6af39c249042d589f7c3848925df50a75db0f83e806e308b848cc1e
TLSH
T11AE0268455C8E269A0246CD3C378774DC6DB3493A2883F421B48CC4072C3E42A2AB2D0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 20KB
SHA256 6a155be07021196d650c4c2c2213a07b511c185b4ab2a803a51acd865513e8b7
MD5 049512a79631296980a059507e8267be
SHA1 6ec1e77c533134fb5bc279fdaa2e9340a004507b
SHA512 ba3ab20c57eeaa72fa46134bafb4d63803ff94f51810f8d326354e69d0837aa7eafdac849166236b942edc67359b1c4452600cbde5358bbf37a427dfd87a98e5
SSDEEP 48:uzBmw6QU1PzsZgrT+N/zBa5iHK2OBikmW85lkoLNxzN:6BCxPrqN7ocq2OBN8DP7N
TLSH
T1AA92C55BAF3C3923D3551D3E36270435CE3FE2A86FA69D9CB82554200EF8485A07457E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 b5ef6aeb8196def86440efae83b080c98a5f8118f783b6994fd062e6e4a1c3fb
MD5 594b811393c432b566ff2cbf5a212d5b
SHA1 19dc46d3d510488b05ecf65932bfa8a1b2e1267f
SHA512 ef1b4113ad81b57fa5c5597c2a71e50a2f902d8db8bcc908a62e7cd4dd042f58534ed26041ccf753408de895f9f8351964713d2a004cd4aa9ebafea0501f2271
SSDEEP 96:spicBZXHU+bGz83uxDLjGQLBK31NfR4J+MCXkFr+MFcjtk4Q9/2j+EbjBHMsDETx:oTX0+G83uxXBBK31GkSJnEJH7DNspUc
TLSH
T1F614215E1F342712CDBD813669E745A35C7DF03FCB6366DA686104B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 2KB
SHA256 d4e2e0f523839c2115bba1716648c4eff88b62d83504e18f7c050c1ac56ee58d
MD5 482b0b69216b9edf690f3b344fec1e9c
SHA1 52fe77295b398f5138c45557f79ab4dbc595a506
SHA512 14cda93e15a7597f7a78c816a1d22bec5119ae9befd873dd7de105f5e76914c2aae0c6ca764b9b6860e678cecfb78942e537fb5064e1bc9043e9889c33f1b67f
TLSH
T12A416192DB65A9EDE77A98F64FA43FE97F16302D5AC253CDC501B10A2D810B330419AE
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 121efd9023f1fe39dacd30297334773f069afc1da4de4a820a4e70ffd6bb9dd4
MD5 f3a92dcbbebed5dd22a44e935df82d4f
SHA1 253eb746193de8da0e23d79b71fe07e43536b0c0
SHA512 27bb9bc510e4bf9509801e5cdc93070ed6f0969aa7b0707076b19d39fa2f569d1dbf45380213e1ff981eb2deff950a6ad687fdf42e8f7d5a464dbdd87eabf81d
TLSH
T128E02061D5CDC1DD6144209BC314770CC7F5344BD7887F859B48D841B2C7504A7971D2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 8d5fa6b4578a43a50cc6fe32600cd2bd1b4ee4ebf29b5c87fabd1ba4fd54c0ee
MD5 03a0c5b96941e0b23eb6b1aec6b644ea
SHA1 ca9f389e68b7d560de96cc858754b23ee800f270
SHA512 3d04323639f1d3c2a21066f4b70be239a70dfd2b3986e7b028e0889c5b2fde99b9e1bb18e4e5d9ce27bb76abc312ca07e56a23ce75d113cfeba9fbb739154543
SSDEEP 48:TNLopFMatSaw/auUOt8BlsnUSeaDnTVIjTyW7SYMwjWtPnwI:deMatUaAKlyUlM6jTRytPwI
TLSH
T18892A19E0F347114C4B30736DDE14E561FBC00AD9377AABAE91560F2EE2026BB709667
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 03f13a23ea04a8f1cb704f2ad7d5be9d465316069e834ba6fb61c9ea139e3199
MD5 a9af75fbb6e4e8c485e2075c9acc8d77
SHA1 30a6f1b1b3e18c07d8eb189c4d896837863ea0cc
SHA512 7a22eb53f97284e3564c7254af394fee086462c1473b5014b87d1a7870c831031c20647d57c0b730f53999bd02cb5ae68813e71f027a22895e8ab58b2649fc2a
SSDEEP 192:D3Ia5znkj6HiM1AY9fnzgv+OKn9v/jXPVdGYOFlOJN:D3Ia5znkGHiM1AY9fnzgv+OKn9v/jXPH
TLSH
T108D1ADF783F5467D8A1192F4EA186E2BDE19091683AC3D4BC5D49F0FA7E2871E18094F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 b9324572c1ce89a5b5cbaf04b3896df386916aab331a62511dece76c22c031fa
MD5 129caf3ee91e471f82dee123b1e67466
SHA1 6bdb210a441bdaa37503a1c1ec8d78a651a8839b
SHA512 6a1566d04ff5390fe79656e723e10a97aefb42cfb1fad1123be1f1964b0eb98e7511bc663f4c3f5882c5e894d94afe7bcc810e270e0465be8ec9d3c1979b80bd
SSDEEP 192:Dip5znj6HiMKY9fnzgv+OKn9v/jXPVdGYOFlOJfGC1D:Dip5znGHiMKY9fnzgv+OKn9v/jXPVdGo
TLSH
T1B2E19CF383F5467D8A1192F4EA186E2BDE190916836C3D4BC5E49F1FA7E2871E18094F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 d9387228e68d1063fc6c3516e81a3f325abe68a9ebb8b83171831a4bdd7d3948
MD5 3e141688582ebe06005f0c87743a5606
SHA1 26a800cd4a07870666017a47c715849e6c61cdab
SHA512 50894878b73fccae4f9c10ebd189b457df985153c99fc5de53632a96a55c4df462ca84c68612c4b9af2abcd3599f1cbaeeddb7c90cf309f7a608c353a0a9e081
TLSH
T16C2148D281BAA837543C4DBA2E007D51257AB4730191F1F9DAA7D27CA0E15B35A03037
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 3962817be139f6c38af18b8e5a967690034f1744ce21a102c359680e48dce025
MD5 b36783ce39316026bd27ba04a0df8aa5
SHA1 6fc035c786027cdc2a1b2bb5110c38b1829af7ec
SHA512 da29f57c47a1695442501ebc23957bc3a60d3b378b591336cabebc82f3053adb122f32f53341f92e9b4b5113ef665cdec440c108a48f340337ca3718d0093c10
SSDEEP 384:sxZX1Ec/fRsqIWvyF8S/32h/bTpV/dFVcdZAe:sfec/foYy8uG/bTHdFqd3
TLSH
T1E182D7576534997B8CD7D219F945FF67D6F9142292904E84AAFC8B0C10EBBED220382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 6454664d53b2dc6a7ec704a37e3636883424cf4d0e598d2cd9b284f8cdc96b29
MD5 9744e54d656c5fbb8560d893594fc723
SHA1 843e1f66ce8893cca21210c6371e3ffcb019e4ff
SHA512 a8c12ad49209c21a18e13b78afc14001d4eece708c1d769d8592564d19af1900233cfd1406d43ca6e6d5805aa9d5699fa384361d8a9d47340212bf5e60a46efd
SSDEEP 192:sxZmRcyMqZ/K1Ml8MFc/fRs1F804A/ILcyzodp2E/W6+WN9ih/Y0l4aLF+PIgjCJ:sxZm1dc/fRs1F8S/3J//b2/51eje
TLSH
T17572E8166A34997BCCD7D209FA45BF53D7F9156292904E449AFCCB0C10EBAED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 36KB
SHA256 ded1ad53a4ff64c69a9ec66c13c4f1908f945bf773b1211979f553e6ea6b0066
MD5 ebc89f1ecac6918141bb1c2c931f8194
SHA1 4e80c82812c914f3b3da1dcd867d23f1eac75be8
SHA512 38fe2633f3e85b010b7497bac31f3655cf4b3cd8928c055cea1be5cbb4f50cdc0eac67ccfcd82b5b81e4cbd76da8619286b6bd974e8f0af634c80f1b7c959bf0
SSDEEP 768:EZN9b8PT24f7pLuL/CuWRmCCQx68F1+UoAYDCx9Tuqh0VfUC9xbog/OV3g7yZLl5:EZN9b8PT24ZE/CuWRmCCQx6u1jaKg7y1
TLSH
T1FB031C3B280CCB7E4F804E9CDD26BE8E6DE801CB9698899447FA844C03D66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 87b83197b052697afd6baeed1f547bd6ada106e0d8fb3a25c97400f17dd4f3cb
MD5 f884e66e4f244812f3a7f6ddc3b8a85d
SHA1 08f15dd34406eebc08534963299a57b44e43aef4
SHA512 e140c969955bd2f1c02b178eadd34bfed2639a66be42d5a35af61b268ea279249afcb085612a82d7f7c0c9e00179edb247c2ebf3fc7c8f59f59f8dec8b636079
TLSH
T102E04F6057C9D5B9611A21C34264A30DD6EEB467D6CC7B422F84CE516283D89B297191
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 100B
SHA256 cb9f958292cea7c04fcfbc73e195344673096086e28aa16a24862cfaef487623
MD5 9708fe084ff541aa4656cbdeba436f25
SHA1 b8f7b1e96ecaa8746861d656cb0df7e565425772
SHA512 bb973c5162fd4507b8514bc7449c77f628f0ae7ccc930f7f8c8d85758e581e2ec834573c89830464ed2548c664aba9087014b95ffbd7a1c077e936f4c72409d7
TLSH
T115B012647300B84ACC46593702858B503204F02001A481039C40FE10CC04FA43D402C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 e5d187aa8f9addadf1b23f8c936fbc32563b7274f13e17980e80550222f99849
MD5 73df40127c663439fa3a3b4821ae3565
SHA1 1b00e66f54c273b2516897ca4cea3bd2525c4dae
SHA512 39e717b08703019b90dc4dfa4409d9b5e91aafa22363f5a58f5a54fa2c68c9fa33872035aecfb60e3934617784ff60265cc7ccb9992219563d464e25d4556a8c
TLSH
T14CE0D83066C9D66AA24A30C78324F30DC1FBB453E6CC7B512B08D840634B94472871A0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 2bedb6efa7bbf891a852ea71bedc949a7ea484406dba426fb5164ac360daebee
MD5 c6e9140b9d777615a29dbe29193c3b76
SHA1 68254e431c07c9b823312a26ef4dfdb0ef9cc5d0
SHA512 4a70e37c5783ec3400807a29307ca5a2148f00f0e32c853267d08179600f3f7802a42f5994e535bbd09cead228b83cedf2b2ce34178d2b19ff17e12c0196adbf
TLSH
T1EDE026B8D5CCCA79610071C387A8B70DC2F9B89793CC3B8A97088C40A243D42B2EB190
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 51e32ed86a768164fd27f10ec37b285489a10da5003b2cec7dd5eaa244e8e3c6
MD5 dc7cc6c5425029d2604ca7cab4c3a2c9
SHA1 9e04246f1858b5068579e0d9b59b1c17b3aae639
SHA512 a27630eda660fa7a3ce66bab4a717698ae5a2cf6c57608a5d1e9474b7182e538dfd08bbc3f99140a00234b844b95cebb3e8f7664d5789fc267bc92ed03e42b7d
SSDEEP 768:cdOlNXJjSSjroduZDA9c5dnffCvet99LXTOV9mDKzZ:cdOlNXJjSSjroduZDA9c5dnffCvet99Y
TLSH
T186C26B15713B17903ABD294A8594B8AF56C231633018F53F7BB854AA0F67E24DCFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 ca51eae74d0e92bb82298725ef8c29ee4999b2be020622e88c9cb3f887bb0bee
MD5 b9cada1ddcaddfb541ea1ccb012b51c0
SHA1 9bb25d6ad6d24a4d67dc32bbd29c13295d244cab
SHA512 e8e5a452de04aa9c496ee5eff3dcbecaf85074355316f5d8c1d3f10118b48ca992db3a7853982de740e4a7707633ad73dfba9dbc6997525f88f28e97cc771e41
SSDEEP 384:cdOlNbMrgcmS2paFgkI1keB0k1+ojSSjroduZDA9c5dnffCvet99LXTOV9mDp:cdOlNXJjSSjroduZDA9c5dnffCvet99v
TLSH
T1B8B26F15713723903ABD298A8594F4AF52C231633018E43B7BB9546A0F67E54DCFF9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 9f8cd5214970e7d2056ee120b3c2df3a51ab609619f6cd158047052839ab1033
MD5 8c4fbed6da830f215a29f0383e461408
SHA1 bddeddca40c8df3fba459db092d6894ed55ef065
SHA512 832e79de732d84f9d51cf022d351646a714366fa483e2dd266c5ba25a2ca8e1eaaa2b274370dfc8b37a97589103ea16b379bcc14ba0e35da936c3078caae4c72
SSDEEP 192:FvoWwb3dvfT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:aNvfQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T14D24730A7B747001DDE7D9725CB080771A3CB26ECF22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 d5f13502ee4175118cd60f7a6debd7e76e27a069760f3e2a9572d1501af482ab
MD5 b5038f117345444820f909f2b2bb756b
SHA1 35264337e595e5938221e78be8b3d094bad908b0
SHA512 86f38f41cf137791f21b3d0b3329c04a5efc5aa2c049e732125209811e363ff22970527a6cbf0dc51df9f3ae1b492937de18f17ec96d4e235388a03261cdc3b4
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgyK86knYxLlioqcGt:DEK3tjkSI5IUltGhp22iSBgyruRW
TLSH
T1DB52CBAFBA342157D9E58771DBC001D5BE7B903E8FC1DB4254F624231EF4160A32A99E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 64b2bf25373cb05ca50dd6c0c915bb6f6c6f970eac142a6407996e26b9d5e227
MD5 ac24a7c7e1bb0343326055dbec8950fb
SHA1 a3858accbefb9cc504718a5ff7a2a00f1a2907c0
SHA512 94f833eabb3000e00b48e2b6fd8546ed43f278187b552ab4e6345b2df92327a970d1b4f8eb18dcb3e2b07a7900830782a05771362051551ec232dd1f9078072f
TLSH
T1565149D0A3A669D5AFC9A981C2197403A4E53E6B370EA875333E44F94F45C298E2FD31
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 d41f68f78457911b588d5c7a33306cc02272929c029a4b3c5954a1f2a36f0998
MD5 4b4e5c2f35e15e1183a0adeb491dafa8
SHA1 157cf0add03939c5f6cdb645e11eaabbb65453de
SHA512 fceeaf7b0a17e57fb6ca67ab995e709a1822f1c72a65dd838ff0fdb56fbaef4bc32e2063dfba8ff3c7180d596650d90354551e2d4911c730ef2d3eed39c46537
SSDEEP 192:LtOBKAsuliqMrsn5/7zBqGQQIII3b3MIM10YcYQ:wBjssus5YGQQIII3b3MIMiB1
TLSH
T11052712A2F8A1FB3C54E5FB61369CB601BC588814976376D3120181F9CF2B9787C51FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 a0c4ccac5f858f6c9d83f8537a3b53f173b599676c2612883ea0940cee412480
MD5 39d4684d5a80665907e3af18a36ca4d4
SHA1 ac4ada34dbd68f37ed9a1fec3a02a1d16d7b5d50
SHA512 d9e3205ba59380acafe8946856cd25eb1db5266ad00dab8d655d485700e6a7fa9c2c374f4b2ddee296ec7d87d2d94b5f04a27f69c2001fdd02ed77ca22060e2d
TLSH
T12EE02610FBC8C2BEA11D21C74234778DC2EF3863EA883F861F00C844A683D09B68B1D1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 7d9a93db6b298f7bea6a31ccc4a9ed8b320225f462ab7d6673cddc42117d764a
MD5 fd9c2df44f605f92b021c9082dc31f31
SHA1 1b1d2bd6c7147c739e6cb86c5fcad5148ddc0811
SHA512 6635e19f3f50769179ac4645826c87b7221d58008b0dbd52d27357f6a608189fa4df5364685c5d3dd60680eab250d781f97376142529c7b87c0c673bc87c0de0
TLSH
T1A221BF16F324C149E18E8A3EA06B97350378E9129FBCDC0F44B920356DA2E001E8F6E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 d6a272ff3b340840ea5de3232d38ac9d76295ae4bab3761e0bbac6bd7108914f
MD5 a6ccbf19662d01fa9ae3941b7570f3b8
SHA1 4ad529d792ab961a6994296a2defa3b3e1234f8e
SHA512 51e70c69f1008167bbb0f084c4d91d160b524c2dda640ca9ee08cdcc17ecd2d76064c22ebcde16c1ffa23528c551e502dc6556370e3b42f9731c08076545d535
TLSH
T1ABE02010F4C5C2FF611D20C34268B358C2DE3863EE843F452F00CC445783942724F152
MD5 SHA1 SHA512 TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
Size 145KB
SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
MD5 370210ebc9e63f6f39a4185846435533
SHA1 17b63f65390d236465b6952953a7df4cbc6fce1e
SHA512 e594ebf58d19f6d9e7024f98107c738142c6cc2504a0ba89e13f8f771c6a600427e75951ccbfe105983c21b735dcde6e6e173f4da37745c4de51bb9f5e86b989
SSDEEP 3072:7PAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEI/tLZjUd6mG:LX1aI5aZoKzMJ07NI/leBG
TLSH
T105E3F1108EC41FACDFA8291C70BE0B1D63E1C79D84676585E773FE0AAFAB90462275C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-checkout-eligible-sites.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
Size 23KB
SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
MD5 ed22bc3ded6df0109b9e594867473559
SHA1 ee39eb80dc23f7fd764199cbe4a153c4edc2e768
SHA512 fb337c0a0107dc37a3067bcd6f60ffb8f63ee892a0ff729dcdf67c7a21fec95a742a274853e8947489108d7543c13b9479e02574f490bc217e8a182f08543aa3
SSDEEP 384:rQR5dkrKzmQWgFlhpyZv8CTi8I6kxAvh0mD:reKrMP8d5JIVAvhV
TLSH
T18CB21064C9210DE11FE4412B6878224B1A3C951B8F90FAFE3B6D928C1F5E06F61B95FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-notification-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
Size 804B
SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
MD5 4cdefd9eb040c2755db20aa8ea5ee8f7
SHA1 f649fcd1c12c26fb90906c4c2ec0a9127af275f4
SHA512 7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209
TLSH
T1AB0189EEC8800EB216C24A3A163985C31A3756576C953D147FC9741C2F5D62F22FB98D
MD5 SHA1 SHA512 TLSH

Submit Download

wallet-stable.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
Size 81KB
SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
MD5 46ca0b1726448d9c7ed48735c246336f
SHA1 8e26f1f1c6f909f2f3d34c17e042e579f3b2b449
SHA512 c9ec0465c2c0eb0bc0316163f9a2dab9332c372dfc4ebedb0ef4139fe1195efdd8aa34367155c29e659d97d5a27e2395ce2f6012c115ef5791bad270de26bb28
SSDEEP 768:r7PEXSl9cv2tlNnqSBBoCJkQgXzwb7XARjMLVF2CYgYHFkJ/Eqajvapznp+9l:08W27jLgX2ZLSgYHFkJ/EqajvWnAf
TLSH
T1F283DB29C9120DB11FA4001A28BA290B297C960B4F55FAFD7B6C938D1F0E45F61F59FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wallet-tokenization-config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
Size 34KB
SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
MD5 ae3bd0f89f8a8cdeb1ea6eea1636cbdd
SHA1 1801bc211e260ba8f8099727ea820ecf636c684a
SHA512 69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa
SSDEEP 192:0NOKnK+QXzpTYaDEqIyVZ5mxzrIAfrXKoNKExGI+MmsMR6Q9GMKPrZnfB4FXZ8N:SOKK+QXzpTYaDEq/e5EAfrRoRI+B9wC0
TLSH
T1A3F2FCB1D9009C932F58850A20BA9505376C52237F86F9FA736D424E9F9F58F2530EEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 705cc6d5465f79f15c0706b97dcd2dd1374b071c1911e57f81abc047ad2f5638
MD5 63d04444ab2d3e2f62ff4973e0e6448d
SHA1 e75efdaedc874129fee6b560ee4458d10b7220ed
SHA512 ac3a42a1e5080eaf17bb734651627e22deeda16e5356f37ec1ba6b4400d33ac0cce4f830793c3000008c65c5175597de77ab7ad9ac345d27d22a9f2a48cc0006
SSDEEP 3:MsEllllkEthXllkl2zEfl7D:/M/xT02z6D
TLSH
T19D4404047FC40C45CD4110345057C3D41370D4100531574334D10C3F7DC75401C14110
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 f168539710b78730774a9ce186dbeb6429a778e4d695ff68e1d1e1fa2b59b61c
MD5 80519ea9a1da5e910b0cf5b9ec589989
SHA1 645d6a7536db6f18f687840566005e74dbf809a4
SHA512 7206c077e74b9351ec6a2afc60ba20532d3c0e198c73e862b8e13417385bcde70d1bf70058962f6a5eb20b7fb76f3b0f388bcbe80eed1185ddfa52c34a9b564a
SSDEEP 384:nJiFCCcmyWCa8N58TUNTUlIRDUV4dM1TK14fDKP9dTQ0S9x95j0tTzNgHAUHx/7t:gF5cpaawgJU3PKP9d8d9x95j0tGge
TLSH
T145D24C3ADC99CDBB98EA6F88A30D76139DE04273C59889E8D7D84F0C50A719C6707D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7921ba0cab12e87f1ce4804525faf3d5c96ed5f98f1d705acbaed4ac84e0c18e
MD5 c5fd74dc2275ad848679a641d0da9f56
SHA1 8cabca30c606bd3b3d6c1cf2b4e960c2819407ef
SHA512 5b56d88a0b9aa2e3803ad1ef9779d29db79c9464a5546839b2a161e415f15e7e9ceeaf835b1a242b391eab16b8149bd6df2a47bc656456cd82e6101f04a35295
SSDEEP 384:ntiFavqMg38Ny8TUNTUlIxB4dnuTL14fDKP9dT3sXXFf3Ra4xVErrN1k+5vI+4:kFayv31wgzIKP9dbkFf3RaAVGc
TLSH
T198C24A32E868DDA7EDE64FD9E70A7B13EEE04297958C4AE4DAD82D4D00C719D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 a6c8125902e3bda0e5781da352ca7d8ee3e1dae12dd27d2fe852b6669c2667ef
MD5 24b70fbae04ecb301af94f222d7ea15c
SHA1 83bf77e1936cd96b5c32d40151e40f8a3a49de8d
SHA512 96d4bfd661d8db4c9f4d0b15cb7da1734bfc4592b1c62a2be7f91b5ee0973b8f7bd86c7f37746426a14ddc4eccd6145966efd1a2d556cf411ee7a6f793e65b65
SSDEEP 384:nGiFavqMg38NX8TUNTUlIxB4d45uWK14fDKP9dTEa3Ra4xVErrN1k+5vI+4:tFayv3cwgLoWzKP9dga3RaAVGc
TLSH
T1DCC23A35AC98DDBBEDE64FC9A70A7B12EFE041A7898C4AD4DAD82D0D10971DE1307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 ab728de72754b0fa5bdfe71bb5349306a75de722a795b39b6856d71c48104de4
MD5 b8fd67fc1796f4afc8b98109b32bbeaf
SHA1 262301ccd96ac5f2c41978bd3e9c6332e097f243
SHA512 dab4b2c32be82e8f858248aa21fe837e83408c87c1758785e1baf9055823690d2cc95da532add9de07d8bd411d6e6b69e53129ba145b99f799379e34edd03b2d
SSDEEP 768:kF5cpalwgJU+PKP9dbk8Fnx545wX1tGggW:LadUvdpxOKX17
TLSH
T1D4F2193EDC548DBF98DE7B88A30D7A1299E04237D6BC85A4E7C80F0C90BA49CF706955
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 1898e9fd7022c2e0fb0f6d272201e8ac9df98bb99abee8d39146abf54ecbace2
MD5 bdf27ef647e5db8be099050ced038d61
SHA1 212a7ff489c002f65d739041f59d66fa23bab912
SHA512 a2048a78240860332beb2c12f188d671bc88f30d1327318b1138f5849c2992632f0ed91f14950a53580f3cf47f2755b8411918e381f3923f9fb2e5e9570087a9
SSDEEP 384:nziFCCcmyWCa8N58TUNTUlIRDUV4dM1TK14fDKP9dT3sXXCo1tTzNgHAUHx/7IgP:eF5cpaawgJU3PKP9dbkCo1tGge
TLSH
T1E9C24B36E8A8CDB7E8E64ED8F71E7653EEE05163858C8AE4D6D94E0C00CB19D170BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 ce1dadb1fc99ad643d0eb46a47438c483121edb5c63414b0bfd10d6882fd1127
MD5 563da366b2e05a7924ba6f52c85df523
SHA1 7cb1ded57464ee69c966243e7ec8b4345cb7fee1
SHA512 e7d5b733ba0c21328ac808a94eb4fe4b96cb9e128e062a647a472571f707794a648068142fe17df15235e7d0d67a513792efcecdb42f3937f9d1817715455073
SSDEEP 384:ntiF9CcmyWCG38Nm8TUNTUlIRDUV4d6LTK14fDKP9dT3sXX8f1tTzNgHAUrN1k+8:kFccpG3lwgJU7PKP9dbk8f1tGggW
TLSH
T1C2C25B36E8A8CDB7EDE64FD9E71A7603EEE04153958C4AE4DAD95E1C00CB19D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a8222629f6c20806a0db2d368d3ba3c22dfb730f6f89345f7810e61a5a3bc872
MD5 e155143e32363daab38d122a45b75af3
SHA1 b3c598130917255a7148039cf31e8c2ec5df4069
SHA512 8311b952d725376a71a1a5043ad7a7fd8c060646e0fa3f2b73e0a532278cd1a8b240887e67d7efa04bfabf6eb1ec8e6dd43f2440e4d3717026eb6744e0ed3215
SSDEEP 768:kF5cpalwgJUJPKP9dbk8Fnx545wX1tGggW:LadUsdpxOKX17
TLSH
T1B3F2193EDC548DBF98DE7B88A30D7A1299E04277C6BC85A4E7C80F0C90BA59CF706955
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
Size 233KB
SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
MD5 8bbfaa2cd5cdd9a5019da146cf4deed5
SHA1 17ed2fb07543c5d4bc196a1989dd16a9dbcaacc1
SHA512 cfeee2916f19648ed408b4287e234b4140cf82254cd4b83d918c0a4c3bac2b0467d921915aec290823355be4a0cc82017557be588f65134b466b7192f795f6c2
SSDEEP 6144:KKiD4F7BVps9YpVW+J2i/P66k8GyST+uUP:KB69Vps9C2GAQb
TLSH
T14A34AE9A0F3C3A11BFD2DEA466C8D9377D79B3E06A6928172111C4F169927E07D8C12F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
Size 16KB
SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
MD5 ca6e253c3fc7718b4455493460053be3
SHA1 4085dcccd29a931b8ea9b74f008e26409edf78ad
SHA512 0004e83a845bdab07f01df32094c202c9f3b8767a6dadd707abc19796f917221f869791673315e9d2c5a6a1fc50b922cceb622db98601055df5949818dd6ea58
SSDEEP 384:7tomWvvtJvzm9myvg+FN2VOhikm5hV5+QiyA94pDmiDyDS1c8CazaUhszz:7l5Zhk5hV5+Qis2DS1cbe7Kzz
TLSH
T13A72C9BFA1169F000383D558D6E157AAA12363DACCF3763DB1E1C005F5423E6B1A567B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
Size 10KB
SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
MD5 8061c7027f406f3e20ea5d26969f00bd
SHA1 635d6260e16d1ac595f760df9c5bdda8279629a4
SHA512 7be0be7d59ed46b7ce6adbc1ddc42119426b3223491a03ff068dae66d13a261cc954640916ff4379a6040e021689f070b33dc82b45c010b728ee59abd42f3610
SSDEEP 96:Bxk+yBjecaikDBwrBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gw:I1IDCrBnYQ5jlMacFwn2c9w
TLSH
T1362204B37904F99350E7E0BE1041F59AE93343A540ADF98A528C4A7635F1F0719BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 69d07414d3510b30083aaefaa51031ee284fb60c6c93c11b0ed10312ec99bd98
MD5 0656a09244b4124884e3e3e3866d7753
SHA1 949ef6ebfc55eae5215263224f70cf72b24816c7
SHA512 76afd722308065c73da1f7c7fe21622c0a310df4d455e21d0fca2fbb87c3a4788b6f5c99ddeb208ae3302bfaf16a9e70f1f33ef5e4730f5acf4f671a4b3ffac2
SSDEEP 3:MsEllllkEthXllkl2zEfl2Na:/M/xT02zz
TLSH
T1144404447FC40C45C54014304155C3505370D410457177C33CD30C375CD7DD01C44044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Filtering Rules

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
Size 2.1MB
SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
MD5 43f62d9f35fa6597cec4e2ad5643e282
SHA1 8dba6404724ffd6a2e89901e8dc6e5e55fed3374
SHA512 91891d23464f89e6769d9ec7a28867e28f77925e6e3b3b75fb628d8672157ba239676c07699c931ac307a21ccc4dae95dd707d410f988ff82be4015103d4d6a3
SSDEEP 49152:ua2qP9SKIrivd04TxN/7Uw+zJEhs6dl61n4Kmq9SL6bbBT0HjTsQc8cxjw:u8d
TLSH
T1BAA55D237518BDF45BB31F3EA44B6D48823962A483E3EDC5EA2BD10ED5E014F79601B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
Size 24KB
SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
MD5 aad9405766b20014ab3beb08b99536de
SHA1 486a379bdfeecdc99ed3f4617f35ae65babe9d47
SHA512 bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852
SSDEEP 384:mva5sf5dXrCN7tnBxpxkepTqzazijFgZk231Py9zD6WApYbm9:mvagXreRnTqzazWgj0v6XqK
TLSH
T140B2526EB64903731AF30116AA4B64DBF31ED03F362A4564346CC1481FB6E7443FA6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
Size 1.6MB
SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
MD5 acc4a11e2e7ba213daa0f5e73300f694
SHA1 979463888ec0a9931499a9b1bf6cdedd9bee0872
SHA512 cd81ae9130a4df9ff95932ab57a6f8410aaf6fc0df0979f0d54c2d8332f0c15dc860d0e59d3d6b32e2b14c47a89179c79f935f75498634fe7cb904f3374db907
SSDEEP 12288:1Po6kw86Bm53N/m9hb0dleifKXYXHX0Wi5QIQ6E7JOPo1oQSc9paunY:1PZq9+9hbHifKXYXHX0WwQIw7VSj
TLSH
T1C985B5F9DFC00194DAB8112D20BE71D8081412A540E5EFEAFE7C855F2BC6AC977E49E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 4b226453d83e2fdd88d6e3970df0b9bd6e70fb594603f3edd87f014dec675c64
MD5 3ddb3aefc6b7a2021e46e850b879c60e
SHA1 aa321fa0d6fb532376b5c97b3c54e5e236ad15fe
SHA512 26d0f4923117b0cfee39147b9b19d8d9cd05f0ef777d67e2302fa8c09fd98199c37889fc8db699c606c6c11ae46794d9f147d6b4d434c7a1f7be30ac7f2e1736
TLSH
T18C4161E04C7D2AC1D4BD0E6E748B38FC82E8D725F4A4353C6858EA950AB961C74C583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 5803c876b283b6e726ff775c384e8dc2506a2de2f231d62438fd41021051ed9b
MD5 ec8c1fb18b64d2d7d8ccdb853591987d
SHA1 19b7af731c28b33d5723ed0e32e53aa64469cec2
SHA512 48d5a734059700e0cd7f3e44bf3bfc72f0f6e6d6c7a4a497721b629214ce8039b09d9ebbc0d36076000ec962efa2b9c2c8195bdf23a7abf9fb74f0103b6c0578
TLSH
T1534140D04C3D1AC2D4BD0A7E748B38EC95ECDB29F094347D2864EAD8067A61C748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a7ccb9dabe8aadd57972ebf3f325690181d320bf34f0148693f7e01d40a69b30
MD5 57a2e6c7f9e7e1cf77fe677cf62866f4
SHA1 d4b5044bd1ec41bf64db91ed8a4d82d1e904eba2
SHA512 5b614a0f67da015cea63b36a486bfd5a13920b145a73304deaac36414afd3a8e09909c998c5eeab8b92aff61c6404d26f1c25b4cad5a0a52fa7fda156b3123b6
TLSH
T1D5515FD04C7D2AC1D4BD0E6E648B38FC86E8D725F4A4353C6854EA890AB962D74C983F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 06d50bdae2e6b8befbc216ad21095d1acdbc350b62e28946fb438e4becba5128
MD5 ab31f9a1add62ebff3b2a155677908e4
SHA1 9366670e83b4b8c655f47d88fb461f5d4f4e9458
SHA512 c8f549e0a54f7a936200ee649ce265430cf949192798b0c5e5c4293f5c2232e2915fc1a69c27f55fabfaaccd1e7adc8bcbdacef62703ff42c47ae07b921cabff
TLSH
T1894140E04C3D2AC1E4BD1A7E748B38FC95DCCB2AF4A4353D2824E998067A61C748443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 fdb2e4a7db8599f69ab2fda6bd08f71eac1f757b5a06d1400da28ebe2d78a4dc
MD5 e2a2346bdc900087004ef619d13f5917
SHA1 43ba2d5e35292e1f5564a175cec4afa9710d9943
SHA512 6d7334e2dcaa2b8e9954c0efd13543411f34c48d3018f3f7a418651c1c7475eed455e675b0c30aab098e49c8622ed0e001c14d0f3c565c3f57587297b97472b1
TLSH
T13D4140E04C3C2AD2D4BD0A7E748B38FC96E8D72AF094353D6854EA980A7E61C748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 a1967dd688ad5d0cffc2047ac98befc705f1bc8cf3bc5925b5ed9d61e194e5e5
MD5 9571f28d3cc6f13794ffec7b1342b82c
SHA1 203bc14df3ba65b995a0b4db5c756cae954f945c
SHA512 0cd521895e9d1a228abadc87cec34c2372c7506a182bc5ee50e98d4edfc13989b09eb84e3527823674b4900f1df4b9a924741c1d1bddc304c10722cc61e36bd3
TLSH
T19C4130E04C7C26C1D4BD0A6E648B38FC96ECCB29F4A4357C6854EA950AB961C748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d5232617fcd36667041c38b9534282ab448524e130f458f1cccc530f919a8312
MD5 fb38934122e4bd3b7d73851b7956893b
SHA1 04aec2ff0a63103bda1f04a4b2e17e0ce11d8985
SHA512 464dd302e1a9213066b94bc0d51884b507b8dd710008697f8ac150482cca35ad5b98c88ab73d5f3191a3d6492ac52da2d24e83997b3bd4266a7e06230d718a91
TLSH
T178413DE04C3C2AC1D4BD0E6E648B38FC92E8D729F4A035396864EAD90A7961D748483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 4cf667c611126a2a3ae9a7e4902c5b6c2739ac366edcfaf4237f7142f88ecda6
MD5 f571352fb8b386fe653be0dd71d9f417
SHA1 32d056f3805daa4490f8cb8b9c3a900a85ba2c39
SHA512 b15cd1eb8fefb34023336c5c43c21f137c806c917ed14a02d2260be7a5e92b6a99de47eaed158447be2a51b5c9a5f1505cc40d628d017b6ae41235b9381350f2
TLSH
T1B94163D04C3D1AC5D5BD1A7E688B38FC95ECD729F494343D2864E9D8067A21C748443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 d99946cdd2d987b05d10f37e80880a10e379f1660d5060e6243c464afae1f59c
MD5 07ad4bf072e29a6b9a45114e42d18565
SHA1 a630402ea8d922e635e2b4c7f9c06ee5ef5afeaa
SHA512 9ac220e658c4e12751f18980d40e0bbd1a64132f59112f522eea5969baf809ae225320368b612ee74f76bd16e6aa363181aac9ac3d7a9e4a424abe9454db7387
TLSH
T1CB4143E14C3D2AD5D5BD0A7E648B34FC96ECD729F494343D2824E9D80A7A21C748443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 f933bdaa50c2bc0e0f30c8c71bddc797c8d8aeaff53245ee1c089e7deba0a210
MD5 763eddba443fc0fa792e1439f53cd18a
SHA1 c065b67ac1d80d9f88bd9597a4429c5df494f25d
SHA512 b6711b3f03e4181ce07e2f3ffc4491edb674503590c7ddbcd8626c34e386cfd7ad7d453d327078eed61e20926194dda570beeef11ef85c30c1a13c6295deb7ae
TLSH
T14F4160D04C3E1AD1D4BD1A3E649B38FC96DCDB2AF4A4347C2824EA980A7E61C648443F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 265f973437a74550f0c30381751a4f0f7d213749a0f577bc45e283fb51a94f96
MD5 c2b390104a44982afef3bb0b6fe6d3e5
SHA1 b206a8bd4b4b75bc793c7ce1a0257ffb8ae39fc2
SHA512 c6a3b5eb814b9984b58fa60a0e3e8d3f2c81b23b6b417e8926cbd5ddae05a9fc3daad14c21be81330bcb5844e3b667843d800cdccd22c94670844fd67cd3b2ab
TLSH
T1AD4161D18C3D26D1D8BD1A3E648B38FC95DCD72AF4A4357D6824EAD8063A61CB08443F
MD5 SHA1 SHA512 TLSH

Submit Download

3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
MD5 b1ac780361002049b0a10a7fd30fd809
SHA1 0ee0a7dc27fd175ab7abd6e5649890be3e2795b5
SHA512 1bd8b1d2dc30bc62728d3d08085a446e8c037b02499687affa9a0bb18c6bdfee19104eabdcd8a52c2d0b542046abf26b7fdf81815037d4923e31231b0dfb7d60
TLSH
T156C02B5538F9488C2FA5257ED238092E12E4C912310022B0002ED804103465C13A0C2F
MD5 SHA1 SHA512 TLSH

Submit Download

def4cadc-9023-4709-abdf-a520abfe780a.tmp

Path C:\Users\Admin\AppData\Local\Temp\def4cadc-9023-4709-abdf-a520abfe780a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_10880530\edge_checkout_page_validator.js
Size 1009KB
SHA256 9960614ae3d67b2a2b2b1bb1fdd6a427f4d103835e50e45f2e2cf3b1c540fa44
MD5 f4cf71ceaf44655238e8f6e445479361
SHA1 4d184496decd453261423d11a681bb925d1c466f
SHA512 c6af515da4c1eaa6689c829be6a99602f148090989c7f8b5aa5cd0620ca73d8b217ba266b188aa72bd219f863c86fb00d6e48758278346f5959f2c5169c1e382
SSDEEP 24576:cs4ymRAbsvvG3kJ6ARjiQixwaErn9VUfWEo0EQ1Xp8C9T0dK/vzHEiJsfaG81E9/:cs4ymRAgvvG3kJ6ARjiQixwaErn9VUfq
TLSH
T15F252B84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C68CADA0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_10880530\manifest.json
Size 146B
SHA256 1d4f529025d274699f815657573b828ae880ae0d44ee0b0ce66a6a273f2bddff
MD5 94e3a47681712a13578f122b3158c015
SHA1 376442061baa7018ee9e784d991798fc9f302b31
SHA512 6974139805e18959c2ad2a71727705f1c5268ee598b8864833732e042beffe2416db033180b8d01bf8bb3b2b901d4ccbb090dd677ecded939aa3d07797ba05b2
TLSH
T12FC09B73C931AC71157507D449F59745EB74574BF511B1563730018D4B3D57550606D1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1238060362\manifest.json
Size 102B
SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
MD5 19322c8a94f1ac01a70f8c58cdbbc720
SHA1 7c90dac178c47dac9087dfce738f24a4a627f022
SHA512 f54a9cab8dbe96333862a67912e88c4f26cc3e25a7dc93e8f06d1fb5b0b8e91d53cc0f5619c192380573a2846034ee583276d7eda73dc9fc93bb0d9168f4e099
TLSH
T156B01221EC10B4B32004036C086CC3C063272F032C4079280DE19F84E90D9DBE471528
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1324721665\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1388123329\manifest.json
Size 118B
SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
MD5 4687681b420a5c580fe40870ed6af32c
SHA1 1aa40f91b2ed8c5ea38cb30b81c87a9ac7e21e6f
SHA512 5ced299552785894df9aa86f0cb5d9c057cf73753f81112ef91a8b8dbc6147913e39c27b6327613bc41c447ed230fbbc74881db79853d38e365685132e618762
TLSH
T170B092B00C1AA43B22C09320ECA0668683F84218E8421B1A098036481F882B880362B2
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1919947560\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_1919947560\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_2028458153\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

notification_fast.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Notification\notification_fast.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

tokenized-card.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\json\i18n-tokenized-card\fr-CA\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_449511671\manifest.json
Size 121B
SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
MD5 8083caaf7f5bc5f01ede464e68db1c7e
SHA1 ed6cf18f79c4ee2968adfffe7bf1bce163ef3873
SHA512 60924bd5617ac5f994805f9a871999764ba93c6adda79c501a0b692dce51b9db6f6531a5e25129bc424ae7c4de868ba6e5a976d6bcfbac2bb8bd192c5513c7ee
TLSH
T10CB0922289429D300469079809B486A6E230674BE406F0397B7041CC8B785B8A4A2A94
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_509872252\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_584052690\manifest.json
Size 1001B
SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
MD5 580786a5ec9eb650dde3e0e75db8588a
SHA1 8c0835d1a6bf82e753b624440e9674d649696ead
SHA512 c8d41e16b291157e2afbf978469eae4c017d1ce3b941b93ae710e2bbaaf4c3e601db45e579d22b957b7a1ec48cba788015725a2fa23cf02f2d66010ef4fdd0a0
TLSH
T100115B10DD388D9326E4BAA21CC6580957661DAF4CC23F98379E161D8F1C8AFA37366C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_628211340\manifest.json
Size 52B
SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
MD5 50ba36034cb8b97ce52eb941d76e9103
SHA1 a8757a3700f2af777ce5efc382010d2619f51491
SHA512 001110c3e45514a09cf6f60ca14855524e83ac15cf56776cf3005e016464dc6584b107c63842328a7c1738cc7f2154d8689f84d913b9b8199367699c3f9085aa
TLSH
T1FC900260082491171AC10E506570F8859391661A95851D1D0445154802A646CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5996_762096604\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

memory/836-555-0x000001FD6BB50000-0x000001FD6BC3A000-memory.dmp

Download

memory/1012-255-0x0000022062080000-0x000002206216A000-memory.dmp

Download

memory/3876-57-0x000001C8BD2F0000-0x000001C8BD3DA000-memory.dmp

Download