dcad18921a819477bc21093c3172a333a5d56b478ec3c7ee93429b4c0a16a1b0

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/06/2026, 12:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ProjetCompil/Cobertura/CouvertureVerif/ProjetCompil.Verif.Src.ErreurVerif.html
Size 3KB
Sample260601-pgalysdt2q
SHA256 dcad18921a819477bc21093c3172a333a5d56b478ec3c7ee93429b4c0a16a1b0
MD5 d371aa4b5331cc6dc1f29cf4c5bf0d3f
SHA1 4cada2ff0e7c0616d49ab131edd9eb0ef87c6ba4
SHA512 5b148791133856d9d4ddc95eec39da0494c2d46661553efa7139eb88848377c0c96128063a567392c5152aba07294837352621739d83a30f07c8b7748438150d
TLSH
T1C881396568C5B277C42346DBF5AA2FE735D1C469C6411C8489F92DEBAFCACF4A00360C
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 58 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-lt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-gu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-pt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-cy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-te.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-hi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-mn-cyrl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-sl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-bn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-es.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-la.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_368871646\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-de-ch-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-hr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_1468960977\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-lv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-nn.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-or.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-af.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-da.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-et.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-ml.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-nl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-bg.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-de-1901.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-en-gb.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-hy.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-mul-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-ta.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-und-ethi.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_368871646\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_1468960977\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-as.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-de-1996.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-mr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-cs.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-nb.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-sv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-uk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-tk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-cu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-hu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-ka.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-el.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-eu.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-fr.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-ga.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-gl.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-pa.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-it.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-ru.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-sk.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-be.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-en-us.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4776_47293832\hyph-kn.hyb	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5644	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134247901042320981"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3053180483-1881419501-3594244048-1000\{269F061C-FCD9-43EE-948B-CB55E722F5BA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2648	msedge.exe
2648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe
4776	msedge.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 4776 wrote to memory of 5916	4776	msedge.exe	88
PID 4776 wrote to memory of 5644	4776	msedge.exe	90
PID 4776 wrote to memory of 5260	4776	msedge.exe	91
PID 4776 wrote to memory of 2036	4776	msedge.exe	92
PID 4776 wrote to memory of 5260	4776	msedge.exe	91
PID 4776 wrote to memory of 5260	4776	msedge.exe	91
PID 4776 wrote to memory of 2036	4776	msedge.exe	92
PID 4776 wrote to memory of 5752	4776	msedge.exe	93
PID 4776 wrote to memory of 5752	4776	msedge.exe	93
PID 4776 wrote to memory of 5752	4776	msedge.exe	93
PID 4776 wrote to memory of 5124	4776	msedge.exe	94
PID 4776 wrote to memory of 5124	4776	msedge.exe	94
PID 4776 wrote to memory of 5124	4776	msedge.exe	94
PID 4776 wrote to memory of 1248	4776	msedge.exe	95
PID 4776 wrote to memory of 2000	4776	msedge.exe	96
PID 4776 wrote to memory of 1248	4776	msedge.exe	95
PID 4776 wrote to memory of 2000	4776	msedge.exe	96
PID 4776 wrote to memory of 4784	4776	msedge.exe	98
PID 4776 wrote to memory of 1724	4776	msedge.exe	111
PID 4776 wrote to memory of 3972	4776	msedge.exe	112
PID 4776 wrote to memory of 3008	4776	msedge.exe	113
PID 4776 wrote to memory of 4444	4776	msedge.exe	119
PID 4776 wrote to memory of 4444	4776	msedge.exe	119
PID 4776 wrote to memory of 1456	4776	msedge.exe	125
PID 4776 wrote to memory of 1456	4776	msedge.exe	125
PID 4776 wrote to memory of 4412	4776	msedge.exe	127
PID 4776 wrote to memory of 4412	4776	msedge.exe	127
PID 4776 wrote to memory of 2648	4776	msedge.exe	128
PID 4776 wrote to memory of 3480	4776	msedge.exe	129
PID 4776 wrote to memory of 3480	4776	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ProjetCompil\Cobertura\CouvertureVerif\ProjetCompil.Verif.Src.ErreurVerif.html
1⤵
- Drops file in Program Files directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffc25c3c188,0x7ffc25c3c194,0x7ffc25c3c1a0
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,9705247172351964170,16439428669508377425,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,4063574292665198505,7575211747791193756,262144 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:2
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2268,i,15090420116008300530,9032991566115778245,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,15457030751605145042,6586157592102170218,2097152 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,9156149483641091565,2325048377691888791,2097152 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,2065480813311541765,9921611396494355091,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,4172935810163580852,16646584259177092739,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,4256765780886494493,14300217049128847780,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,4256765780886494493,14300217049128847780,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5656 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,14400126253636762144,17402093440670025825,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,10958890886827762674,9243019352113810150,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,9585916197408237173,13489342949281065179,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,12575046806506756080,13856978592413346040,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=2140 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,17984182039080475699,13620965946038227726,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,3055244570218253754,1264309582182768254,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5048,i,396249903244835522,8147319565248081188,262144 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,14788190838274018017,97207756875240774,524288 --field-trial-handle=2716,i,3465201798692684601,7140781387098182731,262144 --variations-seed-version --mojo-platform-channel-handle=6204 /prefetch:8
  2⤵
  PID:3480

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4776_1468960977\manifest.json
Size 118B
SHA256 1b90c1e9cbd34978ee21dae135f1ea9f51599d19014f9219cd47d730fd914f55
MD5 7cbc275e0cbde8ca623fc70c406367c3
SHA1 2b9fecd47ed8ad353bfdd958e0f5197f20dc370c
SHA512 6966dbc5899213f4b9d0e241409cd834f67ef2df35a5b437cb194893c6c6f7fcd8a33c0f22344a20682a84dabaa2d0f95b9d739e5d0a840a91fc2806e09e0b06
TLSH
T198B092B00C0BA47B22809720ECA166C283FC0218E8466B1A08C036481F9817880362B2
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4776_368871646\data.txt
Size 146KB
SHA256 bcf1a17189b6ae7371429804a2df2ba36c798b142dbc4f7f06a7332834405408
MD5 7a8bee21ef52bf7f962551770605aace
SHA1 8f205bb793c0269f210f7e8cbfdf594f089c7d0f
SHA512 8a2706485d3408e09242d59cd72ad367eeeccc948d7c3a74b3c7f8c7a2b22ad44b94ba426a341da606dbc53c4d8c519df921e879347018ca809d1ee63d13e7fe
SSDEEP 3072:cPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYErqsZo+Eog7TAMy3nBt5rd:wX1aI5aZoKzMJ07NrpoTZ8My3nld
TLSH
T1A3E3F1218EC01FDDDFA8261C50BF0B1DA7D0878D443A6686EB63BD4EBF9B50856274C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4776_368871646\manifest.json
Size 52B
SHA256 5a708ec5a10762801001cca55997ce9813d9c312a009b3c4fa197426c752fe90
MD5 4fb639ca1de22fb121f954c14c414349
SHA1 a6a124dbf473075e287557494d3a0375e8d42c2a
SHA512 c5cf5e55ce9ce6c86d0d346afffee7ecabee609ff6c4303c3fcf21f3d46fe2f770636ecfac5fe165b777bc93ecc90e55992254fadefe8b8f2e5b17a2bab6a643
TLSH
T1C2900260442491171AC10E506670F8C59391661955850D1D04451548029546CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8da58a9b03c676d64167caf3657c5315a0b78038e3ae23bfef432a40d8d22290
MD5 81f1d957977f2d73471366011b7128bf
SHA1 c3403bfa34ee45b494966cf8be9bed08da2c5168
SHA512 171afd7f20b750bc0bdc1fc9fd4cf14984e63031e562c60a7b1bab3112c84572ebc63669b744e0e5399b2f5453039fb86937cf7ab417a72da7f1ad931c88f0c5
TLSH
T152D012B62A4A7010F2694A31B456CB00776D15A12852A705E26D945C99A90A566C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9300dc4b11c647d4484e20f994dffbbd9939379d590fc7dedf9875372c431ce1
MD5 b031933009b03b3dcfc6f363760f83dd
SHA1 a9d3126d19c73dafd7e12a688bb3a802627790ee
SHA512 f606a12a9a0879bb3f7d6c9bcb6e3754434b9f0d8f1d351e8104aef087c326f689af5174eddcb6a3cd1f1d07864ff544fc76e73f8b76bf6d4330e19666cb7b28
TLSH
T18FD012BA2A4E7010F26D4A31B416CB00776D15A12852A705E22D944C99A90A562C62C6
MD5 SHA1 SHA512 TLSH

Submit Download

922fbea4-14b0-493c-8353-6a100929a204.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\922fbea4-14b0-493c-8353-6a100929a204.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 753b661e50660488f2d5dde83b46e98a8183eb4b177e4367419a9e967adf8272
MD5 499b41a76179c46b19fe50cc3cb5b755
SHA1 a38cb8bbfb78ed690ffeba2819e510855f9e1421
SHA512 fe4de8cc06f851f759852026f00a898e9282cab98729e4c3c26092e1ad8e33f6cb463c1facbb043b66ec1d30c22553c0a387101bf051b5c6763eb18ee2a5146b
TLSH
T176F0F4B6D921EC2718FD0B6870598B4BE75113272780899F3B3C970D8FB463B498691C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e0550cac60e8f3f569d7a70d2b71a236a7f8ab8e9e8fdb033f78dd5251e4a372
MD5 fbf6777368bb2b19ccc1325dc876d45e
SHA1 16829f559c48294abf29c45a1892bbdf03f42a0b
SHA512 5d3c385b5bcaa9a242ff32a540991c6144edf86e4bf16290366282b2078d3ef3da49f8ac993b90ea3b72f29c83d6406faf080e8e12212f604c5a944519b1ce8f
TLSH
T1AD419CF783E8856D8A1195F0AB28AE2BCE2D0914432C3D9A85E4AF1B93E2471E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 148477169ac51fad733a94488472b734e1eac0b6d23115a8ee040616ac92ce27
MD5 2805c484fc55a6cdb8a01832eb1babd9
SHA1 1d9b93ec9feedf5ffbf3db8a9da03ab35ef7612f
SHA512 bff40ff67222633f75bbde450230a4ec51672abce83e9c99a3b181e947f4df45bad5665c361011fac29ca5f7887b495441ff0e8cf4e957a1a7de2eead838c6a9
SSDEEP 192:sxZqRzyMqZjK1Ml8UQBks/fWsNHrZdIaRuvnzodpHtHW6+WNGYvxdqcIg5tWNJ:sxZqEqSs/fWsVrzIKYsNHbGeXKX
TLSH
T1F372D916AA3889778CDBD619F645BB93D7F91573A1904E4469FC8B0C04E7AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 16adf57dae7ac3a2b51195ed6caa302aea07070af4c6e6fe5373837b928e54b6
MD5 4eec17d906107c7e6118a3d0e3235e6c
SHA1 782b778b35515225c76b407fb063a279b489f159
SHA512 4f343cf734e7155adddd62feaf4365f5dbc74ceafc9513db88b1f298458b73df50418f1280de3a859f67262d41f972a9944fc5f765a366de64ac16d2456f7abf
SSDEEP 192:sxZqRzyMqZjK1Ml8Mks/fWssxHOaZdIaRuvnzodpHtHW6+WNGYvICdqcIgjnJ:sxZqEMs/fWssxOazIKYsNHbGuXjJ
TLSH
T1B162E8166A3899778DDBD219F645BF53D3F91573A2904D44AAFC8B0C04E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 be5dc1d7ac3e429791cc03cdf153c703d7f307d9fac95e1b608d20b08cc795de
MD5 9b0c43b81a9c01aa8447433c5058bebf
SHA1 2ba7a255051adddf179e9f0dbb51d47689ed07ea
SHA512 515de00de30e8b5aa78b677e389a5a521a60ae8163fc018ca940a93c46a7b262da1455acc3029501c3f4e540db1bf3b8801771549208b3e29f34c70e9b09f7b6
SSDEEP 768:ZYsv8OdF6ssi7pLuLnFhWvFvmX8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhysy10Lln:eY8Od/HEnFhWvFvmXu1jaRt10Lm2NuPQ
TLSH
T196F2EB3B6C0CCB7E4F844E9CEC2A6F8A6DE802CB5698895447FA844C02C76EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 5e403fae09846ec7430c7d09f7e69ef3359c32d69e26ba38075bc5d77f67415d
MD5 27f878923fe08c5692a228eaa22e715e
SHA1 604d46ae062f90a3c580cac5f0d3b8507e2a5148
SHA512 9874136599f4fba7fc61fa77b4e849e8cc80c768380d62ab45bd224748e68961678743666f5486eea6f8155a63a2cc99a3a78f55124e616ce6635b2bbe71212f
SSDEEP 384:0LppY93PBZJPtN53ATy3jJlZEdQ3bvV7RMrbAxzdX:0LppY93PBZJPtN53ATy3jJlZEdQ3bvVL
TLSH
T17BB26A5A703E0211393E2988B39696364F4235A37058E4EF7FB814A54F67E225CFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6eeef192c4363d971aa7d7abebbabc014f512424c0f011176b3c5299e8181bca
MD5 db6af6b517cee546786e83c48ac9266b
SHA1 0672cd3ae2aa40df7faab448ed850e3a0f9f58ea
SHA512 322bd43ec2c9cb5b5581ed6375da36d7457d99bc058564ae28c6cf51d53b35d0044511e813ddc2c548a1013f0a733bb5522373d727ebe5b4fb584f1d4e66dde7
SSDEEP 384:nFiF1tNnNnb94g3sNj8TUNTUlI4uDQckCr3OAphiftGfFmmEEXIQ/4dWnjnLspS/:MF1jZb/3WwgPk/GoGpENdwjnLH1A4Jn
TLSH
T154D23B36D868DEA7EDE74FD5B75A7A43EFE4015389C859D8EAC84D0D009319D030BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 c0ff79c8b2e10536cef41ce63453ef2bc4208d73efdccb4d3367cef18c83a017
MD5 c4ab1f751c18edae2b87b0c15ec05797
SHA1 c28d8f80dbc9f404960f62ddc08bb7acfff2b87b
SHA512 a2da490781bd4a51a0ba05483963832b75258a76aca0fe5cba64ec5dc0d407d97c1909b589f21780447e5fccba867c379498137743ded1f0f932ac3024dc08a5
SSDEEP 384:npBiF9CcmyWCs3sNK8TUNTUlIm2QckCr9l7KphiftGfFmmEEXIQ/4dWnj2Vpde4a:poFccps3bwgbkUNkoGpENdwj2lI8p0KS
TLSH
T15CB24B36E868DEABEDE74F89B74A7A07DEE0122785DC59D8DAD85D0D009319C430B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 98af6ebe075789d2e57e19dcb97913a77d00b9befd18e1557a68b39d3a1ebcb7
MD5 9e8ec23d83bcf9f28219697e4e05b3c4
SHA1 3a01feeeaafdd30a569eb46a5e2dd83a437a8f6a
SHA512 fe2859913a7e71f436341005d257327281c0642ef3153eb5b66692ce52a8558bac0be53497cfc37819bdab81db7eae54986cd3b56706a119b655f6daeca1b15c
SSDEEP 384:nbiF1tNnNnb9b3sNj8TUNTUlI4uDQckCr3OAphiftGfFmmEEXIQ/4dWnjnqspS1J:2F1jZb93WwgPk/GoGpENdwjnqH1A4Jn
TLSH
T1C1D24B36D868DEA7EDEB4FD5F75A7A43EFE40153898859D8EAC84D0D009319D030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 4c00f4449a1c7d4ab015b15edc12ee562e5a527f4e7d46c6d074a5d1def792cc
MD5 34d14ff8d2a63ad33257c6ec780664dd
SHA1 ecd6bd2ab4dfd1418308e803981495db40768796
SHA512 3f411e6cef443ba3dbefb2ff50a095185e6e9400f371590d3c154a5111519574e4150835bb1bf63e660b742651adce79d34e862c7a2ba2c8b5a5521642524f01
SSDEEP 384:npDiF9CcmyWCc3sNj8TUNTUlI42QckCroOAphiftGfFmmEEXIQ/4dWnjnqspS1aP:puFccpc3WwgpkKGoGpENdwjnqH1A4g
TLSH
T1FBD24A36E868DEA7EDEB4FD9F75A3A43DFE04163859859D8DAD80D0D008719D030BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 dab7b5e71d85bdb344d9aa91d1ea65031f32c8dee90e05b623704436feb656de
MD5 bf692e4c410073bef5300b5d62a80e12
SHA1 20862eedac6ece63eda00e8481c9b3f2619bb44e
SHA512 0d135b8bceebb9ff3688685b9832d23f96f818ff50061fd8ea780bbe632c5070427bd3f4cacd941217d086c2d71a987b10d8c457dc84e69cd3349215f25b55e1
SSDEEP 384:npDiF1tNnNnb9b3sNj8TUNTUlI4uDQckCr3OAphiftGfFmmEEXIQ/4dWnjnqspS/:puF1jZb93WwgPk/GoGpENdwjnqH1A4Jn
TLSH
T1E8D23B36D868EEA7EDE74FD9B75A7A43EFE40153899859D8EAC84D0D009319D030BC29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.5.28.1\typosquatting_list.pb
Size 507KB
SHA256 b34c96309ee41ff6d06dea8e605991b9b8c4d67fb4885cde883350c3b5ad674d
MD5 60b2b141019ad9ca0918db29dce42c12
SHA1 574e04a0a62023df2271a4633378f57320d33c8c
SHA512 918e6ea325b74876026691a37440441ffd3be78736595127ce77288e0bf3ab8597d52c62f94956f5567d1f985c2d38fa82f288ee330f8282f0e804ec2dc06b14
SSDEEP 3072:diBzZPXsIPv9aayls9OPzItqVCLWtQAMDvUlDetL81QFh9QGFFXaYllJzCWCD43s:ozZsIPv9akA0WuIDo/FhJFXNfFw43s
TLSH
T189B4C5B9DFC00194DB78112D20BE71D8181412A580E9DFEAFE7D855F2BC2AC977E85E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 40796bc0d09d6684d27d1bdc3928437e6850b0dc7d3def9d2b6fd28930fe1e3c
MD5 93f6ef23875ac5f74b0ee82356f5ccb9
SHA1 4638a99e5a51ace55bca98531e80faa9d2b4580d
SHA512 7f7ad157832cba2267601604813aefb4c763a50c69a8553dc343fd23569a50d22060669a0cb4af9bc0b41b524240a8014a0c60a89a896059e7de37936cfb71e4
TLSH
T1F24123E21C381AD1D4BD0A7EB48B38FC94DCD726F5A430BD6858DA940629A4D648143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 4adba7a01ed9db0fec5d6d993185f4ece486ff65b290eaa69b8a7ad0433a5c21
MD5 c18e22fb24b29bb0180ff8598d293d9c
SHA1 2c56b34baecc75f34a6f8f4d0a8e5d34edf03e9c
SHA512 10b1c6302b40b390a747fe1eee2d215c237fb25eeddfcfd0bc2167c188c6283c05ce15cfc965c3d46bbb40d10bbcd1ad310e0ae74743b2c7ebd0aa6342f59ca3
TLSH
T1034141D25C381AD2C4BD0E7EB49B38FC81E8D626F1A4307D6858EA940A3D90EB08143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 43f97e6eb7c84bde5c33060a765d8b91dff2220f67332c2bc903b6830468ef28
MD5 75cec7d417767c25127fde29ddfdf0e4
SHA1 bc29c823683e9500beb9ac460fb044562325448b
SHA512 acffb33a51a58872d479b8bff881ceacc10781d1931b7f17fbbed75a53bb42cf02c3b53faa4f2734ba7c7e7e558cbdcadd11338d191fb5aeed85f0d5a9aeae6b
TLSH
T1484122E11C381AD1D4BD0A7EB48B78FC85ECD72AF5A430BE6C58DA940A29A1D748543F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ba81c5b75d65a4f56013842202a40e44155db9c551bd9dfb477209f120e545e2
MD5 5d4da136331b620b080fffd0e5fc21db
SHA1 0e4d7dd0b87643216980107e35104cdd86d33451
SHA512 a0475ec8087cd48634f02e5f524079d905820e5d5f727983b5ffdad9bfccb5cd0ad029924fcabbb7cec224d387e149745ca34eb30f3fd3f5073f7f24351dfb16
TLSH
T137411B58B6FA2108B3B77E5A9BF7A86E497E7D772E06D45D00010D8F0676E40C9A1B33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4784-163-0x000001EEBAFB0000-0x000001EEBBFB0000-memory.dmp

Download