f71f1c1bbb9e124c8414b6c0dcd1fd3a030eac46c4eb4edd0e331de378ccf59b

Analysis

max time kernel
150s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 17:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MyGamesLibrary.exe
Size 10.7MB
Sample260714-vrexbab16t
SHA256 f71f1c1bbb9e124c8414b6c0dcd1fd3a030eac46c4eb4edd0e331de378ccf59b
MD5 592b7cd337c91b79d7bb148e75f5e32d
SHA1 8ce34964d7aa268b4b2f109c060fe8cccacbaabe
SHA512 8743054eed904bd4346d046a4810cb183f779de2ccbba2810d53e0f2f722ec7fc25ab533501e2601883b83561d03fade8d9b8a55df836c74d604707ff8bb162f
SSDEEP 196608:nwoEUAiXyzSlW+t2PKMmjdVEpKnLOSeVIcn4YEVBa235oQT4NWM6sxH6nW:nwoEUAquSlW+tHjd+pqizZ4/BaKoi4Nl
TLSH
T1BAB63399B3F503F2F6B783BDA85294A3F776F42187218AD7073652910E63AE09D39350
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 18 IoCs

pid	Process
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe
5168	MyGamesLibrary.exe

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_668690924\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_1713678241\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_1713678241\nav_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_296383169\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_214026817\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_668690924\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_296383169\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_296383169\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2488_296383169\smart_switch_list.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1536	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134285228017225279"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2301830172-776172150-2531349243-1000\{B3096E9E-7500-470A-AB66-F99F5B614AD1}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4192	msedge.exe
4192	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2488	msedge.exe
2488	msedge.exe
2488	msedge.exe
2488	msedge.exe
2488	msedge.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2488	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 3020 wrote to memory of 5168	3020	MyGamesLibrary.exe	88
PID 5168 wrote to memory of 2488	5168	MyGamesLibrary.exe	89
PID 2488 wrote to memory of 4912	2488	msedge.exe	90
PID 2488 wrote to memory of 1992	2488	msedge.exe	91
PID 2488 wrote to memory of 1536	2488	msedge.exe	92
PID 2488 wrote to memory of 1992	2488	msedge.exe	91
PID 2488 wrote to memory of 1992	2488	msedge.exe	91
PID 2488 wrote to memory of 556	2488	msedge.exe	95
PID 2488 wrote to memory of 556	2488	msedge.exe	95
PID 2488 wrote to memory of 556	2488	msedge.exe	95
PID 2488 wrote to memory of 4592	2488	msedge.exe	96
PID 2488 wrote to memory of 4592	2488	msedge.exe	96
PID 2488 wrote to memory of 4592	2488	msedge.exe	96
PID 2488 wrote to memory of 692	2488	msedge.exe	94
PID 2488 wrote to memory of 692	2488	msedge.exe	94
PID 2488 wrote to memory of 5328	2488	msedge.exe	97
PID 2488 wrote to memory of 5328	2488	msedge.exe	97
PID 2488 wrote to memory of 5328	2488	msedge.exe	97
PID 2488 wrote to memory of 904	2488	msedge.exe	98
PID 2488 wrote to memory of 904	2488	msedge.exe	98
PID 2488 wrote to memory of 904	2488	msedge.exe	98
PID 2488 wrote to memory of 3952	2488	msedge.exe	99
PID 2488 wrote to memory of 3952	2488	msedge.exe	99
PID 2488 wrote to memory of 5776	2488	msedge.exe	101
PID 2488 wrote to memory of 5776	2488	msedge.exe	101
PID 2488 wrote to memory of 3252	2488	msedge.exe	102
PID 2488 wrote to memory of 3252	2488	msedge.exe	102
PID 2488 wrote to memory of 3488	2488	msedge.exe	104
PID 2488 wrote to memory of 5764	2488	msedge.exe	105
PID 2488 wrote to memory of 5764	2488	msedge.exe	105
PID 2488 wrote to memory of 2260	2488	msedge.exe	106
PID 2488 wrote to memory of 2260	2488	msedge.exe	106
PID 2488 wrote to memory of 432	2488	msedge.exe	110
PID 2488 wrote to memory of 3012	2488	msedge.exe	111
PID 2488 wrote to memory of 6008	2488	msedge.exe	112
PID 2488 wrote to memory of 5532	2488	msedge.exe	113
PID 2488 wrote to memory of 5532	2488	msedge.exe	113
PID 2488 wrote to memory of 4932	2488	msedge.exe	117
PID 2488 wrote to memory of 4932	2488	msedge.exe	117
PID 2488 wrote to memory of 3256	2488	msedge.exe	118
PID 2488 wrote to memory of 3256	2488	msedge.exe	118
PID 2488 wrote to memory of 5416	2488	msedge.exe	119
PID 2488 wrote to memory of 5416	2488	msedge.exe	119
PID 2488 wrote to memory of 4192	2488	msedge.exe	120
PID 2488 wrote to memory of 2868	2488	msedge.exe	121
PID 2488 wrote to memory of 2868	2488	msedge.exe	121
PID 2488 wrote to memory of 4068	2488	msedge.exe	122
PID 2488 wrote to memory of 4068	2488	msedge.exe	122

C:\Users\Admin\AppData\Local\Temp\MyGamesLibrary.exe
"C:\Users\Admin\AppData\Local\Temp\MyGamesLibrary.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3020
- C:\Users\Admin\AppData\Local\Temp\MyGamesLibrary.exe
  "C:\Users\Admin\AppData\Local\Temp\MyGamesLibrary.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:5168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://127.0.0.1:8750/
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Modifies registry class
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:2488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2ec,0x2f0,0x2f4,0x2e8,0x2fc,0x7ffca686c188,0x7ffca686c194,0x7ffca686c1a0
      4⤵
      PID:4912
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1580,i,11402847207471801520,16004953901039575536,262144 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:2
      4⤵
      PID:1992
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,5536196224134387391,3464813436578999673,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:11
      4⤵
      System Time Discovery
      PID:1536
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,4122271882154768489,13300287838356948240,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
      4⤵
      PID:692
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,5463001652084318415,1222179963877116192,2097152 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
      4⤵
      PID:556
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,3767955272395266078,16657374761099691207,2097152 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
      4⤵
      PID:4592
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,4452262636406024135,4956730131668610253,2097152 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
      4⤵
      PID:5328
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,16455412208896641352,10143115008875342990,2097152 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:9
      4⤵
      PID:904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,16153737482183181481,13135565087952054184,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:14
      4⤵
      PID:3952
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,13724849765656714284,7895046597204945122,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
      4⤵
      PID:5776
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,4968517601180532626,2401560418755643592,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
      4⤵
      PID:3252
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,9041473149951608466,1832862442930741236,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
      4⤵
      PID:5416
  - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,9041473149951608466,1832862442930741236,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
      4⤵
      PID:3488
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,11719018288118905355,8197871626080405517,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
      4⤵
      PID:5764
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,9084801447020856775,3279898470817916398,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
      4⤵
      PID:2260
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,4819073079855989135,13990289588899066721,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:14
      4⤵
      PID:432
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,17604665836466270975,15630989414643767581,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
      4⤵
      PID:3012
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4396,i,5730751800762553502,9891224996952063487,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
      4⤵
      PID:6008
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,1695889555429236007,11659470312681298458,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:14
      4⤵
      PID:5532
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,13648303543974124772,13747420111863616705,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:14
      4⤵
      PID:4932
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,3909228301089709311,7096854689455368452,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
      4⤵
      PID:3256
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,11267394339900055192,11864776295178702531,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=2844 /prefetch:14
      4⤵
      PID:5416
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6696,i,6133734730794426288,10063724474335069571,262144 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:10
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:4192
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,7757813131631079079,12112718106415445838,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
      4⤵
      PID:2868
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,561969554837761442,17723414342642840647,524288 --field-trial-handle=2032,i,1209379329343725877,10981837373261468171,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
      4⤵
      PID:4068

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1512

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b53c58762bff2a5723ae446675e8f65fd50818b95383c8f3c7efef01af06e466
MD5 629a18fe1b7a241215c77a30d7d8d7ee
SHA1 5e7bd5b514f4e46a4b986c8b89d0025cf81a1f36
SHA512 04fd58619789dc107f680a57dba3aec42e4bab7c29c0defd7e1b8ca2d078ca4c91317932ff076171bae60d370b28de32c94039c6ab690d5004ddcb857977f38a
TLSH
T182D09BD575146914C5A1303E21D2935392504835601945874051E56D5C5479743FB5AD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c36ac766a384a109222b8b647d2f5c1c2e6c4672a4a2c6b8a01f6eac0a5df074
MD5 f9f896b0e6f281d55b1ca3fa3c1ccdcd
SHA1 db44df3874cd86a961c82d25f3ae2004f249b2df
SHA512 6b8c8d305c2d7e4a3b5efb6e1967d7db1b1ffdb7979edd315013037da369c923060dae4ef8a7219176aa7e0bc1fa4cb98e48470ea2f569243a95d3301f5a40bd
TLSH
T160D09BD575046A14C5A1303A21D1935392604835741945874051E55D5C5479743FB5BD
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b7b3d64691f7c32edc7ac7d332f4e5b7cf1951549b200adfd970ebc215536a85
MD5 bbcbbcedb2549ef7956a7a292fd008f8
SHA1 c0771e8cbc72355afec64c13300b5d832673e686
SHA512 4a1cdd4ad75e6ebbbe0dd215c6b1d8619f0a0e53813455edee3e760d0a35d327439403772070e86e07264518b4e0a13335c302100d00910d8821f99afb576210
TLSH
T1895174E1832D26C3C7A445FE38D15DE6357088FD89673E086170AA70DDDA79E135AB90
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 707047fd25de9da248e4cb3ca2a26fed6f625194ec3f7039dd4516ffef708586
MD5 612bac8ae9a30c98047e5897510befdb
SHA1 b05572e1471a8dbac3e1cffa8c60571028c559ae
SHA512 f223d7187e15c48d955494270e1049397262db7ee23dedc7c921590b1200bd10577536b23bf055b3d00575b0db06021ce4fe1044250a4a4a6b2549c1e299efcd
TLSH
T133319FF3C3E4856E891152F0AA287E1BDE2D0616431C3D1AC9D4EF5BA7E3474E10198F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2046aecc098fd274d7df1743128791f1342ee557b21b2653bfc111d315f11cd4
MD5 bfed2f429abecc3f343ce8ec332d83f5
SHA1 e0b649361abfc52a8ee6943ecd4c14f6db9517c4
SHA512 fb9bf635f2321f3588e70ac5afb0e24be4ea7f568a8112b0b1cf028aa9204959717d16979a6c6a5469c116967963e00f70884fcc3f4fa363063eb919274cf15a
SSDEEP 192:sxRd7RoyM/jK1Ml8wC+/fyVs846IZqzoA8p+Q/g6+WNJYw/YxhJcGFIgtJ:sxRZS8+/fSs8462nv/5l/Gx3
TLSH
T19862EA166924597BCCDBD20CFA957F93D6F91573E2904E44AAFC8B0C04EA6ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e4f0e3e42cbf27641d711ab55336443f2d99d43b8e7c0ea55bb725a55b6e466e
MD5 95790365a9db23f0e9bd1f1d7e83980b
SHA1 7f06ba07c4236541d30e3749c3ed8e4bb793367f
SHA512 b1801a44fbcb8ef77b5b274d1ea984070c275f2282728b41d94f590add9de5beca8b6cb8b964da46e6a2dc47631af19957d928bb683b3f4e3e2bf0c1cc55d537
SSDEEP 192:sxRc7RoyM/jK1Ml8wC+/fyVsB46IZqzoA8p+Q/g6+WNJYw/YxhJcGFIgD6J:sxRaS8+/fSsB462nv/5l/Gxq
TLSH
T18C62EA166924597BCCDBD20DFA957F93D6F81573E2904E44AAFC8B0C04EA6ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9aa50b504311569c58625b331a0744ac39f771d50f51dd37e2b075377e18ab74
MD5 1c11640caeeca907bcb2cc161d169c3f
SHA1 c222ede8191ee7e10c0195252ac6970f13a0e801
SHA512 9d7d270ca76a8da3e451aaaeeef53b615f9f43eff7fe29dbd112ffcfba1e9b87edbe1feb0a0c3ab8fb61305065821b0dbb75877df3f108b80f6bbd17df342628
SSDEEP 192:sxRc7RoyM/jK1Ml8UQZcC+/fyVsBZ6IZqzoA8pYQ/g6+WNJYw/YxbJcGFIgDcJ:sxRaSqZb+/fSsBZ62n9/5l/yx0
TLSH
T1FA62E916A524597BDCD7D20DFA957F93D6F85473E2900E44AAFC8B0C04EAADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 cee6d558178f9edcd71d39f49e103d7cf00fb9e02759c3901475b3f2c25a4a91
MD5 aeacc5de9c685efd1067690558528731
SHA1 6e8d3e25cb8863ef3d574f6e42c315a4f41c192d
SHA512 bd265ca675aac91e7e961e57b36d06e8ae5bc5387921d63d8509fee45f2ccc235282ce506a7f3a149e20423241fb25d4532d6984c0aa53f0da50d59624537ec3
SSDEEP 768:0xCyDs7pLuL7ijWgbrfM18F1+UoAYDCx9Tuqh0VfUC9xbog/OV6k4rVAiroJqgLL:0xCyDQE7ijWgbrfM1u1jaBk4pA5Jqghx
TLSH
T121E2DC7B680CCB7E4F404A9DEC297EDEADE802CB96D8C95447EA480C03C66EB51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a16fc73fd5f62964d6171e3a8537f1b5982f3d08258160241189b14bb4c89765
MD5 4ce55b852b6048cc5dd95af027af9674
SHA1 14497beb9e886efab60d1085f85c425817ebe818
SHA512 e1003e81c7ea57c21785c07186dbb2bd2dd3c5b3246a1ec1b15a6122e0549a54862fb06e41b97ed56a4b53b443d726b7b892b1600e8efd7ff23ea67b364614b9
SSDEEP 96:KDZFZCZXZLZFZnZHZx8ZrZsZsqZDZxKSZ4qZlZxOZdZ1ZkZDZHZS9noRtbhCKyor:QZFZCZXZLZFZnZHZOZrZsZXZDZ5Z4qZh
TLSH
T1A8A11392B03A039228FF6A0C91A5D616C6C174F33259E52B77E940B20F67F025EFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59fa25.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59fa25.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d3245721a8e1938c9d68def7a9eeff4768861a1fb26f1a909cb08c8b121b3380
MD5 51579ff7ae42003ec6126021553b4ce9
SHA1 a1710f08d453471f206b2d875f3467a65ee726fa
SHA512 65f85bb1d8e012d399bc2b397fd2a8859d6332cd5ab74b7a1b93570bc138e5641d46c15d52591ca48bc32ef50618a87ca79655b48b39eb9236a269d11e2908e7
SSDEEP 768:ej+9S3HmwTkKL2je28WjF669yrqUjWiIwwxMtJb9M8:d9S3yjjF66INWZTMjb+8
TLSH
T1B8F2BF706C559EB7C8E6C795725337C7AFB011A786C40E8CC6DCAB0D498B5DC2B8742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 43KB
SHA256 ce6e21596fca5d3d71ff8840afee1a2ca1a808b9f13024e6e0068ec0388cc424
MD5 930c8f553cdb42d84fa0ffc56afcf6ea
SHA1 8cfec809b07d6b79828f61dce9866c4b45c51007
SHA512 2829fc399e1587c002529174397ec2461e79df3ab658de91fd94dca4ba2e9ceeda2e4bec01d0e1c2404c4256f92ea5a93ea689fbc27892e879c86e4b09b1258c
SSDEEP 768:+F1j+9d3kwgOmhTZe28XnF669yrqUjWiIwwxMtJb9M8:79d33nF66INWZTMjb+8
TLSH
T1FD1339F598D78A77D8EE8783633D2E869EBCC193B1884984B7C45E0CCC861BFC646815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a624534668542ba785a178614d56347c7c88dbfca334499b92e2c33e75459a9d
MD5 dfc928b2967212bf3b0a0097c21659b2
SHA1 45fb728b204d35272011739b088ff51eb745343f
SHA512 1666ad679a9a9562cb488d075d13c1e66bcd09afc1d73831c456d2b4c100c192696adfe5fb3221b99b5ceefd07d0b720c82cb3c6035dff3d2b64fbfc5024f5b2
SSDEEP 768:arv+4UNbdl38PkKL2jexjF669yrqUjWiIwwxMRDUiler:absbX3D8jF66INWZTMJUsQ
TLSH
T17E03CF30AC5856B7CCF2D28672437783BFB4119396C50B98CADD670D869B4DD2347A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 05211a305ec057f79356b87c2d1dd57f249993c16d070f1fe7509adcd9566b4c
MD5 9c66e37ac0e7bd28b90d72986bbd4e97
SHA1 2f60428039fd203d1b23ed2a31798946dfb75c0e
SHA512 1b1551d4997065ac01593db8f078401065e7b8991a4d71d9297d9a9f66c3b3d6ce0c4cacb827485b8e69d18b05eef3f72cdda967bc2ce5b9ec7bfd9e01090c35
SSDEEP 768:bj+9S3skwTkKL2je28WjF669yrqUjWiIwwxMtJb9M8:O9S33jjF66INWZTMjb+8
TLSH
T1EBF2BE706C559EB7C8E6C795725337C7AFB011A786C40F8CC6D8AB0D498B5DC2B8742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 9107e613905835c00077a499d2faa20bb70b974e6309d1f2f33ae52933318f07
MD5 2012d4de563c653f56f62ccbf46db598
SHA1 fb24881003593f1ceb79019e52ce5ee9e94c889c
SHA512 c03d6584395c1c97c75af7dc6df57df358d3957035521bb6833c538679683aebe0410bb12586472b84dc98111e703984dd37868464fa9c66fdafb423e763b555
TLSH
T10CF00E829C3E25C086E90F7FE44725F840C46517B0883879088DE9D8813A40F11414BE
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\VCRUNTIME140.dll
Size 117KB
SHA256 052ad6a20d375957e82aa6a3c441ea548d89be0981516ca7eb306e063d5027f4
MD5 32da96115c9d783a0769312c0482a62d
SHA1 2ea840a5faa87a2fe8d7e5cb4367f2418077d66b
SHA512 616c78b4a24761d4640ae2377b873f7779322ef7bc26f8de7da0d880b227c577ed6f5ed794fc733468477b2fcdb7916def250e5dc63e79257616f99768419087
SSDEEP 1536:Z9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaNxoecbdhUoaLjTz164zEd:ZEnsvReGsWyxLizXFkecbd1aPTzW
TLSH
T10DC38C8572A002FBD16AC274C1A36A17FB75B94487B0A7CF03B58A650F53BE09E3D356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_bz2.pyd
Size 84KB
SHA256 b4aa26c44a529de7129733a31b73fd74e474b9069edf02d3151d067ac5d52a5c
MD5 997bd232fe207bfa35b18ceaa33b0141
SHA1 d20d6ed779d53dfdfe63a1907030abec45744e22
SHA512 426e784972bd9133216e8fbb115fa972da836650207a8b11acaafddcd1e596ba7ec56679a326d9328687322bb34305d6e3de264ca1d60007c97f567e09908fdc
SSDEEP 1536:qdsvXm8z7+Cnqncm4WlTtdKSzBd9M8eOBs8iMpI+LVzycA89SfIbHUvw:OsvXm8zaYqRptX79veOC8hpI+LVTT7
TLSH
T1F8837D86F36552F6F99FD1B886800793FB30BB950B50A36FF14882993F13B906E5C259
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_ctypes.pyd
Size 131KB
SHA256 69ccbfa336004742c18fba4a2d0d24aba5f5e1578983278137788166ea322a22
MD5 a882f7e6611934257cbd711b0e147883
SHA1 6248558adb46a93bfc654155995984f6c7f7c8d8
SHA512 1837968141a2d7217e29182bee77eebcdbf375c6bef7f9842df78997039bff1c9274b93ce8f663d90f882168d2e553d6000f1f30bccedbe0674eccc7337d50a5
SSDEEP 3072:2pDQ+mSmUaodD5Hxf/FSdr0Jrs1jd8lI+yPvJx:LNSmedHf/FSdr2rs1y2
TLSH
T123D37D0B776800AADAA78178C573AF47EBF1B453161047CF02A4C69A2F637966E3F705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_hashlib.pyd
Size 67KB
SHA256 1ca43d7db5e5b3d8066038ff452b09c1dd525022ad5c4447be94345705caadc8
MD5 4958544013378f0527289f1e33b67843
SHA1 c93646d4df815b268fa30e4029653b5a88e55a8e
SHA512 461b04aadfc580afd4c559aa39ccd9d7baf40ac790122852e86d1ca8cc17ad0bcfe0d9f3d7a5321d957f34a4280f2e9216b57b41e2b50411b774a428f0042ab8
SSDEEP 1536:TqXn1xAu1lEAXfXOfcV5TaPutFCAhI+vImycA89PfIkrEV/:01l1uAmfcyPutFCAhI+vIv7/
TLSH
T1BF637C95AA885092D96782B5C4A30F83F974F35217119BDFA2A8C08E2F233C39777756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_lzma.pyd
Size 155KB
SHA256 71387e8484088f8291664312d985f42454017e1f556bd4107e2d065f19a799ec
MD5 2ffd2deb31f6fc775c38fa5c418447d7
SHA1 6d2803366d4b636b0842b7aa72e2de266a3795f8
SHA512 cf9feb887381595b0a763ef4d4b7936bd7f9fd04b5399acc41652bf12e5b21e13c78260c73796c6cbd694e38afec0f09ef72bef11b8088f0ab6390b9266cc86f
SSDEEP 3072:LqZ/boPLmhrKifqGDRJUsAznfB9mNoYvm28fgS+pI+01zi5p:LeTgLhyvUsW5YOYCfd+UAp
TLSH
T1A1F35C86B794F0E5F7728C38D2624F57E6F5791A0320929E01CC936D2B1FB659A2E313
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_queue.pyd
Size 34KB
SHA256 f1be4ad7af2810ca957ce1bb6122ac821bb284633bdabc872e12e699f5067269
MD5 eae41f95f169385b3052c15fba878b91
SHA1 83be7f66c3ef40d267653af4631746b820f2027b
SHA512 0b14dcd469b700e1d5894dd7ddf43cc32a94e4b7f633e416f30be551d085d882505dd841e7b2005ab34d16596c512552e4b6eb62a7ca777db1850fe5c612f60f
SSDEEP 768:C+Mdm6rL7gVh6lI+9U9kxycTOJh2Ip48Txf1mlIJCl+V5+:8TL7gVIlI+9UiycA89wfIkCEV5+
TLSH
T1EEF27ECA6E684487D963D670C1A2EE91F435F7D3961187DF206992CE1E233C1E339359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_socket.pyd
Size 84KB
SHA256 6050e57e93872e3cd86daeca9594362ad256a9bbe00e0549fa5988a9b43c90e3
MD5 dd6662e9ba30e92aed000afea211bb4b
SHA1 3375c998e12d9cb604206628651611d41baa5597
SHA512 980034687ce3119e0e282ad81076076385842b32bfaa5a79c38b8780e46bd06ac0bd7cf58ff0050c43dacc90b0e481da069c2b449d2917cf878365b21c6d516f
SSDEEP 1536:+Fl/fFBFuJaBvTl5CgDyJw9QlyJ+9+nzX34KxtS4XSylI+ywaycA89jZfIk8EV8:+FR1uJmB9yJw9QlyJs+nzXIKxB5lI+y4
TLSH
T14B836B00A66041FAEB73D075C2639E62FB74F5C113A1A75F1066C65A1F33382BE7AA85
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_sqlite3.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_sqlite3.pyd
Size 126KB
SHA256 183d02f0ce2ad03f3f101682313cd3034f6039acd7e7025f618cc27a053ec609
MD5 33e3711581bfcbef2bb3632644a6ed26
SHA1 954defae217a84fa8c748673cd1cd1e1622b760b
SHA512 1fd9a53f3fe07efab726bba29c479c617d5050aaa0a9fb7ff35a30933c234c04e4f0b6dc362ae4b9ca65b57f5442e6f23d0f0e5c39e8a8e8cae9e2679397bc9b
SSDEEP 3072:2OTj5dN9F3IJM8C+7n560kMRW95GmxuphI+vQHTu9:JHF3IOrO5v495GmopE4
TLSH
T12AC35B2B631801AAF9A752B8C1734603EB75F562537143DF51A0C2492F377D3AE3AB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\_ssl.pyd
Size 177KB
SHA256 5f113a6b4cc933646ef69aa233da278bd311f7f04135a8ea6e1514944af3f851
MD5 38c014c3eaa0f00c6e0e7c1c6ae389ef
SHA1 26a73ba3460ce5aa3a9d40c481db7dad3a4a5c88
SHA512 1c72f8efe2652aa1ad4db8a46346cdbef57bfc97f092c4133429cb6ad0fabf61d22bd79385ac0ed04b16410b4df058fc349a0ab2c5aac4f1c6343e11097ac383
SSDEEP 3072:6ofR8NKUKIUlfV6CsLzsvyII7IM/cbPuC/JgpI+L7K2:6oZuKUNyV6Cs8vySy9
TLSH
T1FD048C47B5945AF7E813E4F9C2234903EBB4F145331247DE48D6D64A0F0374AAEAAB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\base_library.zip
Size 1.3MB
SHA256 9fee88055a2b74cdbbb9f4707304baaf133df9d65b7575e6e218c8e4cdcf3f5d
MD5 d92616e2eb1501087b940e75341a7416
SHA1 ccb2a92119ad4174916fa05d1e4bd6702a51b2a6
SHA512 8315df3abce3236e33c90a1c3094baae94cd619a09ad1d60f2d756af822b17b28dc7f5bfe890bcbb8db6b09997fce84da3ceff559f7671bc22ee8dc84f815b5d
SSDEEP 12288:wW7WpCbi0qhTHuywtoc6yi2cPPdxhY0vdjdT054L+D1tYzGN8TxJFUDqfd/QuIvy:Z7WpgqjY5cPPdxhYudZTSuTxlIlaV
TLSH
T1FD551992B9527953FF64F37B80B7484CF31E86A2EF00C207355E42661EFE6B09E59588
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\libcrypto-3.dll
Size 5.0MB
SHA256 e03dd02fdcfb791981c9962827cfcf495f2a47a514c1526efb57f847a9df514a
MD5 8e8f32ae40518478e44269cf22cf4399
SHA1 3bd9ea6294eebd45c867178bac0f4f77a49525a9
SHA512 d2d6bf1aac274fbbecafe2344242dd8edf9894c996d5e7c484cff828971287070de20abee1d2d706492063ffed64223020c9859df7596bd4d16c6d738efca6be
SSDEEP 98304:D03+0YMHT8tCl1r2qxPJ1W1CPwDvt3uFlDC1:DyPYMz8tK1r2qxR1W1CPwDvt3uFlDC
TLSH
T1BE367B6AA7A80149E4BAC13CC9534617D2B1F85A57B097CF18A196BD0F33FDA2B3D740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\libssl-3.dll
Size 776KB
SHA256 1e4bc0638682bfcbb36f4465d6a2e9944d917a60f05ecc8ddf9e96847e05e13f
MD5 f31ed8154564b75e48f2525a7e9f5742
SHA1 d2ff57bdca2030379da6d256892350ca85a0411f
SHA512 dc313916fce80ba99461dd758f424987344d5fdecc4ea28d01764440282b5bcde569eaf8a895fd966ee281aaad94d1b937f0e2164a45ddb18d3698e22b0f6ebb
SSDEEP 12288:gwgpFEKP7Mn162zCpbbICGxsQ7caA0V/jcrldFe9XbE:X6P7Mn16sCpbbI1iecoVGFe9Xb
TLSH
T16FF44CADB3B805DDD8B6C17986934623E3B6F4552330EBEF065186790F277D42B3A248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python313.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\python313.dll
Size 5.8MB
SHA256 e7119fc5892eab890d44f6df05f44d50cf8c390c35d152e589e0c35781ca8d05
MD5 cd97c71c844e73f7a16373986713c6e0
SHA1 d008edd8312a144a7931ea55ffee5a81a758433d
SHA512 02d694ad447003f154b431e2aafdd109a18708d4e9404f188783095c1d57a2fc550bc015019c90512ac107f157edf3895c1f64835355eef043c9ed2313d45aaf
SSDEEP 49152:uP8kZddDjowbHQXoPgpde7l0zCfrAsrFGeEsAtaonjutBPHy1RfqLg0bJsMI4Men:uTjNf1JUsrp75La9iWKvHHDMiExj8
TLSH
T1BA568C16729E51ACC9778078CA03864BFBB27C057FA0434B61E6BB5D2F733624A6E705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\select.pyd
Size 32KB
SHA256 0dc63cb35f1776d732cb3fbbbdd9e5912b29a98465d3927a8162e8475c0f6809
MD5 607b447ff1316dbc660e49f9b7c3641b
SHA1 08213476a928259a4c65d122f482c4e9d561d8f4
SHA512 d9a76715dbb55104a62a29aa44a26a63322e0e888c7502534175c5ed2b3aa9a1d608128a7319f72dbefb1f2a689926ceac79a3cf9d647cad529e6881855070b5
SSDEEP 768:epX5AHf8mHzPlI+9GSxycTOJh2Ip492Txf1mlIJcl+Vk:6X5A/8mHzPlI+9GaycA890fIkcEVk
TLSH
T1D3E26DCA6F745047E563C631C5D2DE82F939B3E34661869F31B981990E277C1A33A268
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\sqlite3.dll
Size 1.5MB
SHA256 f84cc494f7f1c816973334185384988b89300554cee6e952ba558a6dd47c7057
MD5 9b619cea3e121b9b786428bf54a230cc
SHA1 a0a584d720d5482f312e493ff540ba9e59f002d7
SHA512 93535dbea33a2f7e77eaef6a50d5276bb6c4295fc699158c343ec38021889169c694bd297d12e123f3fc5a0ecfbeeb62e913ed0d1067d321917211b85f340a71
SSDEEP 49152:hVc2uC/wThp5YNE9nhcf+V3wSOgiMT4Vyl7E6:5nIThp5YScQ3vJ
TLSH
T1AC759D4BF2B801ADD0A7C1B9851B1707EBB1B4051F64A7CF5594CA692F63FE217BA320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ucrtbase.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\ucrtbase.dll
Size 1.1MB
SHA256 ed570898508c9d9186052157106b6dd9722bed47a27ecfeb424386c8970d81da
MD5 28146c66076a266e93956111981cad4e
SHA1 44797bab4d3d3a8ccdb9df3a519cd3dbef838c31
SHA512 078c8d6595b0afcee215a44ef9caa82f990ef2bf5dadb8fd84d83ac89839abeee1f9ce250e80b77cbbdde5d13688ed345da1f4bf22958490e645c074d2453f85
SSDEEP 24576:QJG9DZM19A7ieC9dQ8dDtLV8+BaC6EOx/cEz5RmxvSZX0ypHNHU:z/qtvdhq+BaPHxxde
TLSH
T1B5359E28B75C02AAD97BE17DC923550AF973780047709ACB03A74BBA3E277E516B7311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\unicodedata.pyd
Size 695KB
SHA256 2b8c8d837e2968751a581e1c6e91447b0db672c2a1496362942df654afddc11d
MD5 3d6fef286bc7f64b6c64c9565be42107
SHA1 bf4d89da4c20aecb5fdd9143bfb8eb6814d3b255
SHA512 696f56911ba68e1b556fee6431fcc5e19ad7d676e50496157fa014f7bdf510a30b75fcf0a01b68c55cd335ff6c4ab95fde8c9ccd951f7152c0537c5324cb4780
SSDEEP 12288:lY1dLI/X77mvfldCKGihH32W3cnPSqrUgYmMGJ:lY1W7qNxr3cnPXY/GJ
TLSH
T11DE4F5D9BBCF9D26E68B363948E3710F5171C3735F0A863AB2182361D85B3B449D582E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MGL-Favicon.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\web\MGL-Favicon.png
Size 270KB
SHA256 c36b11adbc9f079105fa7852a11bef6e4c1d836ec43595380b672a0b468bfbf6
MD5 81214d28725fea43bcca47dabcb507e2
SHA1 435d9c49a8c30a0b9b5da0992a4834e4d194dceb
SHA512 5abcd2aac345837bbb0e0558153dde1b278bfba3b11157037b941cba97538d25ef4158ec20d33984d3a542855b6b60436be7739c4b918e7b95c769bdf6a1e5a4
SSDEEP 6144:FSc6gOkk40WoZHAYA94I0+KBcUK+AOayjiu1gJgo2YrN++uhEWnkvOb:FSdHkF0m9KkUNV1gatYr3Cpr
TLSH
T1AF4423EB1E7985BE40E9DFA7DD2E3F57B11FA24395F016B7CC00C651C90A8E1CA99805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MGL-NB.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\web\MGL-NB.png
Size 377KB
SHA256 d3dc5da51d0f2e22eca9752075da92379b4296d5e2d0292172691ab67aac7076
MD5 9a3405be093a1ff31beba25b5dd2b322
SHA1 a9ae1a7c9bc40ee66b6b08854ec82a9fd1bf2035
SHA512 c3359512d11c62208de84cd2eb1de6f94053e0212637f2008244711c8222db8facd07e79a1eba8174a3b1deeae7e545e1220691144995f35edeca0e8b1c8b5b2
SSDEEP 6144:cU4t8XADWPinJ17X5Rg3g0ZJlNxrWkVa1koJ6hYkP9wNnb/QULRqjYUk:cUEW417XUg07lNck4NJ6hYkl6QULRqji
TLSH
T128842346DB769751FF09C5410C0358AAFD93EAF1BFE152A0849ADD371AAC4BC241E0F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\web\app.js
Size 71KB
SHA256 8392e2fb88a923191ee5b4926934a2a17da302cc31eb953a022a2e0766c27500
MD5 860ff3fa3646255e0cd0770b0eb161c8
SHA1 23672438261a61da2fa6da5271f3a282bcb21eac
SHA512 bfbde339686c43469d5d1d8bab5e5f1b4b7ee9a3d016f2cae2baf6c6f08aa1a8c4d936b48ad4cd7e5fb09968bf6e9e447851f27e6783bd1c601915bbf2dd980e
SSDEEP 1536:NxpXv2jA4foVWMrjI9hGBkRKp2+pghIe+sJ0VEeV8qNKt2oxB7Wlp2kgwt8xk7Yj:d4fobfRnnYDMAcIRT
TLSH
T145631B5570F3183701B380EEA68BA6177A768507B649CC407B9C82D52FDAD74E0BBACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\web\index.html
Size 6KB
SHA256 1832a257c312798cd10ca8bbe273abd405445a2fb83b852f7412ad8aeb0f72fb
MD5 2cd6760abe9c9de153a04ddb94b8d0ff
SHA1 ee2e4f404e707863deeae31212e6e32d4a7c5bdc
SHA512 a60b2435de55a89a9ef3a3b5f39ed0e32aee997171ac7d48920e81f3b70914876e5b10b6cbd9cea3bdb793075984c216b63fc2054668be65ec776809d4e7355f
SSDEEP 96:9qnviXNmpCfqTT1NMAAiNFaW/9sQXD8KsnIh9LV40MApTMG59n0vTj+Z386L3vD:OxGeg7Ih00rhKvMvD
TLSH
T196C19356D0BC4EB343A340D5A483A71AF87AC207DB491414F6AC57E50FB3C79D6272A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

style.css

Path C:\Users\Admin\AppData\Local\Temp\_MEI30202\web\style.css
Size 21KB
SHA256 8ad53cf57df2828a447bca854c7a23a34682ae0456083d411fcac54944d9724b
MD5 bdffdeb2f26fff820d8423c58f818b9e
SHA1 cf14a3159533669d0e0b5d1f32f908aa946fa89b
SHA512 11b40ff8a0d269912629abdd4af1eb2432de9ca780a9ae07ea547487a2d4b47ad841586beacacf2ca92bb340b869bf416f118abb8941581b473d07922dc277f3
SSDEEP 384:7r3xdBKATSbIkjVO9ZWTpu2Boo46JpeUT6U/P8KdeFwVGjFxh:7r3xbKATSbI/rsZoo4bU2U/fdeF3jFxh
TLSH
T1F8A2C71333196225B017EAE47A83D7CEB329B346D105E77D6DEA2068C1CD278197ABCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2488_10227996\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download