452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b

Analysis

user interaction
yes
max time kernel
299s
max time network
287s
platform
windows11-21h2_x64
resource
win11-20260513-fr
resource tags

arch:x64arch:x86image:win11-20260513-frlocale:fr-fros:windows11-21h2-x64systemwindows
submitted
16/07/2026, 16:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/index.html
Size 27KB
Sample260716-tsa43sg14m
SHA256 452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b
MD5 14c405b7892f466f89d16bb5b3ec68ca
SHA1 d7ba5ce2b5efd4bedc78c3c78eec5274df5b6898
SHA512 6795fe8c7072adf44ef990a12f9a840421622b2c0836a3590a7905e135d42be922f9db1070e09c1fd2f82f1c5d2ee09b4526e27e2454b04923e84d52afa49b68
SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65nxq5xtoq
TLSH
T1D9C2D811DA36102CB237462AB5E2BA4E7024C117E6538A7FFA5C5635CBDB08B1E13BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 19 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1073862851\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1073862851\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\edge_tracking_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\shopping_fre.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\shopping_iframe_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1475130447\llm_user_input_extractor_config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_470382852\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_470382852\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\shopping.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1475130447\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1475130447\smart_switch_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\product_page.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1475130447\office_endpoints_list.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\auto_open_controller.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\edge_checkout_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\edge_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\shopping.html	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5732	msedge.exe
6100	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134286923594824966"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 6 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{61820712-DBB8-4DA6-A5FE-8F4597941245}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-226940941-599731907-2645636698-1000\{CBF8C9EA-5A99-421F-B788-053DB2EC7C23}	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4668	msedge.exe
4668	msedge.exe
5972	msedge.exe
5972	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 5116 wrote to memory of 3760	5116	msedge.exe	78
PID 5116 wrote to memory of 848	5116	msedge.exe	79
PID 5116 wrote to memory of 848	5116	msedge.exe	79
PID 5116 wrote to memory of 848	5116	msedge.exe	79
PID 5116 wrote to memory of 6100	5116	msedge.exe	80
PID 5116 wrote to memory of 2008	5116	msedge.exe	81
PID 5116 wrote to memory of 2008	5116	msedge.exe	81
PID 5116 wrote to memory of 4888	5116	msedge.exe	83
PID 5116 wrote to memory of 3584	5116	msedge.exe	84
PID 5116 wrote to memory of 4888	5116	msedge.exe	83
PID 5116 wrote to memory of 4888	5116	msedge.exe	83
PID 5116 wrote to memory of 3584	5116	msedge.exe	84
PID 5116 wrote to memory of 3584	5116	msedge.exe	84
PID 5116 wrote to memory of 4412	5116	msedge.exe	86
PID 5116 wrote to memory of 852	5116	msedge.exe	87
PID 5116 wrote to memory of 4412	5116	msedge.exe	86
PID 5116 wrote to memory of 852	5116	msedge.exe	87
PID 5116 wrote to memory of 1984	5116	msedge.exe	88
PID 5116 wrote to memory of 3872	5116	msedge.exe	90
PID 1984 wrote to memory of 4568	1984	msedge.exe	91
PID 5116 wrote to memory of 104	5116	msedge.exe	94
PID 5116 wrote to memory of 3516	5116	msedge.exe	95
PID 5116 wrote to memory of 5364	5116	msedge.exe	96
PID 5116 wrote to memory of 2388	5116	msedge.exe	97
PID 5116 wrote to memory of 2388	5116	msedge.exe	97
PID 5116 wrote to memory of 4668	5116	msedge.exe	99
PID 5116 wrote to memory of 5972	5116	msedge.exe	100
PID 5972 wrote to memory of 928	5972	msedge.exe	101
PID 5972 wrote to memory of 5732	5972	msedge.exe	102
PID 5972 wrote to memory of 6132	5972	msedge.exe	104
PID 5972 wrote to memory of 6132	5972	msedge.exe	104
PID 5972 wrote to memory of 4180	5972	msedge.exe	103
PID 5972 wrote to memory of 4180	5972	msedge.exe	103
PID 5972 wrote to memory of 4180	5972	msedge.exe	103
PID 5972 wrote to memory of 1784	5972	msedge.exe	108
PID 5972 wrote to memory of 4632	5972	msedge.exe	109
PID 5972 wrote to memory of 4632	5972	msedge.exe	109
PID 5972 wrote to memory of 988	5972	msedge.exe	110
PID 5972 wrote to memory of 988	5972	msedge.exe	110
PID 5972 wrote to memory of 1076	5972	msedge.exe	111
PID 5972 wrote to memory of 1076	5972	msedge.exe	111
PID 5972 wrote to memory of 1528	5972	msedge.exe	112
PID 5972 wrote to memory of 1528	5972	msedge.exe	112
PID 5972 wrote to memory of 4736	5972	msedge.exe	113
PID 5972 wrote to memory of 4736	5972	msedge.exe	113
PID 5972 wrote to memory of 5112	5972	msedge.exe	114
PID 5972 wrote to memory of 5112	5972	msedge.exe	114
PID 5972 wrote to memory of 2152	5972	msedge.exe	115
PID 5972 wrote to memory of 2152	5972	msedge.exe	115
PID 5972 wrote to memory of 4604	5972	msedge.exe	117
PID 5972 wrote to memory of 3960	5972	msedge.exe	118
PID 5972 wrote to memory of 4692	5972	msedge.exe	119
PID 5972 wrote to memory of 2036	5972	msedge.exe	122
PID 5972 wrote to memory of 2036	5972	msedge.exe	122
PID 5972 wrote to memory of 560	5972	msedge.exe	123
PID 5972 wrote to memory of 560	5972	msedge.exe	123
PID 5972 wrote to memory of 2908	5972	msedge.exe	124
PID 5972 wrote to memory of 2908	5972	msedge.exe	124
PID 5972 wrote to memory of 3524	5972	msedge.exe	125
PID 5972 wrote to memory of 3120	5972	msedge.exe	126
PID 5972 wrote to memory of 3120	5972	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff9e1b5c188,0x7ff9e1b5c194,0x7ff9e1b5c1a0
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1620,i,2224862143015113845,6450409718243814313,262144 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,2400211114400955141,9779321519637897532,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:11
  2⤵
  - System Time Discovery
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,11356477369430973133,10862007112163803413,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:13
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,9862517314779430341,12309139377127226494,2097152 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=fr --js-flags=--ms-user-locale=fr_FR --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,11632162893145458637,4351299474498032360,2097152 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=fr --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,17504131560260131790,2813661472175157122,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:14
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=fr --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,13343045110096224605,15039327941117342551,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,15260497220564036390,18299116810024807434,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1984
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,604791928798424051,18041829887597786179,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,604791928798424051,18041829887597786179,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,10800854696202664174,4450488642510560830,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
  2⤵
  PID:104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,17487621876199004765,16825480935374262905,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,4126845377095229171,3021106037541894483,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:5364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=fr --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5040,i,3669605293715004465,7193694574768737374,524288 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:14
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5288,i,12926890197279157159,13302277028134867242,262144 --field-trial-handle=1920,i,8663084583365083896,15803165967692017407,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff9e1b5c188,0x7ff9e1b5c194,0x7ff9e1b5c1a0
    3⤵
    PID:928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=fr --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,16016495767471136579,138356920723131641,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1616,i,5396926160460567639,18083965264769181758,262144 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:2
    3⤵
    PID:4180
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,6037180961825055336,837349954460647993,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:13
    3⤵
    PID:6132
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,7222527608120733908,9447261101691488716,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:14
    3⤵
    PID:5976
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=fr --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,7222527608120733908,9447261101691488716,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:14
    3⤵
    PID:1784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,6030967094519829564,17735525684198218189,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:14
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4632,i,9525751768868947764,14428447915383003852,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:14
    3⤵
    PID:988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4940,i,10800392829548874902,11761998782231440126,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:14
    3⤵
    PID:1076
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,6993278260052232648,17779583870557442316,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4640 /prefetch:14
    3⤵
    PID:1528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,10835869885679093108,3049282081861410153,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:14
    3⤵
    PID:4736
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,12453063663226473685,8892852388377072459,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:14
    3⤵
    PID:5112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=fr --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,6198203847810942949,12334126588687887810,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:14
    3⤵
    PID:2152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,2362948930116556214,4403813523869491135,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:14
    3⤵
    PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,2369865900969968280,10572495240864615978,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:14
    3⤵
    PID:3960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=fr --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,885926906191565118,17560609619676376313,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
    3⤵
    PID:4692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4620,i,17681628856685964632,2232467933661814974,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
    3⤵
    PID:2036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,14410355644332777519,5640641999405663033,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
    3⤵
    PID:560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,11552776214990283967,15133956619706707661,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
    3⤵
    PID:2908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5124,i,3294142540176266144,6899982799450591047,262144 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=fr --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,13750693272699609629,11061415893960947065,524288 --field-trial-handle=2116,i,11702821481465941693,1544920111831430922,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:14
    3⤵
    PID:3120

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6008

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
MD5 38623c06e100113cf825efa6a44b2386
SHA1 479d8e0c6d7d10c05203a37707a6249d2537a9ed
SHA512 452d7012b949688cabc6afbf4badfe9d02c090f30c06557f7f87b606cd716cda97771136964935eaa4d1668303889011f75ff599a79a6837c285ef84ebc2c8e7
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosfxWMk8xVZ4YWI30otWn
TLSH
T1CD257885B34494FFC8C35A7189BE27902774F6DE5F02836B6A377A0E2E271D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b070f86679d36dbf61dcdcc4936e821515aa871f315f446996bec6f21117a05a
MD5 aca6212a926561987b041275c8e5ebb4
SHA1 8082c41d21b2476e2fba320a54e3c5df351f190b
SHA512 514971e4547bcaf12b451b084a0f56c318a93895f3fa7d5ecde8a07c3f131a12d7f358aa6316b97a4432394f94d779bf4fa268d93c7b818d57174bd78ae73471
TLSH
T11AD09720372CA8D1C278103646308381AAB1204331038204A200880CEC7848012C2692
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 008172bc15d37fdba7a18da03c68ff318e50ba26fbbbf1b0ff2c7176b8b17838
MD5 b6e6bdf93712ba6ee8b8897fd26ac742
SHA1 f42169de7b0903b95d9718b1dd13a9e4197833b0
SHA512 35ce3c0d23cc6b798daa901b338bd705259ec1dc127cea48f7e99bd630a12b299d8ea693724fc53204104fd4498528491fed116fcefe46dcd413665356c55f1f
TLSH
T194D02374372C6C55C76674326621C3D37BF272417107C5519211850CAD744E017CE197
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 32303cc60a61c54695a10e22e5d4927afa9f3b317f38a1948b3d06b9908ad31c
MD5 fa1d2c7d03afb864bc0f0aeb5e1cf53a
SHA1 4193d63e49c8c734df72c75bc3bc68ccfb747550
SHA512 18e675c077e47d9f348de8d1e8289d3e14124bc45c1080067ad25b834aba4faa30eb3894a3408fff992d86eea6faa72110686428608635b48f56f06f7836bca8
TLSH
T12FD012273B0DA054E7A9C2729613C7921BB6646174434B05E315C95CA9B44E412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c17dc8315075bb661bddf6b1efa879b9a3c39af13982f986bd287f5bc861cbdf
MD5 9573474710d1de6302a0d98890d2faae
SHA1 618b9f2079a97625be399f6137e46655659ecff9
SHA512 a345b915a4191d30d0da665ea4f78297c0cd671a5767e05c415403efb649110868fb279d22dc496792452c325e19b00f5e579f6e014a4488c9a4d6fac83d1c46
TLSH
T118D012273B0DB054E7A9C2729613C7921BB6646174434B01E315C95C99B54D412D6183
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 29c072bfccd404e76482d2e8c4da5dbee070afb6271191c409d563dba0c003b2
MD5 27cb08bcd7f8f08fe9e2e5549922d794
SHA1 2fefadacd0c0f50306f737eded70bc4eac121622
SHA512 c6ba8b464e8267d4d15a62254dab9e356c6a2570f7e72bb4d39f5b662287fb6aa7fa1ef3d3b22a7bf9e26c9b4d6f99a98c911f575c9a89a0c34f95877cf18c5c
TLSH
T11AE02BBACC21AD3B19FD172860505786E74423976B82494F3B3CC5098FB163A464986C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 5e0328f2c77e980d7a4734550fdb7bc042b25238435239e63c046059176c6f8c
MD5 c6dae27cb66c8a79235457c7517d6c47
SHA1 573817b26e7dbc07df03364e66696684b373ae17
SHA512 2d02f2694f8deccb77aac799fb49e394ff78194944f3b8a94b327b7a5b29842b2d40c1d1d6238c7aca62a885d3326a77da0ff326ee8c6933a485c38a84601c49
SSDEEP 768:KOnwXAw1vh4h9htjWzWIUtVKNxUsZTtV4N:KOaC7WgtVKIs3
TLSH
T13B13817EB2054D66EAD6C1FC4AAF3A71233DF869E2E55307F7B13452273674A592E000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 86c24fcd6d3e7d33fa5ed7b070950b83ac9b02b6204939d4009b358a08e81c6e
MD5 864f68724c93cb0a5683a47ecfdcd8bc
SHA1 bab0cb2fbadda89601db99c561615faadf208811
SHA512 2c01c975fc4c82d28030297ca5a0f0f476fef8b94a530f84bc4d9a6663d7fbf626715419ab98d2062272d88330b42c76c634a37bb74f2df239832ba3876bbd4d
SSDEEP 3072:31JV5bGVIDJP5L/pL/N421L/dL/Z9tQE0L0:31JV5bGVIDJP5L/pL/N4kL/dL/y4
TLSH
T150446FF71951A01BCBA842F5E2033E3DD17B055D2DE1E8E9E67C0CD52835B22B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 34726ff44a0d3b12850e6645d683b68f138be30c1d926076dae465a956310010
MD5 d43a331b5f5bd9ab67fb9eb40aa846f4
SHA1 f1921ff3295592aacc67ec137de1e673e4d869b7
SHA512 e8bc5444260a22fb0872d24eaaad0232169be1e1decdf4bf706096138bd208eacf4cfe787b7cacd8a1fc72bd1913488c000dbb8e5bd4cae1c3630e6c664a6819
SSDEEP 3072:m/fCU5mR3uRH+HpCIbs5hnTNbRnc4KlWan4rZ60o:m3x5LRH6CdnTbc4KlYZ
TLSH
T17C2529EECB682C82CE6B8770B4E0D9077E712183B68DC0D39944C5D997D6B8175E82BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 4d1c878922862030b533192a82fd5e7c75dd19c8aef24d2d2076fdac218fd253
MD5 28ae59c6c236a7fe149fb4fd0cad4fb2
SHA1 3ed3a918aec01afcb4ef44e11636ce045dae0c41
SHA512 0db05594ad2b29cd34cec6096b37b749c7e6520300037761d568c7c9d68144aa5b32e279d066cb7ae53c956bbb94c5d1b5f358ec4c2be7bb632cab54516e3c34
SSDEEP 24576:uPeOpE8ol4YdCuxII+zaSLANUes8KJZxoOKiKCCiJU+VXxG207N:umeYdCu9mFAiesDZxoOKi7Ci/TQ7
TLSH
T1A8866DEDCA6898C3CD639970B0F0ED477C7413C3F995C1D68898C684026B7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 21bb16db74aed26f60b96df3c7de6ebe8fb03be76ddae7e392e6d926d72b19c9
MD5 fc09702c2c45f1d102b4b298452f596d
SHA1 d3ce51a4a1fb255eb19c63d80558f4d2d9811ab3
SHA512 d08c7f5acb9bbad657a47b77f632e0d120d403073e593ff5a74bbbc5c365b046214e5b6b5230a17448dfd2756e284dde4ee14839a01b73b2ead9ea8bbfcd097e
TLSH
T1EA71621531BAC4EAE36C0171E0C1700130B775EB16635E4BC6B499BC6930B31D75E65B
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 37c44b8e66bdb4e5156f4929e69a5d0eaf30d45f5078d964a53bcd67df027581
MD5 2b43a4d541bfe17b0ed0190c6ec21ad0
SHA1 1418e1da07606d16360394f54010c7e4e9f4be48
SHA512 2135ed78d298ac67788be85c5e79fef74d0ff3303e2e9facc98b299ccca5cf75c5ba265cfc1b01672a18aea0b447c12156ff8fa106290d2f93b1f2ba331e64ae
SSDEEP 3:MsEllllkEthXllkl2zExllR/:/M/xT02zo
TLSH
T13C440405FFC40415C5141030C013C3503370D4140713DF43347715177CC555C0C01440
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 c8a625e41ed5d92d47727799699c6a22ee8bb0be769fcc992e97bca25fa8558f
MD5 a4df4986f0f80e7769b2b8f52db9704e
SHA1 5046b50d04ee187d6fdeac8f9eb8413ecc4d9ebf
SHA512 26931eef98ebb477415afc01416bad85ec9c641388fe56acf218d67817667c3218debafd3d61b1aa2ec8b06fa8d3fb9b7a6f08b4c285745feab57d1518ea9223
TLSH
T1A9E0D8B555C6CA1D669834C36134A74D81C134C2E6C56E03170488C47B47401B765A5B
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 091243813f628d6f141ddf86c3e54093d207b4fca2cff844f4c02d35eee45394
MD5 8e3db67b9a47905394029450ea8faf5b
SHA1 273a8f45057990102d47161d0f37536e92a66091
SHA512 e6d49f7afe75cae389262a41bf73068922f06ba82f142e99292d6c6e40214dda4b85ca568c1c07db2c33397a30c3769e1f26c5366e8ac8573c534f885dffc1f1
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+jFdRabRraPK5fKFtIqqYpS:Tyi+7f+UZD4jJ/Bl6rqCKFOqTpS
TLSH
T1CAE2024D3B11F512C8ED733EA0C2C6E19EBC693C865D707192385873CC52A61F49E10E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 e373b5e131783d0bac1b700ce1d9212a6cf9cbd77aae022470f8882b9b40b621
MD5 a12507f5d8a3f6f43e9d3234a339da3d
SHA1 e038f7c42b29ea7f917c13e448d667e6c9f33e81
SHA512 e792496cad3ad73cfcad5bc5fb5a2c6343d0fd40767e93eb932b0aef2840f17a9986f74138480f7dffa750cc1fd7318575344304303d6555a3a581ddb4ed2501
TLSH
T158E0260405C8CA69F0A8A8D7827E6B0CD2D234CAF2C83E63174AAC847202341A387785
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 413c37ead4edaf03aa96ae5921f3d200023a1b9d51e7d58e865f38d7fed3331a
MD5 7175a91ca978c773b26842b2884d945e
SHA1 ee6db76711391d316a4e337917df7a2b80076912
SHA512 c97bf322c894010f3698f5e3c3537ebb75afe47f51b0455e106a1ac4e78eb921d51d20c74a2cd22dd51a31f5e91fa6093c62c0ffdbcba9922faf13772ce5d908
SSDEEP 192:dIMqU0+G83uxXBBK31GkSJ7ieEJH7DNspUM:dZa83uFBBQ1GkSM7DNspUM
TLSH
T12114630F5F312312CD6C403669E784A75DADF43F8B5266DAB8641461CEE3B52A06C8FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 152B
SHA256 fbcbaf8740cb027ff6a147c013b6745071cf2a1fde4450ab2a7a04fbc401f0c9
MD5 5649e96dcac327dde1b450b1c06a27d3
SHA1 7aa5f9fb94f95f5977ae9bfa7a4957724fd66f19
SHA512 0bf8d7e6582330d8c362c85ee0688f2a38d3768ecd6ddb9277effaa718b2b6c7fd82f665ceccefd164c2921fe4eb30c43dfb7a3ab3a8fa4496e5b8f3f8df10c3
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 10652b06e4c16e337a9a7c044823cad999ef30ad0891046b1bfe057d3ec1cce6
MD5 935cdb4975c739d8192a367452fcad30
SHA1 1fc1a03e9a3895d20db47697144ec45a57dd68fb
SHA512 a0ae5d56ee6ab94eaa7fee22684fc44efdb4d56fe4b0e274eff4369b654ef04842ad0bfce1a51b3eeb3af591bd8235e6a174d546dfba079c7cf48788c07b9ead
TLSH
T1D8E020A045CDC51D758C30475275771DD3F0348AF6897F175B09EDC5F106404A3813C1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 cdc2fbedb2341e340700afc78403047066a8065ed82b643c429c0ab465a020e5
MD5 c4f4ad992396817a8ae9f616229a95ae
SHA1 97f4ffb35d071afda51684c99b4e67b15b71c287
SHA512 9970f9d5d34dcd8ae9ad861a85205b29bfa80b480bf606c00fc5b45aa1c99752946f83ff8edfc8c1276ace407dd5cee42aa9ff6e25ee7c425bd3358ce1fdf536
SSDEEP 24:TL68LbXYFpFNYbatqn1kweka6za6UwpQ9YH8PATZ6HfB:T2SLopFMatSaw/auUOt8B
TLSH
T1A8928C4E5F346220C0F04B76EDD185672F7C211CD3A72A99DE5410F3DE925ABF1055AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c14b83078bd135b1bcfa9865e600654db675d80b290cd238cc527d047fe1e61d
MD5 a5038cea82a137332d5ac5c9b1b32226
SHA1 c84e96be69815735828a767f9f85ea321bd083e3
SHA512 8fb86e9dd4f4b0ebcbf864e688f9176b19b5a5cf799200f09158b75d1473eee1c91267dfe691592fff40709fbd2e462dc83fc3e725ed4918c81efddfbdf27f81
TLSH
T11341C6F743B4856E8A0196F0AA18BE2FCE1D0511432C7D9589F4AF2793F3471E04165F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2c09f88e57ae9c1c11ffd3c774fc44a56e2550006c417d164cf36b11cc4a389b
MD5 caae53f74da73eae2958cfd0f12742e7
SHA1 14dc21f0a16f4aa910b2dd0dcedd67c1b95bf05b
SHA512 2761b332f753c46b850c97f1371143c239e6de32800aca25b615c10fe10a9f37c3070d984033e93cdcecc1d70b459bfacfc329f22e800a0c0d8420dd3b351e41
TLSH
T14141A0F7C3E8866E890155F0AA187E2BCE1D0515532C3D9AC9E4AF2B93E2471E14155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c38329d28aedc7da9722ba64a5d73fe06e5a6817db007555a747d6bcfb8b6ca0
MD5 379fb4791e6bc6d8c594808bbd0f38c0
SHA1 379ed307d0fcf9ab76f5d760aa33740098a80044
SHA512 e6c662115a54ef6895605c3af94925e8b5f21363fcff8258725f1bc9f0e239acc1c4c057ded384695f6b3b015b15196d129d2437156414b30a8eb9fc9bd587bc
TLSH
T18741C6F743B4856E8A0196F0AA18BE2FCE1D0511432C7D9589F4AF2793F3471E04165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 187B
SHA256 d064eb3c0c3a2e36b0f9bf9cd11e1212549346eafbb4c05329c31ceec9094adb
MD5 7ea89f35e02d62d43a3d65dad298125a
SHA1 8755c9c7fee1b75b1dcef852470fd615bc11df70
SHA512 0b4d94716b1e93dc67ebb398557f8196c123084395d09ddb063236b322e4321b8242e3df83c65770383a9f989748b827a190f09566a2baac33eba97e5530b033
TLSH
T14CC080EB41F5B477507C577B1C447C516B75A13135705CD8D942447CB0C15E71D15431
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1d634345d16f9e2741e1491862e3fbdde44d3c744c8851642b991b5f66757953
MD5 8aea1d1ada9ee7910332bf8c4d492ee8
SHA1 f32c06b837db9727786d2db6f5bffb88e950f81c
SHA512 b5b7ac3c8592a13e648432417b108e4bcb6cb8099c1bcec03651d832800ebe4d6e545866636d3cea7388a0e9bad0db74d91b5f3fa46ff4f84b1b63c9d881c8fe
SSDEEP 192:sxZYRJyHoNKOMl8UQytl/fpssWpVw1/KTG5wfzodpEi/W6+WNGY0FiD+FIgbr+FJ:sxZYOqUl/fpssWvw1/UUf/bG5fv+v
TLSH
T19E72E8166A344D7BDCDBD219F695BF53E6F9152391914E44AAFCCA0C00E76EC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5e6b0bf57b17138b8b10cfcba9d13fecc101efe8e5bfa213f2f886e3a82e074f
MD5 f5d226d4a032601d5e3499cede02b8f4
SHA1 fefa36779fad736bffb4b39cfa9735df2ef9f1e7
SHA512 e0e4d9d944a769b8d45ccbb32e7b5e5836ba301bce12c2d9860b15082e698f7a6b65d02ddc4da93c520ac48e4167cb8dd84c57944fa943f4e51bc80debf2e77d
SSDEEP 192:sxZYRJyHoNKOMl8MFl/fpsM1XKTGwwfzodpEi/W6+WNGY0hfxEPIgj+FJ:sxZYOdl/fpsM1XUdf/bG5Mj+v
TLSH
T13562D8066A345D7B8CDBD219F655BF53E6F91533A1914E44AAFCCB0C04E66EC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0b86cd3b4a430652864f6c2521ceaa83aa6751975494d1251dabea7cebc583d7
MD5 4f28c31e195d3fe242544658bb639bb3
SHA1 06ced7065bed79e8c60c5e5b8bc9ce83990daf77
SHA512 0dba787db02615e72c2e0bfa6636541a8224909898082121b54a4a7cf987fc25e452310c9f01d99b75eb41db6bb8a25f5278feaef74c43d6022fc6da0728db66
SSDEEP 192:sxZYRJyHoNKOMl8UQeFl/fpsS1/KTGwwfzodpEi/W6+WNGY0hex3PIg5r+FJ:sxZYOqMl/fpsS1/Udf/bG5wt+v
TLSH
T1D262D8166A345D7BCCDBD219F595BF93E6F91533A1504E44AAFCCA0C04E66EC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 31KB
SHA256 bb38d2843fac1676545fd1dbf46602eafc3617f0c3745aa49a1031db89ab22d5
MD5 c258ab0ffae4e902108528daa451bbb7
SHA1 94e44101cf4854bc8266cb0bf62310392e8e9398
SHA512 3ec692d2f7ea16ccdd85ca60febe9a9af8d14ee54e97dc94bcb3cae8992bb419a44865ee591a8d960ffbbb2f42a725ba3cb82349855708e5bfdcf7a2377fc549
SSDEEP 768:wQAKq8y028bWRmj1QWT8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3L4Ll/f10EMEroSO:wQAKq8y028bWRmj1QWTu1jaKL4LpfiEC
TLSH
T1FFE21B3B284CCB7E4FC44E9CED276E8769D802CBA7588D5447FA494C03CA3EE511A59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 df83dca28ba4e5d60df9de3ed29bd1b618b9959578e905c3a9c230f132ef2e35
MD5 6510f186faae803b5525c8e222b9ab70
SHA1 e3558801523a1ee5c4f6513ef3242e1b1d0d44bd
SHA512 414f8f0cbd255c3cb14a1545eb8b87372f22e0e7ce2ff9793b2b624465dd5ce4e9dbc3e8732cee7616d58f1a8575ba289532854004cb5aeeb444e9b4bfb1966f
TLSH
T1D7E086500AC9C97D719923434679930CA2F8BCEBEAD87F132F89ED546687644F3922C1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 281017f55dc5ac7c1ca58582227a7e94655d1ee9370bfda7855dc5747388a81b
MD5 2400a9e7ed48a6ba010448209879f8ee
SHA1 730b1813aa0014864444f7322e113e411b192d28
SHA512 3611ca44c84abb2d94f0ba71b2b04f8b6df604c27fcabbaf3041b1bb5a4c8d70d614301fff6471c75f89f0576418415b3ac6b3be7492fd043e259096abb9419f
TLSH
T1ACE0D86066CDCA6A71CD20CB8235F30DD1F374A6E6C82A222B09A448634B2407743340
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 47c4e008d929ceead2bfeb2ba04880e74f124e62c1d9fa089327db9d7b78bcff
MD5 bd55064ae4810e0496ccdb49ff4e7588
SHA1 c0a25f3f7a1cabc975e29b333d4f8c56300355ef
SHA512 d44885652de59e96f735f56fe4fd1b63468dcc158b8cdff41fd838a7b89e04136407f3541523aacbc061ac6b6906a07078a36d150af2da3aefcfa19ef6c43720
TLSH
T1EAE020B056C4CB7974C4E08B8278AF0D92F1B99EE3C43B535708584862432007367281
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 29KB
SHA256 b9633cbd368c94155574b24de65ec12883e95f457a24e35030ecdcdd128a35a4
MD5 56b3357c7416aaf33dd1e676894f69b8
SHA1 4f9690a78549aa9f78c05064a50726b4af6320fb
SHA512 e78ac632f91b51da4d6de5c467add6cdb54fb56c7a577ce022a0394e0a7de58be1888e4337acd8f31f4699843a8992b915b79cf167f2c2a1da861e9b072b95a7
SSDEEP 192:GD9R5VJhn/iVJnZFGVApBPisTE/3oNloNPSF53pVWFQ5xfSsD0PnY9JFlPtv0F5s:GZLVDJjEDPV0/HL/72/+l0t
TLSH
T154D28A1232BB12023C7D790C92A59B674682B1B33059EC7B7BA900B65F6BE115DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 25KB
SHA256 3dc875aad3512adc1893125b6ca21fed7ff4614f7265eb6504d130e4cbddd59d
MD5 7efce8f51defbb4882f0ee1b538c48b6
SHA1 ca9997320a33bbe2858df13d31c53d66d2e42a71
SHA512 6faf24f3525fd74327ddb4bd2a458c79eb8dc1ee51e2958e092afca27dfd0f48e19806244b28ab722328db4ad168e3091087e2963c0640ea842e1145e4ad2987
SSDEEP 192:GD9R5VJhn/iVJnZFGVApBPisTE/3oNloNPSF53pVWFQ5xfSsD0PnY9JFlPtv0F57:GZLVDJjEDPV0/HL/72/e
TLSH
T1E6B2591236FA12023C7E790C929697275A82F1A33059EC7B7BA900B64F67E115DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 13a7d7da6dddd72588d7dd7e1bf60d40c70e7bc8746a4a8ed6677406b7a7a504
MD5 8b1313a0e62c73fa1e7beb25b09b7a17
SHA1 1a2cc2b7afeb7c3b726592ae5629d711510bff8e
SHA512 442ada6ef4a0a05c9407ff14a90bd44b260a284b966fbc0962ce8037c4bf5f3b23dd623f689d83ec02731df76afd3ee5ada681cb2eaa8e8d16d13a35ff9e8b87
SSDEEP 192:FvoOn8neec8fT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:aLjfQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T18924620A7B747001DDA7D9725CB080771A3CB16ECF22A6916DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 ef1d72419bc7f7d1bbb637249737217aada004906c14fb7306098c292bc6d8ef
MD5 d6c22026be7fe041442cd815588373ce
SHA1 195000aa5a02ea5d476320ff47b1ed8c07f82619
SHA512 5445993b5ed91b883aa5db551c5dadfa4afc4c26715bbb307c8a766fd5ae34a01f78ecf7fa13f38652c1042f993111f7613ce74fef1ce9956267384570daf19f
TLSH
T18A51A5C093E964857FC9A981C21E5A13A4E17EA7260E5C72336E54F86F4CC250FAFE35
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 55664bfa810a83c4a953db1df5722437389cb072c565c46bd795d75998fb25b8
MD5 0e21fcab8f76e3cd77502f6d059be5ae
SHA1 f5a187c2fb4a5ac4c310cc6bc307c2dc8c9a2f80
SHA512 152f89c14e125ade649948eef3378cece83e25973b2edd55bd043b272ae92e057bfacfabd636be7afe90e0284484c49273de403c10a8abf8dbde24b08fe1113b
SSDEEP 192:6+y5Oq5AsylrQEus0tL0BDO2Q9x1IIIUbUMIMO/YcY:62qasIgs0yO2Q9x1IIIUbUMIMqB
TLSH
T1C052702A3A051B7BD94F5FB713694B904FC899810273222D71221C4F8DF3A6B86C52FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 4a134058f3ce81be0c0ada1d990394256d4875fcccdb6b8c7e58c68e62cee2f9
MD5 26b8e2b63a8addc6783d91c9e83aa893
SHA1 beb36a0ed678ae1ebe902255816b487c12be83e8
SHA512 cafd8d7aa668867729672748fb738e2320b8b0649dcdf43cbd22c19ed5b82fe00edfd4a3fcf49df866220851d6fca3c9faefb86adf8d34adc6ed47cc7cb989bb
TLSH
T1D4E02694EAC8CAAEB09C20C70176630EE2A638E7FA982A071F01D84CB207100B786381
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 3b343b9b0cc157c57902ba933f61cc99b23e647afdcc603a784549c671aedd23
MD5 1fcc01f2d5d2c344995c9eeeb20ba01d
SHA1 4636cdf62d40fa414f943c6f5d1062cdaa9427d6
SHA512 9fafe4142257301888a21ef9ec34f2d70cec34500c49df50c05e4f4600c09bd904b1df151dda037219dcba8b3599669565d31693e8a59833793774e00fde66cc
TLSH
T1F8215E56F320C148E58E867D642B9B7A1768E8069FBCEC5F50B970252E71F001E8B7E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 340B
SHA256 604cb09d5d120ed74abf05b35501524e5e7b2f7b0f50fafd7833f51d246bdc03
MD5 df392e58584e4e1cac3295cc1a517aae
SHA1 8de55c85bfba402ded4b2a22c21254eaaeab00e6
SHA512 3fbc2c94717f981c173284c0913a4d9b4f6684902da87e43a08604b25b905225fa49df6a9c689523c74aac21bb04c5ea5ef44ee24e82e43ef18b36bfe3d7fd87
TLSH
T125E020D465C4C6DF70956187017A9B4D929238DFFA942F531F01CD4872061417347242
MD5 SHA1 SHA512 TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.17\data.txt
Size 149KB
SHA256 fac5ec341b2f4b9c98a8bd7ec852589ee81e4938812666568752f36ae4f115ab
MD5 37f7815ef32ef7a6d94bf74fff24d177
SHA1 7f89ad80f67aad3ff68cbb27b15bc2ec7abe1bee
SHA512 843a7845f7c020a7d111b8dffd1482625fab9eb15afabff99e2cada1533d1a90c33807c208e536b4062cd4356ca9b19ca648f98b8c708d840d5d52378af13e03
SSDEEP 3072:SPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYEhRUnf3WzARDcgGfQUX:+X1aI5aZoKzMJ07Nh6n/vDcgMQ+
TLSH
T1CFE3F1148DC44FDDDEA8291C90FD0F2D23A0C6AD857BA5CAE323BD49BFA79045727185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
Size 9KB
SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
MD5 30719122f9edf4e23019a3b74e4f4325
SHA1 6707d64052797b9c5f1a5ccf016e5859c8ef898b
SHA512 ec2e1a33fcd1301f282512ffafb611ea705dc5df09d9aee014276909c1b62b0c73600121d94e9b6d9e160296672b41f2cb8c3ba23f121244ad2ea6521680723c
SSDEEP 96:DdQ/JJvwjyUsrdfsysVsnQfbJNZidYusysXYs2sFsdv12XvlRT07s/DkhcrHPglW:D7d7mfgiIWRcV4sobxezQd1Y
TLSH
T11512BB3BC4B49F229AB060659705E244F13C43BF5600C6FF76B9829C1F366ECA58E1E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 973a9db4f602db8f32acb65ccd472d43a67f09633262eed8e1f9cea2beaf874c
MD5 0c9c757dba18c8e6c498b7b41d414bfb
SHA1 b933afa8a0153b0a0fbccef2f335e958f1cc1ffa
SHA512 a5aa0c4241eac267fa1d20ea6d04635db8c5e996373425a51abc6c7f000683ceb133ac82f189e618a5b82fb56b7aa3b3f9083d5507c08d004fe06da63ae53cef
SSDEEP 3:MsEllllkEthXllkl2zE3ljRl//:/M/xT02ziX
TLSH
T1A14402196B800519C60110708051C36033A0D41009119B5724630C1A5C859800C44000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 ec46579e0eebb52a3d506dee3c3a73360819cf8a70d686d9b08ba8766b8727f4
MD5 43efac70e21c2c59d74add12f5bba1ee
SHA1 9e71a5698b7ec1b93179c1218cf9b45c6d2025d0
SHA512 8ba452e22cf65d7c948ad06388c236c141023c44fce308a6cb104dcc54dc1bb88555848d44a600cc510bf91ffd322e3488ea27d6cbc9f4fad8d0f7c1b547a1fd
SSDEEP 768:ZFEj+9hMwglKekmGIxGXvh07zn9eW29MVW:r9hGkzvh0fkW2+VW
TLSH
T138F23A3DDC548D7F98EE6F89A70E29269EE40137C5B84898E7D94F4D80B609CF303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 623003d90c64e7d6bd0655f9dcb0421cdfd569393ffb33f80ffccfde3dec4189
MD5 aa489e2d75c3721d861b6cbfb7059a95
SHA1 6273437bb509109855e4a1cd1dc2ef0b4614b9a2
SHA512 4fcae01ac388478c0d4682fb46ada83b45aba08feacd7d03bc70a30dce4caa285e99f4c69359f8102ca0fc0bc95654f22c18fddb8eeb771f65ffaaa3d648df08
SSDEEP 768:9FEj+9hzwglKekmgIxGXvhLB419om9MVX:P9hNkZvhLeYm+VX
TLSH
T1BAE2493AEC54CDBBDDEA0F85A70E7A16EEE00177C5A859D8D7D84E0C40A719D930781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 2c9ab7e9ce1855f145817a10095c362da834f2f6630df29f3659d0d11feb055d
MD5 7f6e57d8b80efac675092d46768dfe25
SHA1 428478dddd863ca28fc6687c95c89d7b45891e29
SHA512 d95d58f9abcda101a8c9c582144da941ef185425b79d077d57f03affebd6fc5b0385ad078eac9cfb369847a20caab5660eb252690f638bb2db5d587a2435f0b8
SSDEEP 384:nCiF1tNn/s3n9SE38NLa8TUNTUlIRLPm3ek32nn9eMt4zpfbLGXvFP9qH/OObjIT:JF1j+9l3QawglKekmHIxGXvh0H/29MVW
TLSH
T1FDD25A36E854CEA7EDE74ED5B70A3617EEE00163858C5AD8D5DD6D0D00DB0ED430B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 d626cea0d6d6161e48e3ccc93e3138cb7c70812c15eebeb52a7e1a738718dde6
MD5 cf5dc0a7d655b480926853b4bae4d0b0
SHA1 7c529e7fb1ac9e9b288514311fd665c18b8f8162
SHA512 cd26a33f425e2296d197d2c4ac064e1012887aa78589f49a309083a5b933d2ca772b1f4f6353c45cde90747fd7c4f9bde04a41c15b2c4d5ad8bcf21505bc332a
SSDEEP 384:nbiF9CcmyWCs38Nna8TUNTUlIxBPm3ek32nn9Wr+4zpfbLGXvFP9qv/e4KV8p0re:2Fccps3AawgPKekmMrxGXvh0v/I8p06
TLSH
T1C6C25B32E894C9BBECE70FD9B60A7503DEE05263968C9AE4DADC5D0D009B0DD534B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7c006f02da1d2778c557c550dbbecc6416079de592b3e78e1c468fdd687a7758
MD5 4eb48a0ac4fc3b17a02587dadb056af3
SHA1 5899c0a70e62a6ac58b110e8976bc6c338b246d9
SHA512 66ca21864c0b23e7c401d118b724c067afd15b3f8bebf690722f75b87a975a337dd7c38d987bcf4ff338ac741086553b891cda54ad1fc212ec6fe3a29ce4c41d
SSDEEP 384:niiF1tNn/s3n9SE38NLa8TUNTUlIRLPm3ek32nn9dMt4zpfbLGXvFP9qH/OObjIT:pF1j+9l3QawglKekmwIxGXvh0H/29MVW
TLSH
T1AED25B36E854CEABEDE74ED5B74A3617EEE00163858C5AD8D6DD6D0D00DB0ED430B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 3106e8766a503b998d7ce4821321cd144a04293f83b2ce2d5acd8f6d4ef1bccc
MD5 790e187c20e71bbac05c66b3068f9239
SHA1 2da50f4855852e0c3b35f10e4a13ca5cffa3db87
SHA512 f13e24b18381d1d5aa2c861002797f74f26e8a47a146cb0e87c5348cc4bddba4ef9737c4104b0017b8d88717244e80a03122d428d65159f407e1c1d67a4dc5e5
SSDEEP 384:nSiF1tNn/s3n9Sg38NLa8TUNTUlIRLPm3ek32nn9dMt4zpfbLGXvFP9q7/OObjIT:ZF1j+9P3QawglKekmwIxGXvh07/29MVW
TLSH
T131D25B36E854CEA7EDE74ED5B74A3617EEE00163858C5AD8E6DD6E4D00DB0DC830B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 2970282ae16b915c2e77ab69337d51e0cbf31be60803483f02d8f34f105dbec7
MD5 91469cdc0d77d7db1802828bfc7232ce
SHA1 b4b260c040b0d3d3586f5d04db8547dfbd325a97
SHA512 e88009ad6a0909b81822020eb8d4ef5514a7bdbfb256f11dfdf9c3d78d27667bcc266993bd855a2f7ad0ce9f357caf70bb7a35731edee7e27398644977919304
SSDEEP 768:ZFEj+9hMwglKekm/IxGXvh07zn9eW29MVW:r9hGk0vh0fkW2+VW
TLSH
T16BF24A3DDC548DBF98EE6F89A70E29269EE40237C5B84898E7D54F4D80B609CF303816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 eb6c176d6a9811e237d4d780d911d095b85ed616f3d0fec9ecb1b30a0828f1de
MD5 03988fdc53ac13ed07dcd4130b1eb9a9
SHA1 447bfe9859e350034f83d9bc6ecd3a9c95b09b0f
SHA512 97612b5b818948a09875c2db2f185452da1ba4a4fa90a82d0024b0b2f335a38c31c4cbc04f22fbf6620b4af97ee1d7084daff20a258c0393e89f2fc834f0539f
SSDEEP 384:nLiF9CcmyWCs38Nnc8TUNTUlIxBPm3ek32nn9BgZs4zpfbLGXvFPK7e4KV8p0rhE:mFccps3AcwgPKekmIZBxGXvhK7I8p06
TLSH
T199C26B31EC68C9BBECEB0FD9B70A7607DEE05263959C99E8DAD81D0D009719D134B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 bbb54a1653ac40945cd737d877c2748a7123edbfa14000e4c8ca461c15e62134
MD5 7f27163e39baa7befda7e8394ef5f643
SHA1 bcc0f831af0dab0851c6f1ca616ccaf1b1ae3e24
SHA512 05fa272b8c37e9f87cbb393c20058c0d2638a512f2936ec8449accec9e8f79f37c7d98048ddfe5c5c68f5066cc0812add94a620678d22001b492cd4229d5eb9c
SSDEEP 3:MsEllllkEthXllkl2zE3lJOll/:/M/xT02zhX
TLSH
T1F54402156B800419D50050308051C3603360E4100512DB4724A3481A5C859C00C14000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.7.11.1\typosquatting_list.pb
Size 713KB
SHA256 7c99eba9e3fae4c14308b5d58902e5edd6e11f864ded930c70e625756c916b37
MD5 d5d6de318daa53b466cbd23c49350d5a
SHA1 4cbf25e540962c61b87a9bb26382522e238d1a31
SHA512 9aa19bfc6101cbebc7346d609488b825937c334af3759c994a8f9883787960a360a75183891bf54ceb27421ac85e65c539b2892701e382e49f7e158d3fba65fe
SSDEEP 6144:yDBMg6Kh+9j66p13jbh3dJdTjOIsoAq3o2CZxSQk+PNLemXT1+A8hrI:UBMg6Kh+F66pvNCIBn3o5f9T1+A8hrI
TLSH
T13DF4C6B9DFC00194DB78112D20BE71D8181412A580E9DFEAFE7C855F2BC2AC977E85E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 81d9b31c6391a4766ecfbcc7bf53d6cc79aa7010a592105d171c6c17d2e6ce33
MD5 ba4f11519d92dee050a409313463a1b3
SHA1 85b1573c5d3d01eb9e894d1e693c286468a0de4a
SHA512 77a10617564867b21cc87b973b95f5327b16c46452eda6c7dfb3e93f3d7fcf58321f8de4ca2f2f3821843e66300053f7a33bd1125b457f6b1592583db0fcab85
TLSH
T1775151D04C7C1AD1D0BD0E7FB49B38FC85E8D725F5A0347D6898EA880AB9A1D648583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 4fad4b665691436a8f64234292d5fa529ea85c0480381df72d53a6ee85a762b0
MD5 892a4eb129bbc189954ce13e897ed7c3
SHA1 a63e32d9a5597be8528a8c13fcd9d6ce311724e3
SHA512 5d16d6fc8c168bea35c68c407db02fac81354a737d683c479598ec1610cc5ced1ce6bd8d130eedd32a9e7618e53ac80ddf867032b8ecd8bdce6355b3bc99b012
TLSH
T16B5130E14C781AD0D4BE0A7FB09B78FC84E8D625F8A0347D2858EA884A79B1D658447F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 205ae18a9a36d14e39d98c689699ed1a371dc6ef3cba1087e3fcedabc71147c9
MD5 ebf5662dff2b2c407991dcb507de2e18
SHA1 40fe803b64ac239eeaefda9482c16a725aa07baf
SHA512 e059015cf1cb37ba14e88e1ce77e02731107050d251a553755ff7fe455901a49363a1691dc37af31c817890f743980667b07b25e4cff528f6d1758bbdafa0dc8
TLSH
T1785141E14C381AD0D0BD0A7FB09B78FC84E8D625F4A0347E2858EA984A79B1D648487F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 2732fff41789f140b79fbfa1ddd98edb5f2ca6b5a8ad547693183c58ec0bdf26
MD5 bc6fe99c80b8db45e87823ddc1415494
SHA1 96d3d409ba4009b4dc4c5527bce370ce600e1250
SHA512 318f6542f52082929ef53a91ed0a335fe3ef1990ac0a51dffc1dc155c874253a0ee9d983239c43b2fb9737c65357cac8a21a7fe1c49a875addbb7ff955d41fc0
TLSH
T1BC5161E04C381AD0D4BD0E7FB09B38FC85E8D625F5A0343D6858EA884A79A1D708083F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 7017570471a78ad48e769e847d3ecc53b29ab635f3813881c7dbc889aac6b8d6
MD5 0519629174acc947c2c07561e82a36ff
SHA1 86d2b025330d88ffa0296c800e75685ad1ea562d
SHA512 b689f780891fd3fa4c0ca883d7ada210791a744d5d04db2a898eca6b4b1fc0d921acd89aad71f740718255550a378f3bc20c2611d7be825a1f0a63d1f5d517b2
SSDEEP 768:lQIOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:qxhaqLI1WcxKgdfHJHH
TLSH
T1C163D9FB495B02D0FB9D40F4924B76CCC35B299C8CF8E792F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0bd9bf97-57de-4a43-990a-88bf499b87d1.tmp

Path C:\Users\Admin\AppData\Local\Temp\0bd9bf97-57de-4a43-990a-88bf499b87d1.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5efa91a6-fb61-470a-86ad-962d4d6e4bf4.tmp

Path C:\Users\Admin\AppData\Local\Temp\5efa91a6-fb61-470a-86ad-962d4d6e4bf4.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 6618ecc43418fee7bd42a300696ac522a2358fec473841afd9000f160528a5aa
MD5 585848561713c776dbe75714ef2a69be
SHA1 569e72986c9da351a7f031d03f2a0c9e9822c4b2
SHA512 e36921833a83de23a7af7601f0ed235860eb15b136ed4b5c5c2b3a225a23a5a98012561c527c13ad87c8cf1ca2390b703e0d24a2c5e845b5d85dbaa93555b56a
TLSH
T1795135E13A35B13F6BC747C860664C8495A0F180032E5B5CEE5B9474BFACEA1971EBC6
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5972_1317070038\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cde22f0d-a46f-492f-9194-c95c714b83b6.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5972_1775760265\cde22f0d-a46f-492f-9194-c95c714b83b6.tmp
Size 152KB
SHA256 f83832c37a0969ce89f77b16eaa07457b03f43029abaec00eaedce2674adbaf5
MD5 d2e80cd29c43ea745d16284dc1f58ea6
SHA1 53fe0165f9f303b333be9284865c8a74f3553c0b
SHA512 375fd3e65b12f80b92a63c1cf6f0ace9fe878c1a0cb5179d869c99aad0cfde14715fd1499eab22a04f353e5f292c19d6a5aeccb43ec2ff5cd6878a5226b005ca
SSDEEP 3072:bHVqfst2F+fBXzSKmg3n0OIH1iCylcLMLgaK9enj59Ah8MuBX8Yk17CF:b1qkfBXG801idlcLMLgaOeV9A2XdBkda
TLSH
T1DBE3E13C3EDACD26C21B20F97F287587C54D8F17A10BA50BE14A84015A76B5E17E2DEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1073862851\manifest.json
Size 118B
SHA256 9884eab7370008ea0366a3516952304fe3dfc3e4af613a701b140070052ea2fb
MD5 c2eb53757016d742f60dae3f6dedd5dc
SHA1 59e8ee7a18522944c88977476e3b2b37d5eb8b81
SHA512 905ee402639d8ae8988817e1726c97e466676b6b007b8c045179999f034f39855403c97a530bdfe38318b5f1b1fd5fd525d940c04e546ef33a3d0d37fe69c81c
TLSH
T1ACB092B00C0AA03B26C19320ECA066C683F80218E8025B1A088036881F8817880362B6
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\edge_checkout_page_validator.js
Size 1016KB
SHA256 86208bb3500717034023380e5d9e9c3c0ebfe3cd5adfad3963b9796f3765efc6
MD5 b9f59640dff40afd5a815660d7547e3b
SHA1 0e47c4972840a7ca2aaec3bf75bccde7b206ed6c
SHA512 421cdc2761dd29c581e8676f075123352c09eb0781a28943d09c653580ba69a207cae674a6e300d6a1ddc26c6f52c55d972b669248f902276557f89429acf639
SSDEEP 24576:c14wmRAbskvG7kVKApnuQ+N4aETI/VMXK4/0YMtQZ8O9vaRS/vzHEiJsfamM1A9n:c14wmRAgkvG7kVKApnuQ+N4aETI/VMXM
TLSH
T19F252B84E1E2253466D748B960B7D2C4B5DC04583399F1E8FA6C68CADB0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_113208592\manifest.json
Size 146B
SHA256 aeefe4f81560fcaff3291ea907bb7a77361e90e68b866a3e30305edb239c8034
MD5 b5198ae671d9790681e5f5531b056679
SHA1 b53dd9270669ddcc2e53dcbde5add5baa165e29d
SHA512 9107edede2dfc2fd54b2dd11f434457dfcbc79d859172b6bec71afc97bef626e751bf3c5fb671c3f605d07e56f86d222586e4801ec7b7a2357f9067f069611c8
TLSH
T132C02B33C831AC30053007D408F08741EB34134BF500B0163730008D0B3C4706030AD0
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_1475130447\manifest.json
Size 165B
SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
MD5 1bfafb8c67c4ae6cf99faf6f1fcbe9e3
SHA1 77fc3483a895f1f429e6c6bb0f294a8fdc69dd08
SHA512 7237c88400ae032f4e745d8f0e5a869c29a76f0151b61ad2aed2ae1be7fd0b759d81c5e6b47535586533c0ab25291a25822174173f1bf6dbaab0298366aaea73
TLSH
T115C012229844793A12A183840A31CA82B2A0020B34E129023A79408C4F350749101619
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping5972_470382852\manifest.json
Size 53B
SHA256 b2574db59e08ca01a3df98d2fb2d691981bf8167321f9789caf4e456364a46fe
MD5 8a7fdbc8b7044c1062a9c2ae49afa19f
SHA1 0602a4bc23f1023beb5c2a90235ede1fb8b6df10
SHA512 51584c3507666262b06f6e31da984947d18da8fe44d1b47942a4483b47573596abcabfdb739a894ec18eed6686591916cf60d5999fe3a76f3f2e6d94b328b2c3
TLSH
T1C49002604414951716C10E5065F0B881D391A61995850D5D04451559029546CE050298
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1784-829-0x000001F010E60000-0x000001F011E60000-memory.dmp

Download

memory/3872-200-0x000001E44E3B0000-0x000001E44F3B0000-memory.dmp

Download