f0ca57a5a2b7ab1aa1a31325c0b2b2f2fb95aa299ea8c161194a8fe7a237761f

Analysis

user interaction
yes
max time kernel
898s
max time network
752s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
08/08/2026, 20:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 20KB
Sample260808-zn9dzadm21
SHA256 f0ca57a5a2b7ab1aa1a31325c0b2b2f2fb95aa299ea8c161194a8fe7a237761f
MD5 9479ea065eace167767ced013590c66a
SHA1 219addb6f1cbcbd9d8d85c7c4815a0baf44149c3
SHA512 8eb72084ef9ef87a1c9a6a712ac1ce2e90014db68aa28621640c9ad5c404311e458796484ab08991ab6b85470ba28960baf0e8df5b71a02ef2549a44b8feed4e
SSDEEP 384:8MxeW+2ll8pnuB9Vhqi55hfqHjQ5qMq/Vhqi57hfqHnQ5qMiM8bNC7p9IhqqFIhj:8se2ll8/jINIQIozIhI3ISfIsIsIUi
TLSH
T1BF922162754C523B0263468B9471378990DFCDBBDB326066F7FA273B52C6E45EA23213
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\wallet\wallet-tokenization-config.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Tokenized-Card\tokenized-card.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Wallet-Checkout\wallet-drawer.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\wallet-webui-792.b1180305c186d50631a2.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\bnpl\bnpl.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification-shared\it\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_135371357\keys.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_2080030564\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\fi\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-mobile-hub\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Wallet-Checkout\app-setup.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification-shared\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification-shared\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification\fi\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\wallet-icon.svg	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\bnpl_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\hu\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Notification\notification_fast.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\wallet_checkout_autofill_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\el\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-mobile-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-mobile-hub\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification-shared\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Notification\notification.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\wallet-webui-560.da6c8914bf5007e1044c.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1201246682\protocols.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\wallet\README.md	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1743646749\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\app-setup.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\nl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\vendor.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Tokenized-Card\tokenized-card.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-ec\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-hub\el\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1201246682\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-mobile-hub\ru\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-notification-shared\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\da\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\buynow_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-mobile-hub\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-shared-components\ja\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\pt-BR\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3624	msedge.exe
4464	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306960658208706"	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2684263265-1628758615-802431902-1000\{022C58AF-F819-4103-A9A8-8FC5571F4B4A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2684263265-1628758615-802431902-1000\{CAFC84CC-92B9-42B0-A5AC-21FBA8FE8FA8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe
4868	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4868 wrote to memory of 5000	4868	msedge.exe	84
PID 4868 wrote to memory of 3624	4868	msedge.exe	85
PID 4868 wrote to memory of 5480	4868	msedge.exe	86
PID 4868 wrote to memory of 5480	4868	msedge.exe	86
PID 4868 wrote to memory of 5480	4868	msedge.exe	86
PID 4868 wrote to memory of 3676	4868	msedge.exe	87
PID 4868 wrote to memory of 3676	4868	msedge.exe	87
PID 4868 wrote to memory of 3280	4868	msedge.exe	88
PID 4868 wrote to memory of 3764	4868	msedge.exe	89
PID 4868 wrote to memory of 3280	4868	msedge.exe	88
PID 4868 wrote to memory of 3280	4868	msedge.exe	88
PID 4868 wrote to memory of 3764	4868	msedge.exe	89
PID 4868 wrote to memory of 3764	4868	msedge.exe	89
PID 4868 wrote to memory of 5216	4868	msedge.exe	94
PID 4868 wrote to memory of 5216	4868	msedge.exe	94
PID 4868 wrote to memory of 5216	4868	msedge.exe	94
PID 4868 wrote to memory of 3144	4868	msedge.exe	95
PID 4868 wrote to memory of 3144	4868	msedge.exe	95
PID 4868 wrote to memory of 676	4868	msedge.exe	96
PID 4868 wrote to memory of 676	4868	msedge.exe	96
PID 4868 wrote to memory of 5392	4868	msedge.exe	98
PID 4868 wrote to memory of 3776	4868	msedge.exe	105
PID 4868 wrote to memory of 3776	4868	msedge.exe	105
PID 4868 wrote to memory of 3776	4868	msedge.exe	105
PID 4868 wrote to memory of 4148	4868	msedge.exe	110
PID 4148 wrote to memory of 536	4148	msedge.exe	111
PID 4148 wrote to memory of 4464	4148	msedge.exe	112
PID 4148 wrote to memory of 5868	4148	msedge.exe	113
PID 4148 wrote to memory of 5868	4148	msedge.exe	113
PID 4148 wrote to memory of 5868	4148	msedge.exe	113
PID 4148 wrote to memory of 3468	4148	msedge.exe	115
PID 4148 wrote to memory of 3468	4148	msedge.exe	115
PID 4148 wrote to memory of 876	4148	msedge.exe	117
PID 4148 wrote to memory of 4332	4148	msedge.exe	118
PID 4148 wrote to memory of 4332	4148	msedge.exe	118
PID 4148 wrote to memory of 3128	4148	msedge.exe	119
PID 4148 wrote to memory of 3128	4148	msedge.exe	119
PID 4148 wrote to memory of 1420	4148	msedge.exe	120
PID 4148 wrote to memory of 1420	4148	msedge.exe	120
PID 4148 wrote to memory of 3692	4148	msedge.exe	121
PID 4148 wrote to memory of 3692	4148	msedge.exe	121
PID 4148 wrote to memory of 1508	4148	msedge.exe	122
PID 4148 wrote to memory of 1508	4148	msedge.exe	122
PID 4148 wrote to memory of 5480	4148	msedge.exe	123
PID 4148 wrote to memory of 5480	4148	msedge.exe	123
PID 4148 wrote to memory of 392	4148	msedge.exe	124
PID 4148 wrote to memory of 392	4148	msedge.exe	124
PID 4148 wrote to memory of 4324	4148	msedge.exe	126
PID 4148 wrote to memory of 3996	4148	msedge.exe	127
PID 4148 wrote to memory of 5248	4148	msedge.exe	128
PID 4148 wrote to memory of 5068	4148	msedge.exe	129
PID 4148 wrote to memory of 5068	4148	msedge.exe	129
PID 4148 wrote to memory of 2676	4148	msedge.exe	130
PID 4148 wrote to memory of 2676	4148	msedge.exe	130
PID 4148 wrote to memory of 5468	4148	msedge.exe	131
PID 4148 wrote to memory of 5468	4148	msedge.exe	131
PID 4148 wrote to memory of 5684	4148	msedge.exe	132
PID 4148 wrote to memory of 5684	4148	msedge.exe	132
PID 4148 wrote to memory of 4704	4148	msedge.exe	133
PID 4148 wrote to memory of 1224	4148	msedge.exe	134
PID 4148 wrote to memory of 1224	4148	msedge.exe	134
PID 4148 wrote to memory of 5260	4148	msedge.exe	135
PID 4148 wrote to memory of 5260	4148	msedge.exe	135
PID 4148 wrote to memory of 3096	4148	msedge.exe	136

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdfc5bc188,0x7ffdfc5bc194,0x7ffdfc5bc1a0
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,3056248799339206165,3622163159187586086,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,9895487809375878979,15265056268505038252,262144 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:5480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,5381444642017342331,1434551262656812435,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,6445323845678801756,17782781257511396106,2097152 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,11040375378187797848,4677192596036987212,2097152 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4852,i,8452004564063256964,6977389137479924643,2097152 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5228,i,5020849053977076007,16076216887829403534,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,6921515528071741032,16411857496495906747,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,3920224466016036345,11969642108384007185,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,3920224466016036345,11969642108384007185,524288 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6248,i,11868294392012368080,3536260348192823238,2097152 --field-trial-handle=2344,i,6195058148229153519,12941722716597285330,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffdfc5bc188,0x7ffdfc5bc194,0x7ffdfc5bc1a0
    3⤵
    PID:536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,9347695773750602202,2122969142458425439,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1712,i,8853378201638465058,10059473310539730439,262144 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
    3⤵
    PID:5868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,3683100596677109399,14702363240894300798,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
    3⤵
    PID:3468
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,17666248460460903888,15411736702760126219,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
    3⤵
    PID:1224
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,17666248460460903888,15411736702760126219,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:8
    3⤵
    PID:876
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4412,i,18177795069907857899,16155733422172236211,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
    3⤵
    PID:4332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,16109926791730047137,8720685429110717425,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:8
    3⤵
    PID:3128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,11253788066615954612,6275982501721563458,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
    3⤵
    PID:1420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,10048773453073854791,15904996785381806884,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    PID:3692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,14714386273907039044,14139131380974038107,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:8
    3⤵
    PID:1508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4664,i,1091532474584839482,5857047046747420906,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4760 /prefetch:8
    3⤵
    PID:5480
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,9837375687215642207,16292226811117231019,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
    3⤵
    PID:392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,17055368557463509939,5597403148630367819,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
    3⤵
    PID:4324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2908,i,10539156472777302935,8506353003741403492,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
    3⤵
    PID:3996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,14374387186089781251,15509047574021252751,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
    3⤵
    PID:5248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,3315688606961896407,14493459308423561331,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
    3⤵
    PID:5068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4184,i,2462380292570717411,12039775221098160445,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
    3⤵
    PID:2676
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,1972853661941225897,11746486836640385437,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
    3⤵
    PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4708,i,8094390242044733299,13906375924001438244,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4564 /prefetch:8
    3⤵
    PID:5684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5056,i,16013381581585664175,14198274913911264039,262144 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=2784 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,14631395171096454747,547125395800353037,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:8
    3⤵
    PID:1224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,13111859687714211974,14876734209648138097,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:8
    3⤵
    PID:5260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,4913706975515421100,14162416388129053290,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:8
    3⤵
    PID:3096
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4020,i,8986189986065785504,11754330095966622859,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
    3⤵
    PID:2588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4100,i,7492208778051993577,17450480100936105013,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:8
    3⤵
    PID:4372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3788,i,5288616514791968987,6838681329346771016,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
    3⤵
    PID:4204
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,3813595164638046735,8603905873598818293,524288 --field-trial-handle=2276,i,15834714304371108084,11069698056867459618,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:8
    3⤵
    PID:5628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5780

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 fde3b41a5711362d7f3df7d71563d5eb6cc679bae7f80f74afcdf81dbc09eafd
MD5 3406d3b708dcef0116bffd8eaa181ad4
SHA1 3df64b48bff2b9d4160d900e91a7670046a24340
SHA512 d22d05c221bd19bc3b07e9a5ed722fbf8fbf75d695302fe8ec441d6d1e653bd63b3751a9608b344cc859feb79c5869aaeedd08bf846dc01a522b3a0dbb1637d9
SSDEEP 12:sUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T18F727886B34494FFC8C35A7189BE27902374F6DE5F02836B6A3A7A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 524ae55519907b3ab75a388a7d8adb5b3e5bdde0aabefe20ce772a09ea687d5b
MD5 f6eb566f9aba7efdbfb5c795bd65c547
SHA1 0ce2d6e7d9e58cb863af3f628d52cd4dd694f6fa
SHA512 2b08121677adac5c93abf00acc6bfcb28d8a72bca78fdef9052724d4f592d583e28680a2ae9a96d1bb7c0a432f05c206ebc2ec8238e6cabafaf5ae8743b7260b
TLSH
T19CD0C023360D3004E3494231D002C3042311447810078301F330D88C89241C4D2930C3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 740cf52104391e5205acb6afb57651b0df1946dc18042e6fe71c947bbcfd0e7d
MD5 da47e4f65be18ac64e0cfacee45a035d
SHA1 420e26378042dfe1c820795a4fb69a1093ddccb9
SHA512 928a7bd59ec80be0f45ff0cf104f78b4f4455df0864d3c8b21ac8821b9e7f21f8c71771888e780197da81f8603df0baf6603c27bb0b9cbbcc06033aeb64dcde0
TLSH
T147D02370341673E0C11C0030C120110033104672205F83D26270AC0CCE30000E1FBCD2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 12cf3cb65a200af86243e1d118fabf0206eb1503737cd34eae85e406a2f80e24
MD5 dc2172b8b5222326ccec8d6fb57c61b2
SHA1 fb79932102f7cf29f5c3a914bd39d8b149d8c9f7
SHA512 c872b7bc9225487bb4ecec6a8c44ba357531eeea5d52a67d660f8c87acb8caba0e621ad71b44b70130005877f4904c99148d924508e690374354fb9f2ce8f14a
TLSH
T1B5D023B4770597A0C10D4431D950B21477618674306FC6B39070B88D5A54114D2FF495
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 750c8e46de9b65ada963e8a9477e1bd2764f80e4bcd860013f625221e783f9f9
MD5 c978066adad6d91f3ebbca8fa424a77a
SHA1 2f94adfdb20be9eb0a61a31c83bb3ba0b54230f1
SHA512 b6ec47dc2498518fd75bf8b80e4f94469a2379d77839ce261a9e9438ee1c9ba99ba9ad38cddebffdaaa9b220e057fe89d9461475e667257631aaff788a5ce69b
TLSH
T149E0D85958CCC72DB540684B535C430CF280370A9ACAAE8A1B04C9C93007045E6DA971
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 965a6f404598569f7402c4ef5c6fe1ff1ab7ec929d6fd1fbea73dac546c196ab
MD5 e2c35c858900f9b23ba5aff308f4d36c
SHA1 a0e3a10fb61fe638cd356255886eee094a02ccb3
SHA512 d26d9d1e51f5e934744a014c4882294730fb81a89fa2d060266e49050bb3b2d212da7c14bd2bfaa6b09c3a30ad057fe4a185fad934fbab7422d002ecb78a2b7c
TLSH
T134E02688A6CCCF2EA628744B9564434DF2E0360AAACFA94B1B00CCC43106099E3CADB4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 5a4b1e538f9c7f22f4a0fb649fd06815d2d221c957db7a32d105c14155350fb7
MD5 aeb211bbf92e5e6807dbe976274f23ac
SHA1 7df38a2cb4e8683dba0144502fb361a0158b3973
SHA512 1cb93b29a4ce2815491966cd31a496c84066697eebcec1cfbe3fdbecb8db3a8f0d0d2ac92ab1051738ce3b6b23cb5d8b6bc825aaa9d7ee6c086a35d4e97aa17d
TLSH
T1CBE02BE5CC61EC3718FD071850690B82E71013972B41461B3B3C610CCFB0B3B5586C6C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 4f151e022dd41afd56fa0fd70d1ebad7fadcae0f0f50b20fd53818abcc7a9ad8
MD5 25389c9d63e2c96870ae1bca7035bd07
SHA1 06fcb6dac95372b0e2064557f5340f8b214370e6
SHA512 ce2bae6e9b3f5c21e331726315327d163a591e754ca476300c8888d52d230dc9c4f2904a1391ecb5c0bd2b1b9c84f2acffa0b952da5679a2739e12df96fb8c9b
SSDEEP 384:Q/MyWDUxGzUBekdYtKJsS7mj8hc8Z4g9BbAuNOZn+dspDXZwIBqc:Q/M4GzUbYtWhc8zXbAsa+dsXZwIB
TLSH
T1EF13C57C7254DC23DBC3043DCBCF5A3A673DC921FAC682436B61B1AE972674A490E858
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 84535ec584a8cdf3a7e3c7d83b0cc9a8b2e6288f1018ebf9f48be976db4f0c4d
MD5 67b4d4719f6c4f91c3090b300a71c745
SHA1 32a105b737460cf26ad7faf39c98d85d9a52c3ca
SHA512 29b3ba19187ff7642ac667b24301bcc4f3b91b287fecdd416ea2ec44e7d63c63571ba93c835d02b77bae040a8a1b579f9607bc7f9de1318761b310f03734e7a5
SSDEEP 6144:OL/dL/PL/FRrpL/+L/sJL/XL/PaK2L/BL/JL/J:OL/dL/PL/vpL/+L/sJL/XL/0L/BL/JLh
TLSH
T11B442DF71911A00BCBA852F5D2033E3EC17B415E3DD1E9E9E6784C952825F32B6BDA48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 20ca2beb4606f0f42665a100c5abdd44cd5d59169943740b144431b17728a86d
MD5 2375d0ebb18a9bd1e9d0b783ed29a1d1
SHA1 04666ab5b7e777a26dcd812d33cba9ab9661ab2b
SHA512 8c54394d20d769bf31fabce420d185d76b5a26c7540faf7032aa7dcc1cb164eeb76ed9f902ab6c881564ed8b432e26f1d4e7dd807cb9c6157902fd4b621c7f48
SSDEEP 3072:E8J5m4H8oNkuGavCf3b9EclOl/f73adV9FWbADQ7nmVNmGCpwZqumTKKrZ:EW5/NZP0Yln7qdFWbA8juMuZ/sK+Z
TLSH
T1FF253AEECB681C82CB6B8774B1E0D9077E702182BA4DD0D39944C5D897D6B8176F92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 8.0MB
SHA256 d48c47e92d98ef71842eae69b838c4fe19f28c78b2c8ad7d28205b949f285641
MD5 7df53fae8f36dd4b1fc0836344cd4a8c
SHA1 a2490d90fec4b6ccfd7b3161fb7e4452b226ee07
SHA512 ebf51c83eede07d90a3f90a9c2b407017fe7f46397e8b51ab68cad16bd7390111714113125784dd80a4f763fde870ee83c39667cf855330c955a6d3dfec94729
SSDEEP 49152:dxYs4qn/LhN2m4LU36wXnw7jvG+pvtc0nkQEalZj:dxys/2cHw7lvtc0Hj
TLSH
T173868DEDCA6858C3CE639930B1F0ED477C7413C3F995D1D68C98C184026BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7cb0589f3113243633d432a5c191878d404ecd0b3c75c199a1f84f6ef6bcd221
MD5 98b37d1c571c0eec06103f9dde7329e7
SHA1 00c5d2272eb2346ff636d4759b7a6ef99ff47634
SHA512 8b3a622ee21fe7f39e8d65d09259c215e2ef8dd45a4be6bdeba68ac6d646f8107fb12d3b0e95abb72a6e6bd3d33ed1cb0fd08eac31b146fbcddb5b6263dc812d
SSDEEP 48:ftnCEDr704oWIwFy3Q92XXe+E9i839o1LKaRHQp2Ge5VYpW/mmwicBXM0fWuIh96:dCavozZ3TXlEs29ohKaRwAdVY0bO
TLSH
T1BFA143BE85FAD148EF3211B2D3E10A9632BCD0EBF50BDF030B045C7C941A395C6A1596
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 1f024677e3868cc15c05e09712af5b1367375a9f06c6d5d85278a06db6b05e37
MD5 f49ba4de5998fb8b2998878a564ea027
SHA1 e72b91adff4d338b90a0f0777b77a85d11023ff5
SHA512 deb0b8c64961695bf20064f2a07286f107488dfec40db6c1ae237a61a1832e76dcbafa3ced2fb153cc2a8a50510868688c76d9f6ced55c96508c706fb8451f57
TLSH
T18AE0D8D4F4C6C27E5B3034C752745709B1D03583EA87AE433B0A8CC07616092F6C6D7A
MD5 SHA1 SHA512 TLSH

Submit Download

EdgeHubAppUsageSQLite.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeHubAppUsage\EdgeHubAppUsageSQLite.db
Size 32KB
SHA256 81687a4065b811a0d9174a4f32fd92a9c52f3b71766029d028ed6042a5fef5f7
MD5 4b72267e961750eb6a21d12074609494
SHA1 4970fbd7e716fb03b4e248822b4b83bc597ca902
SHA512 0aede1b8bc755a2a858f7da1b038f048059da0d0fbb65e86f1ed7d097417b4a162c60205319642e7b6d24d8f57445c42400c046cae98a200ff9e487b5ba53696
SSDEEP 24:TLAga0Zb7OaIbz+UOxUDDNzWjJ0npnyX7y+j0xW5LzeCK5fKFtIKlqYpKo:Tyi+7f+UZD4jJ/BiWxxCKFOqTpp
TLSH
T1E5E2D14D3B12F522C8ED733DB0C2C5E05EBC686D4A4D71B195389D768C62661F49E11A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 28c51e2e2f85661d11b119c4bbf27c16517b65385df50dfcd2f0cfea9b837f85
MD5 86ea6c3b8e9eff233b1fe9431e457749
SHA1 83fac67174c0fb628e40aedac47d25f8f5f314f8
SHA512 1e9b6d05277fcb73d19cc368155ecb0ce7e11cacf6f2d9311aad4d0b36c3934ce5c664c0802b3b3e60c2e950e698a0de8dac2fbb32759c37b865116ecc03aeeb
TLSH
T113E0268494C8C23AD92468E7C77C530DE6D03412AA88BE036B4CACC0A12A742E2CE7B0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 aa1efb9e50866b70046998ba0b2dc3cf368a35aad2dc42a40d1f87abf420ce65
MD5 ddebc77ac2c0910760178e9aa64c6719
SHA1 88ba54d137cdee11f0b4f82dbcca1fa3979bf474
SHA512 6c58211241ad6e0a5fcc5afee0327d23713bdae7ca0741625ce7b901f235dca0531aa52869e30bc9caa9e829860b46b6310762cb3e38e72df32d1e1d47862b23
SSDEEP 96:nyzIU+bGz83uy3+u4tgp4DLjGQLBze9z3hjBHMsDEuspU0wbtqrOQpPfR4J+MCXD:nEf+G83uy3Ct7XBBKHH7DXspU3iV
TLSH
T18114100E4F243721CDBD917669E744B35D7CF03FCB5266DA686114B4CEE2A52A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 15KB
SHA256 06d2146f61edc3992bb7e6f620d37a338c1f7b05497c0131fd60e5a437995466
MD5 2853e7b1262822632eb3187890c3f858
SHA1 f6a80d0e46b05c25b7330b9e86968fe9d80e9eff
SHA512 6f0155758967791f099ca6528ebedfab0735384ce80798dd4ac735c94c9b7e4148704b68e27d9a147196fd9ff27197eb8f18ed51f3e5864519b2af2fc7d5f2ba
SSDEEP 192:N5QBhJwRCsaBspqOtXVJnrHotnsnIh7OZG:YJwRLC7Il1mnwIh7OZG
TLSH
T18A6276B7180CD457CAC52DE686B2ED4DD3438D3BCE96E99AD668C5AF06BC03036B6143
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 68b0402406586aae31988bced67999d9cd5d995063ab42834f6ff7f7c33167bf
MD5 fb49c592bfbd9a17d77caffcb3c9194d
SHA1 f128add6e53a47a46debbe4d25e2fef899230ac1
SHA512 1ec92ff343897722cacf4e9e917c29585b552ada7215f2aac34dd9d88e04133b1602925ffe73a9e4f46f8054dab3e72bac299a7d1cf1c3feae23187d56c3d499
TLSH
T153E0D87098CDC27D5614208B5735770AD7F0341ADACDAA062F08B984B016004F6D97F1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 28KB
SHA256 ec9c1aaa1a1bae63f4acd6f7f3053752ccb31716e1efada7c1f078c9182455d2
MD5 dda066ebf57800c10d9b607475154d69
SHA1 c830cbfdf53e0328c38db76384a80872b3d354ba
SHA512 e43d22b5a63466fa0e9435102a8e73120ebd588db1a3f7523002c7a9eec2b757c9799828a2ae58b236a3d590f6f997d2a89d5c758f7674160d127a57e48c3995
SSDEEP 96:reMatUaAuRMgiBhvA0A8qURbh0Te7B9I4TzLOz0liMNmy0pTpt2UTbPMWtlYB8I:rLaSazCZw8qkb57B9THKOiDiU3P+Bl
TLSH
T11CD2073FAC104115C9CB63B188A6BD962875107BA743E5EB2CFD91B11C31797BE3342A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 ded40d0ae903ec0bade2c392d7932d6f83e5560489e4f3c27fe72e80a8c77c22
MD5 47588167da1897f94eb37fc96ea872a3
SHA1 e4048b1afd2c8ea0e16a25e49a33b1645754ee45
SHA512 1a3b5b90187d6e13fc7110cdabffffb96bf7c56caa441c5732ac22d32d2f9f31a1e9051c5998310bf7460b77b9e788433ae612ca919ff4a3cbcada5dad9474db
SSDEEP 192:D15ZCshqbMLaaij6rvybfEFytUofTGk75cAxBttO:D15ZCshqbMLaaiGrvybfOWUofTGk75cZ
TLSH
T1B2D1BDF7C3E5827D891195F0AA256F2BCE2D0556432C3C5A89E4AF4B63F24B1E10269F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 092f47be40b135e0330ebbeb02a7939ceca35ace696670744104c372adfe3694
MD5 db47de6c560934b78b1c2b7bea66f292
SHA1 56e7a53e343287b2dde06a436378cecd2aa4ca69
SHA512 e8cb52930b5d36a9946d6e59ab12751da6f4df26bfd459c137a2a3a1fb0c164260dd03f215f56e7409138415449a173e2c54a147c142119edccb5321e6580930
SSDEEP 192:D1U63xAj4jsoj6rvybfEFytUofu75cAxBtt9aWrcl:D1U63xAj4jsoGrvybfOWUofu75cAxBto
TLSH
T17AD1BCF7C3E5826DC91156F0AA257F1BCE2D055A433C3C5A89E4AF4B63F24B1E10269E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 4ab4c6d45195b1ff728605cc40410f10fb89917828b5c2168b8a7d8d6d6c8abe
MD5 37cf86dfcd82078c2d6a60b85b4bbe29
SHA1 d6c157bb05c42a9a5b764db6445028f247e66e31
SHA512 c2ec9c0a1def913de6256f22ee333e31f5f26a9075b280ed9d873fe460fcd0c260b4ec5f2063fe7436e68b2dc6e8b79e3f4d2ac6772a91808bced8fbc0ad4886
SSDEEP 96:eIEumQv8m1ccnvS6UpMCofmSOXXb4fyg4hbFnFKhM1dC4g:eIEumQv8m1ccnvS6tC85
TLSH
T155F201FB16235652DD8445B090015F8EFE13405B46B7B6F86AA40BF3E2B20F3A5653EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 f2fc063e6cfb1b9a8157902f0a38b9d3bb3b8d21aa06e2f3f95f426a27ae2ffa
MD5 0e5accad65ded43b2a4edb55571e8b55
SHA1 43844db0c639bc0ac602d2332c6fa95333262309
SHA512 ad2fe872cc138bcf94a0f6d062c8246d71180f0ddea3d637ae9c8c839734c3c1a5256b3e67507c770f807090f3b9f95525028d1ea0953dd081d0872d8a6d808f
TLSH
T19021D0E385BAE42B202C1D7F1D19BD1A1E7AE536429028F5DBDB827CA0C18F35B16026
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 1b4525a68989531a2a25d45fbcd2bfbe2ff7aa0dde92a30195dce5c032813172
MD5 d9e296d0f0daae5abf8388cdaa3737e1
SHA1 c874a3d68f0fe5debfc75506d1836371a90c25c7
SHA512 0b57eaea02d884303c62071f451e175f9fe4f0a9907de33ccbe77ecca8ee329434d5e2cb243a9cab50f6862a3ef55725e3702d0c2269308235777a023aa98fed
SSDEEP 192:sxZxRWyMqZjK1Ml8MWOA/fqs0e8Z5z/cjodp4CHHW6+WNBIX/YQJqlckoHIgj8J:sxZxXuOA/fqs0eC5rT9Hbi/wck0jg
TLSH
T1BA62F9166E34597BCCDBC209FA457F93D7F9516392804E54AAFC8A0C04E7ADC220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 18KB
SHA256 29f625ca6439e9d5c22232134aa3eaf4ad9a54322d053886c3302ee7404a9da2
MD5 f8df8cebb44312963a2def6284dad785
SHA1 e591ea296432a8dd54ac4783bcf5c3d374e37f93
SHA512 a4a2af9df7613042788ee40ba1ab13fa02baac70de8dca0919dd928afd6178affd2eb0f74f84f6d4cdeb2a130cc225d6d221b4946f2fb1a3df77dbbf4829a469
SSDEEP 384:sxZUnEX6A/fqsKWvxeC5runK9HbdX1ckjNg:s2EKA/fkYxequ8Hb51cku
TLSH
T1C982E7126934593BDCD7C219FA467F53D6F8112396905E58A6FC9A0C04E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d9eaf673481331b380e0d952471751591f97aa1c954c8d79dfccaa462ab2a7bc
MD5 a007a2ece8b3591034a66efeb66c54ce
SHA1 2389647b2217ee433a751a445de12d70cc316ceb
SHA512 fcb68419bd0d1cf72bce30d7213df48a82ec3f37d43b4e847dd24f32b852e058f5b9e810a513177d2350f85b5bca6bfc75b57d7f5eb0e7719e26a74917e62800
SSDEEP 384:sxZUnfXuOA/fqsBeC5runI9HbZXQck0/g:s2fJA/fbequGHbFQckh
TLSH
T1EB82F7126A34593B9CD7C219FA467F93D7F85163D6844E48A6FC9A0C04E6BED2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ddd93c640e662c502f8eb86638cc1df77a2298622f6e99b3321005e81ad97b67
MD5 05935d2041921213c2915352f66cfcb9
SHA1 da1777fe0ccc73476b61fb62b7ddeaded5a5d048
SHA512 12857425d3c7e0616dd87b28b12e481e52fac401d62cf2d444b3a35b85e2bfac067ef4244c51b9b84be70447d5a8135ce2be134629431716442650f79874268c
SSDEEP 768:cFADqXGWviq5i8F1+UoAYDCx9Tuqh0VfUC9xbog/OVfRLl5bKp7roK/X:cFADqXGWviq5iu1jaSRLDmpIK/X
TLSH
T16DD20B2F684CCB7E4F841E5CEC266F8B6DD802CB6A984D5447EA844C02C77EE512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\625b44cc-886c-4ae5-a674-8f5063fbbe30\index-dir\the-real-index
Size 1KB
SHA256 fe938270756b961dab49c0bec03411d4522a92d34a52a168cf5514344275471c
MD5 00f9354872cf18e429216d43db290a42
SHA1 f762231cc4cb6fa39ec429800e8b72f217bceca1
SHA512 9d74d4c84b145affe63df132d609f59c78f7cca16b961da1969edae084282ad5ce6bafc4b7319deded67337e80007c5bb80cdc257e7c12276eae3fed88433a3a
TLSH
T17331950A8D90C95FE8A444B115B69878333489EC1722F6138C3C6231BE1B72A190B2EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\625b44cc-886c-4ae5-a674-8f5063fbbe30\index-dir\the-real-index
Size 3KB
SHA256 e598588f7c635b02f38857c3c98d71006fac2054194c547805d4cf01651f319a
MD5 e568be003f5588fd5fe78a3072b8c0d4
SHA1 fae8602893033618677bcbc59a0900176d9812eb
SHA512 8fc0f6cbb02863c619b4b895e01dc95d61a733ee2329b653b1f401a45d9750584625e62e2e3e9522e8bb6317c4145c608a619f274eb79407c64658360d4e6561
TLSH
T1AF71F8498C818A2FEDAC14B318F76890733094FD9385AB03A86C70347DC37152C1626D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a033.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\625b44cc-886c-4ae5-a674-8f5063fbbe30\index-dir\the-real-index~RFe58a033.TMP
Size 1KB
SHA256 fe0be18ab9518af763b4b744d6b7a24297470db1dfc0e5d16ff27cf8be9bc145
MD5 ee9f1a69c206a53461fa2c635263d08a
SHA1 2d07a97c7d5307b35284b8cbabcbeea94c0ad53c
SHA512 d81bdbef4444759281b9b00d4483c64e81d31cd0abd7236e69c8e82a33b0e273f572fef4585216d1ac2e4df0b5ce12cb83aa0f5be542269877b5f455b4d26974
TLSH
T17F31674A4EC58E1EE8C450770EE3A8B8733999409312B787947C5639BD617BE1F4E0D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c07a0537-a91a-4454-ad44-20d5ee78807a\index-dir\the-real-index
Size 72B
SHA256 131c2d821e52f5b1203bf5288c9cc9524e91ed1095af2f2fe708ce460de0500e
MD5 0dffd460316f4b569e9344541e1b7c28
SHA1 7215f35d29ca2f26794cbfc1f871df04a5312840
SHA512 bda702a139370bace311e84607ac22eeb1c4eb100df2899481a9be466731fff9a5ecaba545e39b3df03a94b5f3442d0adc42b88c01f7a6b49290191461447b3e
TLSH
T16AA0023402947102C15257B75ED6516A13844B941110136A4090404CC9E0785564A11C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c956.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c07a0537-a91a-4454-ad44-20d5ee78807a\index-dir\the-real-index~RFe58c956.TMP
Size 72B
SHA256 47e994a20ebd9fd8ff16cf1595e28ff7846e1ee53053546e500392c87c16e75d
MD5 0a9de2a211786cfe7ad3b8a6d046c0df
SHA1 223f547b2bfb6999eebce9dd64e5ad12258f74ac
SHA512 fc809b30eb2bbe84fa5e1a46e488405c8d0258b2ec328d5b2831dcd319116d97b89e19f7617e7ef7ab4b779991688963d27c2ed2d51285976102e0a25f472073
TLSH
T166A002108F900446D21221B135E303425300C8D225611B0744914098CD5C4445D4108C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8056847ecce8edfa2f66279ee80343f72b39a4aae7c839204bfe897cf9663982
MD5 35ee6fefa26c11bb54316a54af6ab8e8
SHA1 52ef0994f04d29d01814b9a4443fa3bc0aa5ff8e
SHA512 ed8d446a8355c7aeb340de150f399dcd74910457e4518da5fe74bd8c199b3ef1285fc35bcba0275f4dd54bd42cd00f01ff3f6083d871217468394bba07e55da2
TLSH
T10DE0D87A2DE71C14ECAF93D51436556A01423554C455ED4E205AE28714F1356385BC71
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
Size 302B
SHA256 3b462bb4034fe495db93c9b53e8b3571487317da24933a8eb1680b44e4728dee
MD5 9a1b01ea77c746261972ae3524bbbc71
SHA1 3399f0bc9b0c4bce2382074427cc0f873f85463c
SHA512 0298a396075bdeb4d1425b6b067252b8309b0b35fcf744701647c0f9926065dfe633db850b297d875d1c941fbc6757f9b3088a22b5d45cbcb8fb736b379cf581
TLSH
T14DE02E8B0B081323E88203F3289B32486BF1C1088BDFAFC3810FA03A8BE820C34141C0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 80091551583c6b5206768f5b6aa1a8bbe661090b0c60fdfc1f354ad6025c9670
MD5 eabfef790710712b548d12426314fd67
SHA1 594e1cfd6ba3f5fc8c111ad83de7c70a1c693b12
SHA512 0577af44f8c6fe0b85a4d4d39e826eb298b8a324e846c46da93eef89132e7f66688071d457cbc4a7ab3b58263a79535401e4e8cf35d2f25a382dc6970ac02cfe
TLSH
T189E0DF2095C8CB79A025208B0624C70AEAE674ABDAC83A022F00AA8061E6515B1AA9B1
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 819ef5c5915a3ca8bb6d750d3a42c6c3af68188c16512894fb78b6d4c697131b
MD5 f699497d8f4b5719220a92b8526d87c9
SHA1 9b03ffa81e54616bcd30ab3de59e6931c4b3d2be
SHA512 aea499459d0bf518e71db5e0bc6cfa260f2777ea32acf5d1a3b5b3bf30d8c96cee485624bee5da5d6bb1da199d62b0163ccccd3222888eb3518bee1efc51c2a3
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe58c927.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c927.TMP
Size 48B
SHA256 ccae4bd1637275071d8f46d5ad53ba0697e8d00721cb0751f40b5cd173648456
MD5 72419265e1d0b49bd2790e38676828f3
SHA1 d29c29919b96c449e560a17d60aa1ecf8a694a43
SHA512 704ebd260e0783cf7a65a403bc6e6913f4660634def89513d7775c59567cc1e4953ae332cbe1b0d8f80b7b8b5a9c6946e0401cd43e2e4aba780481c6da373403
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 e1f3bcdc9e0f10a9b897c636c56d84f5056bbdb474c9b57ddfe0b7c80e02f5b8
MD5 0cad1ae74b6b582ae3af2085fd3433c1
SHA1 1b252c12a6ac29a27f529b69dc6ae206e44a7c2d
SHA512 14f988d2a34116c6509d5427c246a94553a55b930e245e4642120ffa6969ce855432a136afc3327f4b0090540fd2275a48fd6519f4adfe0b0f4d59bf8903f070
TLSH
T1A9B0121877104257CD87057125648BD5D734FC1600028807CD1CAF230D096743F0A8F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 7ea8c547d81163ceef0944734e96d86ccd3257255b24d889bb0cb28b2fc9a32f
MD5 661428063a22afbe3cafa7b35c409b58
SHA1 ae5da68fafc6b4d826253eb4f3da4ebabcdbfb6a
SHA512 58cab854fa7f12538860ab21824c0b3ec9ead69ca1fe28c0ff6f4c460e3ca27adfdc914711c3fca14bebb1f1f019d10a58c2bcd824c1f7c14dac7ad4d6ac55c2
TLSH
T12BE0D86065C9CB3AB565308F5314D749DAF37497DEC9AA222F0CB6C0625A140F2AB5B0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 122a1684cf26406a912621043071ee5168f0881afa48cac4fa0ea821757112d9
MD5 6ea01f276b2ae90ec0ac60409242f2f6
SHA1 06a119198c9a18ad64175a83bb77b621111864ca
SHA512 b3c5d2ebeb41370e22e9fb85e27d77fb83974828e0acd96d168bc20ebe97adee927f17648c668c45101d11eb71273418e9026cf9c3d23e944baaaab67208e090
TLSH
T112E0DFB095C8CB39A820708B4364DB4ADAF1789B9BC9BA025B0C6580A151101F2BE9F0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 e8d5df19e8bbb6fff0d31d16091b2aedd21e94e2a68f6d0dfac44bda28f4e3f4
MD5 f534e6aa2753dd03d954834fd491e410
SHA1 60dea85fab8c751414c65d6cf00ea2a6364aeca9
SHA512 cac8aa0858e1a1289d2a08fc2e6967777609b332232c813db80e6b1335c11c4fe9591aa54cd3e0d8e7b06229716867f809c270ea3ddd4f98e2f324b42536b554
SSDEEP 96:KY5mKicqtEYKJ6SOhCKiYZ7yKoAS+/yKosjfmKoYuqugKnKA1OKOACqIgK9KeJ2E:cVSnNDxZ9l3iZ3QxVl/1hVPM3HwE
TLSH
T1CCB26A16717A061238BE6D4CB3A6863B4F4231633418A5BF7FB810760E6AE125DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 817fec3f30c5a7d6d3b5247b8df29d6bc48e658b67d2f496d62f0ef4fa780577
MD5 f2bfede39cc903148ed56d06fe58a5fb
SHA1 82593a60587307693fe5c959cc70e8c49e5e4330
SHA512 02e631e8c80ac6623a44ef02aa823c5abb5f1227ca1c1fc5bd1f077a3a4a65559051d3b0d7394012860f6b4430d04d2ae4429a0b4f238484808f6baef6206d80
SSDEEP 192:cVSnNDxZ9l3iZ3QxVl/1hVPM3HwBNu0DgUiqaFqhUUkTaeRM0ZO0ng:c8NDb9ViJQXlthlM3wfqu
TLSH
T1B8C29916717A061238BE6D4CB3A68A3B4F4231633418E5AF7FB814720E6AE115DFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 cd7d3a4fa9fffafb45403d8370e4ec53bf3f962d47bf6294eb49d80c63118c71
MD5 143bc8444ec6414b94624561f5316881
SHA1 1db446bd23113827f4be8329d8148e5018e53644
SHA512 2feeaf3bd17b237b139a1c20b7eb7ec1bcd675b255b12b21539a7ce6144f447ae9e4bf3dc185ea9325075bc458713c57f4c9499ca741dbc480463b793b926f2f
SSDEEP 192:P+xWDPBnfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxKfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T11924730A7B747001EDE6D9725CB080771A3C716ECF22A6D16DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 bbaabfd7f2b1cf82fba16b00482d13fbb6c221673eb7a81891629862614f3939
MD5 a325fc0777b976681fa5ca524695d7df
SHA1 8dc8de3a32d092976a1d7b162e55ebf7b627b75c
SHA512 49344962fa8dff4f6172b97f2615cb0517561e5962b2049012ed42d01d9a56d90b6ab78846163fff4ac691d21ca88a2a6f3dd9db63ed3bf85f24fd194f1bc2eb
TLSH
T14D51C7C0A3DD54966FCAAAC1D31E5403ACE13E6B260E58B2732D55F44F88C150E6FE75
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 1a8f2f7f4653a2043169db956a58674e8099e00a96da4902fb3cdbd285fbf1e1
MD5 d5e2af5f46d75152960c3adffc6bbaef
SHA1 d0cd58772a0cf78fdbd95e8af374fb68995249fb
SHA512 49508e01e27c78826a02ebff5596cd99dfa60b865272fca2613312b46d98a7cea540ebe753c89f3b625429265425dd14d78784ff55ce935beedb6e90cbd49473
SSDEEP 192:awO0XAsHl8MyQ2s8rHmXDWQGIIIVbFMIMnuYcYM:a0wsFf2sGfQGIIIVbFMIMuBj
TLSH
T14E52752926161F7BC15E1FB713F687941BC6888141732A1D31629C8F4DF3A9786C92F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 4555ac20f8ac969bba5e2e6e614bbb9ea19fc6b3d973856e64c34edb7b745383
MD5 78d9503027a845c24317792c876e028a
SHA1 9854d44e92f96a69a30545ee14f2870611b518ce
SHA512 17232cc1b75fbb5bfa96c764e907b0674f4a2b5ddffbb5fabe49ce7ece35f872cea20e2247ed9216eae8e8fe34add78338141fa7e09fd069af874e8d7ebee369
TLSH
T186E02020FCC4C27F6424218B52544308E3C13407EE856A07BF14DCC5B015185F3D9672
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 238c282893cb0a2acf62705464d9b8cf44772a86f352811b8c16c4950ef50e22
MD5 f9ebba5a4c08748e460c175d40a55184
SHA1 48d6a873feaf50e18f19561c232b7c8a12fadfe5
SHA512 93641ec7c60d021c37c29207b02381cad330518eb4d256a2e41ae4803b481eb5d5d23622856b18e88a43f1f4e0f5bfea22041598b459a5bfbcb7ab0d1fc68883
TLSH
T1C921605AF320C158E14E863EA06F97361738D8129FBCED0F547964392E75A010E8B6F5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 53fa1245d78a131bc17529e7f25de5f679b6fd293690eb4f2093423f77eae78d
MD5 604c5f289048a19a5fb7504d4f0df97d
SHA1 0bd581882c6e0ee64eb0ed44e5326e5f3519db10
SHA512 cb7b9e0927451f0ef00962866f14121a818ed2af7430dfad4dc2535d64f6437712566c2e397e9943f2585aa93d8e51050bae21dae4975a3f13cf76dceb1f20c2
TLSH
T1B8E0D810B4C4C27F543020970375D7C8D6E13887EE846F022F049D845115142B29B6B1
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 cf35be29a960b30b93233baab08e2d63fcdfb6876496323a2aa4bde7ee7e59a2
MD5 0e90a87247e7b252b5eef7525569442b
SHA1 97a6f3381d1bbacb0d07aae90468da0abf54b736
SHA512 6e09e9d135e0270a6b9206c55060d117b02fdb09fe3efda16bb66b3bcc6bbb6665043e727a575ee48d7f8e8eb87d5eb68673c5142a833c609afda945c85381be
SSDEEP 3:MsEllllkEthXllkl2zEfl2full:/M/xT02znfu/
TLSH
T1C74404147FC5440DC70050314151D7D03370D5507535DF4334D104335CC77510C00041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 7669e77d7c4e88391d7bac6cf025223887e6d67d51b39fb3c374f4778f67f62d
MD5 edc79ea6a4b7126806b27b4a7bb8328d
SHA1 4f88ebbce45de82aa247249370a699b19d6da66a
SHA512 26e6ccba55ae6e5ea509f80bc320573bb996e173ae7c1dd410b854f987d73a192eef33120fddb7db8c57de4dc44d65403107ef2dd55459fb055ad596fca3e7a8
SSDEEP 384:nPiF9ZcI7sNd8TUNTUlI4knTZr7KT2CifbZoD9VKUs8yEKJY1nTKwBODNZOCGWwG:aFl7Ywgl+TUobbyXY1newBKZOrWr
TLSH
T15AD27C35DC68DAB7EDEB5AC5B74A7647DEF40163988C4AE4EADC9D0C008729D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 6d7a617cef0d8658efa808161e13a2809fb868708e3657f2a923ee06f5494c59
MD5 dd31a01e2ab8c4580476b379d52fd154
SHA1 86cf6a2a44d076b21e8e0160df457f78a6de9286
SHA512 a7d72682a3c0e45c6e7247ea441822de62c5abbf87c75960b6f8a7bdb02e3ecec6f2f81f033bf0aec3339e2d367c25a8c2f640cf60661afcfa29f53314428fb8
SSDEEP 384:n8iF9ZcI7sNd8TUNTUlI4knTZr7KT2CifbZoD9VKUs8yEna7s+KnJs2JTKwBODNn:nFl7Ywgl+TUobbyueDKnJsGewBKZOrWr
TLSH
T147E26B39DC54D9BFECEE6B88A74E36178DE44173D4A84AE8D7D85E0C00A319DA30BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 b23d58c28c4a791f68b30211f6a5159e1038a28968c8c3acd8040effe5b8e698
MD5 d5fc57a1cc58966e215dca9ba9d5ce37
SHA1 6518d353db2bafd161883e2bbd358ca6869d1cc6
SHA512 40d6f8e2ede1fb33c6564e8bf1802c4a15e60e1d65ca65b97dc259013c86eef479db2e28bad054fc4bb3ac222195132bc6d8234d1094e078ef8785dda646fca5
SSDEEP 384:n4iF9CcmyWCs3sNa8TUNTUlImkrJ1xJCifbZoD9VKUs8yEs74hkP+lFYS/QOF7I5:DFccps37wgLlobbyj74hkoFYS/QJ
TLSH
T163B24A35EC98CABBEDE64FDAA64E7A43DEE4016785985AD0DAC82D0D00DB1DD1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 511e3d1a6e8bd0f3b9b49a29c88b15db307eb9754fe652de42a3594df16c8a64
MD5 453324cc0f16c2dc1c27a21119ae3762
SHA1 3e10a17044e38bbd2526419adccc84cd2966e4e3
SHA512 aaa6990e43b812c3e482d1e7421716a23733aa82407a5fb7b794d323f2e15d44cdce8eda30f89319ee1d44baf4594f1af19d755914dea3bd1fd02a2ed6f86ce3
SSDEEP 768:3Fl7wwgleTUobbyX8oRI9mJnewBKZOrWy:n7uiuXbhJnevZEx
TLSH
T12BF2287CDC64997FE8EE7F89A60E25168DE80233D4B849A8E7D85F0D807619DF306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 63972ff8ae54e940390a42e0b9af88bcff0a2e6e6a0a3a81e8be298979f5bc83
MD5 050a2fb38bf34fba07f2006e2bb1430e
SHA1 0f971e7466f706f39da1b0e8bcb11b5c5e8d1984
SHA512 c0afec563cf4b7fb915d746c2ba7301d3cd3304511f80880000773dc4e3acd35a02d9617aff674bd3c0693593f69a902d1d11976caa574f53b3d166bdffd9343
SSDEEP 384:nMiFiZcIJ3sNt8TUNTUlI4k1Jo2yCifbZoD9VKUs8yEKJ8RnTKwBODNZOCGWwF7f:3FQJ3wwgpwobbyX8RnewBKZOrWy
TLSH
T1D7D25B31DC68DABBEDE65ED5A74A3607CEF44163958C5AD4EADC6D0C00DB2AD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 6491dab632b667d49623b5f00f49841d56b4b38ac9595b424469f21470c91111
MD5 f8780a67d6e1fa124125c72475b5d0ee
SHA1 3d795421fcd194598932190630d7c80bc05acfab
SHA512 e47b83470cd2ed9400271e410f201bb16aa2f98e3cf704b352e384b54fa5a13729f34536783f1f22efaa7ddb831c25535f97e99afc25060bcfb45702fa40c983
SSDEEP 384:nViF9CcmyWCs3sNR8TUNTUlImkrJrRDCifbZoD9VKUs8yEKJkRhkP+lFYS/QOF7w:cFccps3AwgdjobbyXkRhkoFYS/QJ
TLSH
T1D7C25B35DC98CABBFCE64FD6A64A7543CEE44167858C9AD0DAD82D0D00DB1ED530BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 e25eb1b12af077fd057a6ecbdb0f3f4505fd3ee37a92ee1a86d5feff02af90ae
MD5 2c69715372b72d2635085882c33fac75
SHA1 e2bc74c03f487a8522de5b19113c4a06c4999dd8
SHA512 1a2151af3cda9427aaa7f59ee6ee3015fb3aa5238336694a1e6411d7a0d6cd628e44ccc2224c952266b485b8ff4d76f97e6d8f9c2cc9ba4e8e7a2c0cd505696d
SSDEEP 768:3Fl7wwgl7TUobbyX8oRI9mJnewBKZOrWy:n7utuXbhJnevZEx
TLSH
T108F2287CDC64997FE8EE7F89A60E25168DE80233D4B849A8E7D85F0D807619DF306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 77b66d7def1571be04774cdb46e03e2a8e592a1d4917624044a83bd20b794f18
MD5 828ef6fbc549cc0410494a22e004951a
SHA1 0a62634e13365f8786b84d51fdb43364bd98a427
SHA512 530a9a0e3e921ab3ab41265c2cf26ec99dc1e7f06da8abada97db9efb1a354732bbe2fe77fcfe4094d66eb2f106d0556899e971b010634d5663ddc8c2122218a
SSDEEP 12:TLpOPFUxOUDaaWZXiDiIF8izX4fhhdWeci2oesJa/Si3isOmQQtudOzQdFVzcQAu:TL85UOl0afDdWec9sJ6AGDB5fc
TLSH
T12992F162B9312023ECDF0B77F94348D00DFD16AFC9A7B804DAD04D6109A2BC2A6940FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 2aee91a3944e1cc16b45825ffa8ac4c21db8cf01784f5aabea42af4ffd7b7bf9
MD5 141461ce7ef3c09921ebaae2d9e85305
SHA1 f63d308a44221e0fa3911a38a434f3af68b9f5bd
SHA512 f6a7f4de5a518ed59283591e338d49cc598041887f878469048ad96d67778c58c4147152a9c9143de0c848b6ecb56a6a8d27840c669c50788d56ab15ad769c51
SSDEEP 3:MsEllllkEthXllkl2zEflMZgll:/M/xT02ztK/
TLSH
T1C544041C7FD00447C701107040D1C3503374F4D07511574334D144335CC75501D04100
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 eee54efd5e7df46b4e00c324e7e7e606644fbb6427e6fecc737627749d678195
MD5 54e09a70918332415778bc8b0f7be78b
SHA1 4c2506eb14abc9812b41a843ec7101400de00c69
SHA512 aba7b2bb2b851b7294c806ea6c97a21eacad6ca858c82f3e7d877089f0a42cf24459d37bba75478155b225b57220906bc079e77cd0e5269dc38c91782382ac42
TLSH
T17F4100D00C790AC6C9BD0E7EB4C738FD81EC9625F4A4343868A8EA995A7961D349483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 6e62996efa85d81f17f748b88a2f331706c759465ee3d141c10c97984991cdd1
MD5 6020a85c0ab7665b6b549648ea68196a
SHA1 e49e33cd2bafd41dbaaa9ce3b8fc49baa0b47989
SHA512 77136dc591f35c6ceba628ee5e6a74d3eb64afb1221979f575ed0e15e541642bb06f559273ad7a66b7990d91edf5fa42e24542bd9b5aee5bc69dfa32c2c1e4bf
TLSH
T14B4131D04C791AC6C5FC0E7EB4C738ED85E8D725F494343828A8EA985A7D61C349483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7ebbfee6fc7ad43a55101dfbabcac66c09eb5e2a9f9fce757a604a1b7f34824a
MD5 fc31e294233dac9bcebb00bdc7771f0c
SHA1 fcaa5d4b30c295a963482a80cb985960b82f9c54
SHA512 7d21fcf1b8e95d865164c72a4a1a41c343de53eb8393f1b300748e650c5a6daa09e8916c0d37184c9a374db42f7397f552b2ae74da7c8939cf5e88e830045bf6
TLSH
T103412FD11C390AC2C9BD0E6EA48738FC91E8DB26F5A034796898E9841A7D62D709483F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 0fdf36228e382b434b70bdc70963919182d21fd7f47e0444722d8918fc8fe561
MD5 96a191107ceedb99fecca0a45ff42528
SHA1 b4ab7d628497876d501dff8998c41e756ff2b8c6
SHA512 616aea50013233f4cfd32c736481c03ab813b0e18c84486379d93ec97cb362f54ceb75f79fb8eafe3afcb7049d731883f6fda3b2c535d9abc4db6cd5a5792e9b
TLSH
T17D4111D04C790AD6C5BD0E7EB4C738FC82E89B35F4A035386898E9985A7D61D349583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 4e3e18acc1b107a67fda78ad94d8d434e97f805c8a744150aa0bc8f6b9515d45
MD5 9ce8fde856ce58623cb2544677600479
SHA1 630882a64e4a2818b7ef7371e5a16e194c59ef05
SHA512 f9bbc567408018d0bde478a222c11b5f0a462593ff2fdd3de58b6a91ef8adda4a2eb7f0ed4e106e3e674b066e9115ece019c5f446394c7645b908bd5d2aa3ad1
TLSH
T1FC512FD04C791AC5C5FD0E7EB48738EC85E8E625F4A4343828A8EA58597D62C349583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 bb9c535b3069980628248a0c2475db296879d3db36957f2fe42750222a799b6b
MD5 be0a51b8f2d84635df65ed64293c9ce1
SHA1 0fb1c50672462b1994f9bc02c0f1238b331fd679
SHA512 37607fb0b59580c65842d0ec17a86b639078e624954e97688e28c2f1e186fed48032d11bc53ae55756c80243f7cc113d03406caa4875c39bce45542c207d5b3b
TLSH
T1125131E04C795AC5C5FD0E7EB88738FD85ECE625F4A430382858EA585A7962D348583F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 39e6885b3632b5ae0c92e48b96a94ac0550409631ed6b53bb0618beae6383df6
MD5 aea9f17cc4a718cdd1c6c6f6add0a8c2
SHA1 88240b9820f665609d39ca99c18468126719900b
SHA512 72fdabbf4a97daa6d8833adc44643f51cde107314bb2e07e7060706043381f996163b2252c1cb1e6edd52f6a71c889158f196bc7cb856498e606838c1e03eded
TLSH
T1734120D00C790AC2C9BD0E6EA4C738FC92EC9A25F4A034386898E9845A6D61D349483F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 995c08bf74bb78bc19636e8389249fd356c9388a1f806f45dc4fe3763538d229
MD5 728030251b9bd761baeed56e72795308
SHA1 7b906790bd3334fd32ef51b24c9b22ee09d761ef
SHA512 4cee98d5841c940889c4e396b7318de5cfe24523117720a1d95bf96971799de2d692c774717f84f635daf7419a130cb5725b13288fce90e5af8cd0905f8d0159
TLSH
T1C641EE58B6E91108B3B76E1A9BF6A86E44BFBD772F4AD45D00000D8F0A22B01D8A1733
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 dcc3dbe42443c41384751a124077dfe0e86f2fa2e4caed83280f1adc0a010e0d
MD5 b43637dd238f077a4324a00d911e57e6
SHA1 739792ce69e576262b83d628adcc71f3eaef252c
SHA512 2608988079cb4ae07b31b598c3488296ac4a9721dbb4a3be8c5158a9d1de14fcb769a59cdcf499e5b068907f9385a1b0a3fe3d07ba2a9607caec4fa290c5016d
TLSH
T11D514E68ABEA1154B3B3AE5A9BF6786D447F7D733E0A945E10110E4F0A33641CCA1B37
MD5 SHA1 SHA512 TLSH

Submit Download

41b00b11-71ce-4003-ae03-a7a0cd744e9b.tmp

Path C:\Users\Admin\AppData\Local\Temp\41b00b11-71ce-4003-ae03-a7a0cd744e9b.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 8cfed0802193282bf7563a9a62387bd0c6678a632be17d359c4181b5659b11d3
MD5 a5f1c8fb562646be5c437d85e9d03d80
SHA1 0b97513afe42c32ddb497a1f32e5fbbe768114a9
SHA512 8518ebd905a422db0b19682245f957cdacca871594924648fb6e73849c8bccbc672d88736511c8e99a9eb89c49383f4202cd3b44f6f8c52c0be90a43b0e1bb3e
TLSH
T1304109E53935A23F6BD387C460754C845561F181132F9A1CAE1AC434FD6CEE2A72EBCA
MD5 SHA1 SHA512 TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4148_719893450\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

miniwallet.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

notification.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\Notification\notification.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_1067445687\json\i18n-tokenized-card\fr\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4148_2080030564\edge_checkout_page_validator.js
Size 1021KB
SHA256 4bd84a271e6aeee39cc614bb6fa9e60ad465f61b6a305f9f69b995f9af910219
MD5 84017bbd252b4e3da14c6c6f7966da0c
SHA1 619a6e18fddfe2003aa3799e48a30d4e4d1be2ba
SHA512 719563802aa0f7154333295cad12e0184c2da0108bcd5e009e0828326094e9d49fe16b1fd5de874ce583896c32a85659d554d1816670ba17bc07b4f7a97f657d
SSDEEP 24576:j142AzAtsJvGxkVKA8nG8O4cELKXnhw5BD6Nc6U2y8enpBtSLVzhEiJsfaWZPS6Z:j142AzA+JvGxkVKA8nG8O4cELKXnhw57
TLSH
T174252B80E1E2253466D74CB960B7D2C4B5DC04587399F1E8FA6C68CADB0F94723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/876-1329-0x0000023CD8AE0000-0x0000023CD9AE0000-memory.dmp

Download

memory/5392-500-0x000001DA30130000-0x000001DA31130000-memory.dmp

Download