1a29c4ec41cdb0557a708e0dd3e917ed633c43e0c247a0febf051db29ffe60ba

Analysis

user interaction
yes
max time kernel
108s
max time network
111s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 12:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Remi2142922040_pdf_wfdefm.html
Size 11KB
Sample260826-p4dxwsdr8x
SHA256 1a29c4ec41cdb0557a708e0dd3e917ed633c43e0c247a0febf051db29ffe60ba
MD5 b0942a4a84d4036441868d76636c71f8
SHA1 7d4c8a6605fda1b1d7f5bb5e0771aab64330c684
SHA512 4277a814e5f99d7c5908fffcea478c4f39234d881a2cd5f5e7d336c193c5433ad02e330ad04800376888c82fba83ff2b9b1fa7e8c972a49585ee14e6d9c8ed23
SSDEEP 192:COcLN1TQguEDmRufdUXXMWFwE3JRG11jmj4WC7kcla6fx5KMDtByn:CDxmofmXXMWD3Jg1jmj4WC7kmfP5ton
TLSH
T11F42AF13A89A77E48B3A0B752D3FC10C822D2D54E64DCC11B47516D5AFA26AACB037E8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL 6 IoCs

phishing

description	flow	ioc	pid	Process	stream
Email address	60	[email protected]	1064	msedge.exe	25
Email address	60	[email protected]	1064	msedge.exe	27
Email address	60	[email protected]	1064	msedge.exe	45
Email address	60	[email protected]	1064	msedge.exe	47
Email address	128	[email protected]	1064	msedge.exe
Email address	128	[email protected]	1064	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1064	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322223719704872"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{B7426641-5D4C-4C6D-8B55-2EC3297C596D}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe
4408	msedge.exe

Suspicious use of WriteProcessMemory 59 IoCs

description	pid	Process	procid_target
PID 4408 wrote to memory of 1848	4408	msedge.exe	85
PID 4408 wrote to memory of 1064	4408	msedge.exe	88
PID 4408 wrote to memory of 1644	4408	msedge.exe	89
PID 4408 wrote to memory of 1644	4408	msedge.exe	89
PID 4408 wrote to memory of 1644	4408	msedge.exe	89
PID 4408 wrote to memory of 4664	4408	msedge.exe	90
PID 4408 wrote to memory of 4664	4408	msedge.exe	90
PID 4408 wrote to memory of 2296	4408	msedge.exe	91
PID 4408 wrote to memory of 2296	4408	msedge.exe	91
PID 4408 wrote to memory of 2296	4408	msedge.exe	91
PID 4408 wrote to memory of 3372	4408	msedge.exe	92
PID 4408 wrote to memory of 3372	4408	msedge.exe	92
PID 4408 wrote to memory of 3372	4408	msedge.exe	92
PID 4408 wrote to memory of 4604	4408	msedge.exe	94
PID 4408 wrote to memory of 4604	4408	msedge.exe	94
PID 4408 wrote to memory of 4604	4408	msedge.exe	94
PID 4408 wrote to memory of 2532	4408	msedge.exe	93
PID 4408 wrote to memory of 2532	4408	msedge.exe	93
PID 4408 wrote to memory of 2532	4408	msedge.exe	93
PID 4408 wrote to memory of 4248	4408	msedge.exe	98
PID 4408 wrote to memory of 4248	4408	msedge.exe	98
PID 4408 wrote to memory of 4656	4408	msedge.exe	99
PID 4408 wrote to memory of 4656	4408	msedge.exe	99
PID 4408 wrote to memory of 1156	4408	msedge.exe	101
PID 4408 wrote to memory of 2276	4408	msedge.exe	102
PID 4408 wrote to memory of 2276	4408	msedge.exe	102
PID 4408 wrote to memory of 2128	4408	msedge.exe	103
PID 4408 wrote to memory of 2128	4408	msedge.exe	103
PID 4408 wrote to memory of 2128	4408	msedge.exe	103
PID 4408 wrote to memory of 3984	4408	msedge.exe	104
PID 4408 wrote to memory of 3984	4408	msedge.exe	104
PID 4408 wrote to memory of 3732	4408	msedge.exe	105
PID 4408 wrote to memory of 3732	4408	msedge.exe	105
PID 4408 wrote to memory of 3732	4408	msedge.exe	105
PID 4408 wrote to memory of 5116	4408	msedge.exe	106
PID 4408 wrote to memory of 5116	4408	msedge.exe	106
PID 4408 wrote to memory of 2284	4408	msedge.exe	107
PID 4408 wrote to memory of 2284	4408	msedge.exe	107
PID 4408 wrote to memory of 1996	4408	msedge.exe	108
PID 4408 wrote to memory of 1996	4408	msedge.exe	108
PID 4408 wrote to memory of 3808	4408	msedge.exe	109
PID 4408 wrote to memory of 3808	4408	msedge.exe	109
PID 4408 wrote to memory of 1748	4408	msedge.exe	110
PID 4408 wrote to memory of 1748	4408	msedge.exe	110
PID 4408 wrote to memory of 1748	4408	msedge.exe	110
PID 4408 wrote to memory of 3064	4408	msedge.exe	119
PID 4408 wrote to memory of 1904	4408	msedge.exe	120
PID 4408 wrote to memory of 1576	4408	msedge.exe	121
PID 4408 wrote to memory of 2284	4408	msedge.exe	123
PID 4408 wrote to memory of 2284	4408	msedge.exe	123
PID 4408 wrote to memory of 2284	4408	msedge.exe	123
PID 4408 wrote to memory of 2472	4408	msedge.exe	124
PID 4408 wrote to memory of 2472	4408	msedge.exe	124
PID 4408 wrote to memory of 1820	4408	msedge.exe	125
PID 4408 wrote to memory of 1820	4408	msedge.exe	125
PID 4408 wrote to memory of 1820	4408	msedge.exe	125
PID 4408 wrote to memory of 4296	4408	msedge.exe	126
PID 4408 wrote to memory of 4296	4408	msedge.exe	126
PID 4408 wrote to memory of 4296	4408	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Remi2142922040_pdf_wfdefm.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffcf9edc188,0x7ffcf9edc194,0x7ffcf9edc1a0
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,14964981393211243423,12124576561422738127,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - A potential corporate email address has been identified in the URL
  - System Time Discovery
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,12793146184699426724,5845408452059531116,262144 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,17605189080935344893,11958460319280939965,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,11233689569172082619,8929210048062396497,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,3956020140411425529,5527540712806946905,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,16269295861231589526,6659469281617440143,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,5947626027090636771,7633854015219398399,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,10607935970070489092,1186844572793276118,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,6544275957961423385,11600119935214730155,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,3760673566744774884,3098820657871011559,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,3760673566744774884,3098820657871011559,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,8671484694061551728,14284675863738974213,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6396,i,11492852625296550039,17965828848750954962,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6672,i,9350264830698223494,3818897785877187355,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6688,i,16575344858560890989,7518714017118328682,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,13613891228394179890,6077708704697447895,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,11136404505961439069,4499109450973587343,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6808,i,14124922860916063180,7318717395454669943,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6968,i,7149280777456836391,5216771885699669708,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7288 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=3500,i,14546815743269650455,15702184165815099426,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7828,i,9256414715122297030,11303573174859705671,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:8
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,8735617184832277888,13618424474157377437,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7772,i,1359926319818336399,8180906734263523135,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7796 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6300,i,1527160622072205594,5798860665673631199,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,221670434088427017,11566487805159584031,524288 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7824 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6688,i,333478434929323621,12091610618697354773,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7284,i,11276682501755433311,353286284420527614,2097152 --field-trial-handle=2272,i,6321304621941419025,9523260832930169613,262144 --variations-seed-version --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:4296

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3360

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ae53e618032c667892ed21a0d220c217b0a8d7911b3dee86b08e6a49f9b5961f
MD5 f9f19468189111f8249d81621e4a102d
SHA1 fa68cce6f26f82bf96fb875ff427a4ef9e9673b2
SHA512 d53cb2328cd19d1ba8512d1ff3633af39c02eed400e5983853154f5b66c3341ed3d1103439b7c80316b2363de07a7530588d76f9e262920e057331d68d3f3bb7
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7h:fwUQC5VwBIiElEd2K57P7h
TLSH
T18DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000093

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
Size 523KB
SHA256 0fdd9b81b67e8a211960fc4716e7fd21c2b858ae924b77ddb44889f0a053d294
MD5 4a9d763f9380e7493876fb4f597ebfb7
SHA1 39141ec613ae977dca4162212cbad697e972701c
SHA512 9ae653854cf817cb57e91e3692386eca71a6b6226d3797ef0c801c59b62928e33daf3f274f24511d951299d52f1d6852c23ddef5e25137c156e0e80381458c6c
SSDEEP 12288:KIsjmTeiTKsAIAd21a6+mA5FIAyKdzu/WO9Bbo4PyJBSpNnHb2:K+thAIAdwDoF7dKP9Bk4P3bHb2
TLSH
T113B423661F4FA28F1F01BC93FC93C0266937E2A2792194EA945ED53875F32340ED361A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 491a7eafefc9cdab55646beece0be129f2fb990e0813752586a5de080f9d9fac
MD5 7885812d708e2dcb5244ca98cd2c4ad6
SHA1 3676e95b4f8394224cf6505c57a8241d927eddac
SHA512 427ba505c022cc5e188108f924a64f73c5b9ca22faa6c5b44a01b0e68d64f52a02abc783c0ebe7e11c8ee09dcd82290cf65de37b64e5d396ff87afaa1b40cd3e
TLSH
T16A81A53311F3C3A2EBD1423062C2607DF9B589EAFD3BDEA6555005766E38389A718F18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 8de655cac6623bb13f6c9a146ccd4bf9ef1eddc235ac009e2575ea9cf1dc5803
MD5 f96b09ab12ee09fd8a7e46f5b7b37fd4
SHA1 8080b58cbd9f0504c62f5d1aa251aaa6a624dd29
SHA512 f5e40d8f11ef6555c40745c95dcdd9dcc5f1cf150cb5fa3a5eeaf75132572c512c20d727d8a553793fc317f58f7b41610eb3aa88d6c58b507385c26fe614ba4b
TLSH
T1D381833311F3C3A2D7D1423062D2607DF9B589EAFD3BDEA6525005766E38389A715F28
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d31a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d31a.TMP
Size 3KB
SHA256 1fc32bae0e0462b5add0776cf2b927eee04407e30acc7807d496c0c0b8e02d0a
MD5 c26fe7fd8708ff10af9ba037e03c156e
SHA1 46cd77a9f1705f3d0d9ea1c716050c67f2c1e237
SHA512 229d51479039263f1a50eb85a5b0094f2b2d3553ec67e3cf8041913455aba6eae043939ead1d7415fa51ab69f10825351c93a149b5363088529b68f540882cc6
TLSH
T1DE81933311F3C3A2D7D1423062D2607DF9B589EAFD3BDEA6515005766E38389AB15F28
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4408_944004160\CRX_INSTALL\_metadata\verified_contents.json
Size 2KB
SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
MD5 c7182c4ef7a2cd6a57e48d44bfd4af9b
SHA1 2e1e4746da948d83baf4bcebee618784f8ab209c
SHA512 d8af16336b66e4f264eda4ea68de4c1763a9c9b99635184d9ece67a9ed69a09bc1088bed254b3d2a8877ba3218e043065d1e4a06c20f18b58d312d93fb84bc83
TLSH
T1BA419322CCA5BC1F293173704EB90662AB0595AB2081295A70FC099D3FF15666436EBD
MD5 SHA1 SHA512 TLSH

Submit Download

filelist.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4408_944004160\CRX_INSTALL\filelist.txt
Size 134B
SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
MD5 3bf6b4eae5af15288bf0d79702f9cb78
SHA1 b8a052dc4973757ae865661ea0300dea1d27f3b6
SHA512 25e2502ad314635035f303aa1f0f195c28af91d0b51280e5a4c9310aae65aad857073137196f41a9a2fd7ef96e54ce9b329c448d5acf87b10134168ee7652c0c
TLSH
T1C9C04C206C0494B7810CEF55C5F9FD34940616007E33DC8913584270101B68E8DB5324
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4408_944004160\CRX_INSTALL\third_party\babylon\LICENSE.md
Size 9KB
SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
MD5 e57b8dbca804bf4a2db759fa1a70b3cc
SHA1 8acc131b3698964249b08a0178f7c8c467337048
SHA512 d2ca91851daeadedcda21ecee4cf7c9244cf21a15709e472014ba6a332a374cba80acd165b2650ce2c3994c7d0156376c22db00fe0c47833e0fca466bcb8c627
SSDEEP 192:agW/NVo4UTo1YE+FNzFE6GGfGb2y1CVzho1oHqxQJbbLwY:a7hUk1+bXU4qbQ9l
TLSH
T18E12427F7748137B0AC30172B78BA4DBF32E903C3B9556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babylon.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4408_944004160\CRX_INSTALL\third_party\babylon\babylon.js
Size 1.2MB
SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
MD5 e1adfd8f62854c2d9ce65f13268c1ac1
SHA1 d564ea1d59305bbec12995ee43f1c28838e82519
SHA512 ffdf74b8bba179c7d5d6d49205b8aebfc7b27395852d05f1ae5de5c23b5dfbd87776f2046fad20b652a7663dacf90da0336a802985bad14ba3591bbfd9ca4caa
SSDEEP 6144:j7WIrpHJ1yA3d0xEWv/v/82mXgBYdnU7yTGpjGp8MTYgANTJCpzesRGvJaGpLsXW:vC/ErriNqfGp0KV
TLSH
T175450999B3217926478390A5143F090BA33B68DE940540BCF299D8DFACFD149667BF3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir4408_944004160\CRX_INSTALL\third_party\typescript\typescript.js
Size 10.4MB
SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
MD5 d931cf27eb964f239e5bec661810abf5
SHA1 1616508213014fa7cdb50e691cf737169019c6ed
SHA512 9c2bae1025c1c9579e5e7ba8119e11bc298bbf968aaaaea94f12b8a96155f63bcdbce60deb1445c484aeef3fcfdf96156fc804c2867726617e7b772440989fb6
SSDEEP 49152:noUsnsTsUGJR5dZjSB1FBUWx3pZzoYzuQRlbVbOFeWSeoMTNKtsL4IMltR6SMF9K:BTsUqRIb3nYz1q3X
TLSH
T1D3B6E6BE79E330B16A5B2136672F8001B735D257220CD8907E9CC3A95F1587462EBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js
Size 8KB
SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
MD5 7f32ca5d3f52675f538b041bd67c0444
SHA1 a8f6a8ff69ba0b3ead7a44d9b64fb009ab0e4e57
SHA512 ba763c633c8a959644535e9a2999e229db42c2fe61a57fa4e58136a05aa29d445f5e4278bcb5b529bc35e443534e516bad7cedc6d0ca2d408a5fe412f6e56df9
SSDEEP 192:95G3OvolW6gQWaxciQV23vrYbSrbS6tk63yidWJvy3BCd2nx3D8jyiQjElDXQqA4:95G3WoaaKDqxVIFB
TLSH
T13C02215EB8F62032F017B576197F8009B63540137418CE19FBED93A4AF92037A993ED9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DevToolsPlugin.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\DevToolsPlugin.js.map
Size 16KB
SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
MD5 9eb2d561a925489b69a25fd78f7b47ab
SHA1 d989f19f74b1b436e0f84b29a1b6b99033e26603
SHA512 cfcdad655a516a610ee8b6d50d62868f42645e003696438668f8cc0aff0d9e9c569d878dac1cbacad7403b1816197618c8fb1ebe628dfd456fd54447cdfaf9f8
SSDEEP 192:fVuVl3E3tRsSjJ5FWQzgFMO4+wxVdGdFWdYixmrfReRc525y8uj5p6UJO1DsWy:fVuVlU9jFWQzVdGdFWuiYro5y8eQDg
TLSH
T13972881720BAD837B44767A718EB81A67E20545C7D98A70479CCD302F3D2F3BADB2865
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NamedFunctionRange.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js
Size 1023B
SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
MD5 fae98d8d75b2ddab58eb531d3c08a8f6
SHA1 1e197513c4ce482eb6aef6c436afba74c1c69e10
SHA512 fcb07e23e1e96f5d3141dcaa389b9e250c0aeeb94dc3dda9c9005e49b41f5c4b64b13cb68facabffc8c40154e5f25f5caacb1d41da4ce46e2b5050e74bd9cedc
TLSH
T1A3119B2B59EA1926AFBE2413BEDF33485631010B5CF688DCF42D93406F614678CB1F91
MD5 SHA1 SHA512 TLSH

Submit Download

NamedFunctionRange.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\NamedFunctionRange.js.map
Size 2KB
SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
MD5 b2816c88b5f892e2a6c0cd97af1b5896
SHA1 d422ddf8f1513981c623db31579adfed682bf54c
SHA512 5754bc51de04ad9e73849c1c0aaaf7702d0673b7f55b7f289a1f2c6f370f55a758f15bd7574097c5eb78aa236a2b47d58a7b7550150ed29aa557cce0b6166daf
TLSH
T11F415813441DAD333E1B225BBDDB16A52F31114D6CA82758B49DCB25B3A2F378971A42
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\_metadata\verified_contents.json
Size 2KB
SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
MD5 70f58c8151600335b5ec548cade5b98b
SHA1 b916376a8c9e19541af0a787845f80535656478a
SHA512 e8fdf5e299909f96733d0b11c0617d3ca06a22283438f04d7395a4799c04672fdc5f7770e84b4cd0c66311b131e15c2e24924ce1f5e2417dcc9ed495b9685129
TLSH
T16451E730C470359C2D1A12304EBE1363DB51A3AF20817D1B38DDC89E2FB2B4754A7CA9
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\LICENSE.txt
Size 9KB
SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
MD5 f632dfdde0adc0da86f701c6f2df38af
SHA1 5a7612b4d9977a7e79f60e88df556b09a90df828
SHA512 87722a2d675028d18ea276dcf18c24e891a0bad5f85f7387702310976d2fb8e1d0687321b0844b6c47947e6fbb489fe08bd1ffbe9772955ac7191ba4e274c8a5
SSDEEP 192:rwqW/NVo4UTo1YEHFNnFE6GhUGi2Re1CVThOCoHqxLJbzjwA:8ZhUk1Hf4Rg2HbLNB
TLSH
T19C12637F774903770AC30172B78BA4CBF32E903D3BA556644059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript-tsconfig.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript-tsconfig.json
Size 91B
SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
MD5 40d3e3fbfc100769071a2a27040e33f9
SHA1 e150fe3170a949d8a5d86e9135726cfdc5be6c59
SHA512 3ec8cab677386a19d82240628d27b0a1fcdf1aee56f59cfee994aaea96a1dfaf2b3eab73d0c1902503bac61bb2aef5ab281e73e4b0078994b1242104d9bb2830
TLSH
T13EB01220C5280C1006F975440F2D90018160594286565E2631CFC1384756634043F360
MD5 SHA1 SHA512 TLSH

Submit Download

typescript.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.d.ts
Size 486KB
SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
MD5 9f7f369b169033ee919dba043b424a83
SHA1 ec2ec5846812d366045c969e5e03d037a6e1cbdb
SHA512 f84397b6219a1b07a1d5c1f9a470e1fbd9d3e7143c55c7ef345be147fb0a56b8609e97708cb0482711382f448da57b7fb0b1a55a9750b41d2083d9c86e74aeb0
SSDEEP 12288:HGeBiBCdVZ+dISrJXnMEEuIwmn0NtIRFqr0dhbPzPKUnrjM/MqV6VQ:BBiBCdVZ+dISrJXLEuIwmn7RFqr0dhbS
TLSH
T1E6B4C6A768D514B1091580E26AAE9041DF34E3A33719D0B5F5EC83BD0F1EEE917EB398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js
Size 9.2MB
SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
MD5 fb1c951f849bca76b6aeec81fafb1ee4
SHA1 12a47c6376f82c9d529b0102d82214b8cea02e71
SHA512 bf05030b66e25e7ba27b0d999a670b582d602d639e84b1f6bef01894a95420e1f94c88cacfd841bf7ac4838754fd32e398cf0c5a4c362091ec48d8d572bb4dd1
SSDEEP 49152:8eg4L1W7tVtRPj3HydvhWw2e/L5/sW5iaVf7bnePoMM8AGdcBeEmkCPt2sr+nVsN:LW7t/RF5PB6kl
TLSH
T148A6F8BE39E230615A4B61766A2F9001B735D267320CD8D07ADCC3A95F1583462FBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typescript.js.map

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cgjgjfacjflmgphhhepmbhhbgjieaecn\135.0.3176.0_0\third_party\typescript\typescript.js.map
Size 6.0MB
SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
MD5 bce05726f69c72ee12576c1ea1a3fba3
SHA1 575168a99c46fc263bb371e09be457d5c18f53be
SHA512 453cf0fc7ceeb1427ccd09bc16ee1354144fba1eb721b72c697eee4544a5fe9b641404d4de715e60dabf68a6ce1a6711353ed3161f442a1d5279a5fc666d865d
SSDEEP 6144:ITyuEDfQX2uiFwGOCqjXqW2N1ekQ4n5LeW:2PX6D
TLSH
T10F56A00201BBDD6BB45B16AB29CF81F2BE50849D7D98BA010988D715F4D2F3EBCE5472
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 f8f45db3fdf7e1ac306bf2b969fb71e4c4666250e2911f2b241653cc571eabbc
MD5 37e8f2f72665f8241827581b753fef5d
SHA1 c0aaecf97a976de9c429bdc149a1683523849c25
SHA512 87ea1a3f38f1a0cc3d1437ec63f7a9a93fecc287be9e3a647f11a13cba69c3315d247ff16d71ffcc909363f7884a72899885717fa55b31499b523d3e197c56b4
SSDEEP 96:D8OVWu6sLzgGjldiwR/55SgkBqj2uMscBrOQ:D3VWu6sLMGjDiA/55SgAqjd7Il
TLSH
T18E91ADF783E9836EC9126AF0AA18AD1EDD5C0615431C3C6AC8D5BE0FA3E2571E14564F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 19KB
SHA256 2eb9686cbf54b1d2507cb51517ccd542dbe8c7bfdf59171f8a9871fa32b591a8
MD5 a436f2de1a5021d96529fe11857f34e4
SHA1 f9a5b723e11d2040618743f5d9fd5b418595687b
SHA512 af0a1a0015ac973fdce0f79f67b3b34b8c48a18d555cb7d95a61e4f3df6859c99accee78ece444c85fddc90b9d0faa213a187999066c0cd8f52fbcc79272ceed
SSDEEP 384:sxZ+41U/fJZ9ZhZgZjZRUZyZeZOZj41xnOkuJzvkjwGfopLsJDrqHbG69:s24U/f3jfW9RC8wAefopgD+HbGU
TLSH
T18392E7059524ED77CCD6A71EEAB57F73D5F5462682802D6C68FCC60C40A6AFC211BC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 33KB
SHA256 c581d86a292e9d14a1a138740ff877bb239d70b6fe26d182a17201c8782100f0
MD5 7e1619f9f0994dd7387cf545b1928eee
SHA1 488964bb8905928ddbac7029174622ed9343847a
SHA512 b1f25e16cf6bf52acc8d4ad59516ebd5c898d6358772048585b0885a2b49ce046e0676fa27ecefedc72d23d1024216a929f6d4f29e5d20dbcc9af2c9a5ce3f07
SSDEEP 768:vPUBsqxXlWvJD0T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsx4Ll6AR9wroYWv:vPUBsqxXlWvJD0Tu1jafx4LAs9bYI
TLSH
T1DBE20A3B294CCB7E4F840E5DEC26AED76AD801CBA6988D5447F6884C02C77EA11175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2f2f5dc54466b2e440eecd1ada9af12d2aa385972837d586599b8dd23a4e3a60
MD5 5ccbd2bdfbedb486310dd923c0ea2a03
SHA1 0c25893d141564b363d496c308c44259b24c59b6
SHA512 f6d8c6da2cd7f1d5baf55c72ccde4317bfdbd2f3223072da3cfc82db8d2f1b37bc2a906cf5e6ab7cd21a071cb2f350938054282006938a5c06d125fde21c8a8c
SSDEEP 768:v7sqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9wroKWx:v7sqxXlWvJD6Tu1ja54LAs9bKO
TLSH
T13AD21B3B694CCB7E4F840E5CEC266FD76ED801CBA6988D5447FA884C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 29117a87e0442fb04add0c39d082359f1279b7c40c36ee3edb46d51584fbda1b
MD5 b23b8776a59d2ef1b9c5323917f32b0b
SHA1 7746439f725e9c416a9cda11bed9f7be4fd220a4
SHA512 da9c1e039df50305f9e3877b2a82d2f3ec2689782c4b254f5cb39e574b935606faeab933833712f31aedcbe4f7ec954802f515064e77e73ee811da0dfe76e951
SSDEEP 96:KYbaKYIKOj+Kg8KmFyKecx9OKe4KuBuKK4r:ExJNRfxVC
TLSH
T19CE1E512723B020138BD295CA2DAAA379E8175633418E4FF7BB950A64D66F214CFDDCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94e1d11a-f4f4-426d-bfd8-2b8fa5b1c46c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\94e1d11a-f4f4-426d-bfd8-2b8fa5b1c46c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 13254c0531264bf8dcd918b30ffc38eb0646a2b321946d6deae3ade85a63fd86
MD5 533be915a9e8adcbb945858876d39664
SHA1 f49010d65b99dd9c428b1778c2d1b9024ece9926
SHA512 8feb143483427a285e9260a1f3f5955602cbd31c3d2198b092ebdf8cfc352b948145bd2e7391c5ce665a4dcad6b4083572e3fd3b975b20e5df2cec5be41dcc41
SSDEEP 384:c/ZcILsNBMzbqShVRNZO5s9wd+HBbsi43o6:cXL/HHZOG9wdg03V
TLSH
T14E928D726C789C775EF6A145FA8736034EB88027A7CC2F90D1DC6B1D05DA9A9130FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 12453795a34cc98b268616ab2091e7fa41fcd3a960e8fe6c42ffb60e601956a2
MD5 99f9d59e743a41af9864f821930b0bf4
SHA1 9c12e2da921e5176645e67de380ee7f5299ef446
SHA512 4c6f7fd8f9aa90d7b13c4f6f3cc1f17fc52a604dda0dfdbc7356f17cc180c5de7c06a42b8a56eacc554117743733059ddace350cee4dad71a09baafc5375c43f
SSDEEP 384:hTZcIhsNbfzbqShVRNZO5s9nd+HBbsi43o6:hLhOHHZOG9ndg03V
TLSH
T138827D725C789CB76EF6A141F98736034EB88067A7C82F90D0DC6B1D05DA5E9130FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c7e46788204368de55f388dd4febc68b0fa1eedfb2b035e22d52b2a924b87d2f
MD5 ff94b128da912b869a3dd0b68cffee4b
SHA1 7e690529312a900569ecef3d28f435cec8d936fa
SHA512 8783d6bf773e38c00e47044408691bdcae3aa199baafd5e7b2aee4ac816967f1cf9ec47bca8cd2fa905504d7e89dd7e6e85ef538ceedf08512b81f4d08cfbaf5
SSDEEP 384:UTZcIhsNbMzbqShVRNZO5s9nd+HBbsi43o6:ULhxHHZOG9ndg03V
TLSH
T1DC827D726C789C776EF6A145FA4736034EB88027A7CC2F90D1DC6B1D05DA9A9130FD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d71d839652661e624dcf9e11e4705d5664eb75b3aae477257d8d54cd7671d38a
MD5 28834c3b1139b89db223e073bc4a362f
SHA1 883700773dd703190bccb44eed57407df3d923fd
SHA512 a6a494a246311cafe776c3c2b19a9e4afe7db2a0b6189da768cdae4e5af3312b9a594208ca573adcf3902c937845963e774a48d2b837aeed4d42aa8e6996bed6
SSDEEP 96:mqONk0QsjpfHkRQ9865ih/cIPURHl8h4otop5QTD2BsPvvk40KQN0kjOmXdwz1q2:tONc6JkRtQmiUy6mW+RNZOmCMh3XRkU6
TLSH
T15302E8357D382CBB8EF26D09B98B27175FA5206BB9952F84DAE81F0C01D765C2347836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 43e7b455a905841d38688d351d1efe2d093cc34d66cbfbbe2826171db9695221
MD5 de833aa0de8f2e5078861a1e634672bf
SHA1 50495c5e342b168a17954db5a8d66b50c4f8addc
SHA512 0fca475e76403a858e4d619834ec06e349f072a6b88c1db9c013d98e1bec040caf973f79f18c9278785cc1b113c6d281d049e3f897b57b9ccd8ef716f6e4f932
SSDEEP 192:rON26JkRkQmiUyEmT+RNZOmCJO9+RVcNqRyU6:rON26U0gT+RNZO5s93dU6
TLSH
T1D712193668785C7B5EE26845F58732034EA5512BEA897F80D1DC2F0C02EFAAC134F826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 6f14cd1cca995136ca07e6af0b7c940b190ae74cb9e46122dfb3fa66dcad4c29
MD5 5dcde159d56252eb4aafff683ba2781b
SHA1 bd0da074fd76254e8706e74943c117ad2673738a
SHA512 40f2f8b0c816bf23dd8159e402e2d0a9596d1661c5e45dcfed558db9b03ac95baec43a4126ebbf3d6fb9202180534b7a56b1545ade02a63717b6c1e50c261328
SSDEEP 384:cLiFiZcILsNT8TUNTUlIlMzbqahVRNZO5s9Md+HBbsi43o6:cmFQL2wgiHHZOG9Mdg03V
TLSH
T1DBC21BF248E78C76D9AD9743AB7E2D034EBCC057B5845A90B3C85A1CCD965BFC30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 9a4d6fc83a06530b3d748e3258b97bb7edb50c8eb228103850d05ce6078e545e
MD5 4505e2214333d7b1ca0bc1c47f981e3b
SHA1 165e3bbb065685e2a3122850c357082b7ea68f42
SHA512 c415ef221bb9e56c371d1a2c0ef5a05e87eb041752ecb922e6d35d08d72669b709c701685280bc8ef94bf6e4755b5965954b597da576a9a5eb3f1bb1225d9ac6
TLSH
T1D4E00207D33400E3C50C033100871F002FA3E020429B03475F20067C2D217103DA0911
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 84a59d0e0f1f286404d06d5c1362c2783949d80fb5829309366679e016de174c
MD5 cc5c1da8e76645bedc97d34efd0d20b7
SHA1 aff71b21dd0fd044e3aa686333caa06fae3ff542
SHA512 f993c3f7bb6bbc0aa27278cf6688102e437e7a07df6f48c7f706b88c38853c956643da1d1c9020ec908446e313f98c91f604027656f3acff2521f78468742371
TLSH
T134E00207933400E3C508033100871B002BA3E030029B03465E2006781C217102DA0911
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe591033.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe591033.TMP
Size 392B
SHA256 2c216900f34d56858e9893e2678a649236fb60b58193de8c2abfa8192b6f5c61
MD5 28026ffed49880c233065dd306f242fa
SHA1 41e137bc9959ed1f4a3d9fd5dfca4037d047747a
SHA512 92a36fe97475592e9cbee5a3053036f17e4300fd3abedb5ba8a1ed5e3885ead4182fc51bd55fdf39949e22a01ed16ee00498e516a8180b05950168853e4698e3
MD5 SHA1 SHA512

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d3150d86f4a885dbd3c96951f66a2f7d0366742e464152eb856722c3b1986640
MD5 c3e3959976c851b6d969c23037eb0a7e
SHA1 d9b291a86de1f533a9aeebb6aacaa8b5b967c4c9
SHA512 9b27c174e93ab9b9613c5b6b8098bec8f80827c1a04d5e0fc78162424927729a2ece3dc6c0d90d524cae7712d4cd661fd183a4c92049751fe223202dd120dc15
TLSH
T1E1411858BAE91148B3B66F5AABF6A86E487B7D732E06D15D00010D4F0A22A40D872B37
MD5 SHA1 SHA512 TLSH

Submit Download

e9c2d0f2-5107-4427-b964-5e9399525928.tmp

Path C:\Users\Admin\AppData\Local\Temp\e9c2d0f2-5107-4427-b964-5e9399525928.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

f79a5dba-2215-48d3-a493-910f18da5c4a.tmp

Path C:\Users\Admin\AppData\Local\Temp\f79a5dba-2215-48d3-a493-910f18da5c4a.tmp
Size 2.1MB
SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
MD5 4cd67032e35fa92f5182df10df289906
SHA1 9210bfc66bd808ffcd7c6443e160dc8d6754c416
SHA512 f3d83f6e77e4568d2dae539c95acf0a886926a001b4d80f0ea602387530fc333f688ac031b3057e1c2b0375426cf47ae33315f7da9ffaec601102be0bb7221cd
SSDEEP 49152:ykR5Xz/3zNOm3NOHF4+n/UlfmCSJdm8IKXmiQeujzX:DVEkNOHJQOtICGb
TLSH
T166A533BB93AD6C15F3A88C67DCDD498641C2798E6161B7F619837C282ADC07CB47CE09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4408_202749114\CRX_INSTALL\manifest.json
Size 658B
SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
MD5 2cf796650e5ad5bfb6c4a421d81734be
SHA1 79298d3cdd584b290d825d6fff4b857012e71992
SHA512 1ee7604bd7293d6296cf1368ed0dadaad7359f4d00be75e7730a9704b2205438a06ba7361554437b3e6ef352482011a90500769ff713949716c24355ee742e33
TLSH
T17A01233A268140F238347640087155A4F176620B9100F8053835E36EC460BFDBD79A6D
MD5 SHA1 SHA512 TLSH

Submit Download

DevToolsPlugin.html

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4408_811661361\CRX_INSTALL\DevToolsPlugin.html
Size 220B
SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
MD5 0d09cc16eebaeae80fe58be258501fc8
SHA1 898cae597eb3039e94878df3eb5ab1c012bb5264
SHA512 f90c0ea0174598146450074c57344765b725ac0e44ca5c21f979b8f77370be94940aa53b684d9ef1e77c3090926e2004a931e6c0bfaa1f5bee3247a55799ff83
TLSH
T131D0974D08CC55A2432004636A26BC0C3F4CDA20813BC6A3E878C1582022EBC80D0880
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4408_811661361\CRX_INSTALL\manifest.json
Size 766B
SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
MD5 c447a41c21cbb2bf5411029cb0936e13
SHA1 07acb13340be463e041ed22a2b26d5b567fd2023
SHA512 32fe5b340df5d7193bfe9bdaaccfadebc0e2c945f6cf61871f106e18daa4ed164aeb0d39f5552a09e3ed82104d69885288c8f4bc596a4e9291cdf627b57edd6d
TLSH
T14B01757D889FC8B782394B016893C48AF3354B5EA400A20C79B0C05C8871376E913629
MD5 SHA1 SHA512 TLSH

Submit Download

e389b026-89e2-4e90-8835-37d9072b601b.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4408_811661361\e389b026-89e2-4e90-8835-37d9072b601b.tmp
Size 3.0MB
SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
MD5 06f47f5ad37fb94be87982adc116d012
SHA1 4899ca7b1be75f8607b00b59b8469c8072f514ef
SHA512 b9ccbc3f2c45eaefcc4e157fb19eafd10eb54465f514ad16ada25e81390c3d577fa52aa6fc03461de6726694cdfda15ea96c5420609ac7a426e7b5afa43cab46
SSDEEP 49152:nqSGYpZHVTcorMCTt7OQvYilFbQ0NyNLvTAIPvWcfbcFlTfTGquf:n5pXTcoYCTYQAybMg7cfbcFPc
TLSH
T159E53395F69FF0F4D9A5F3317F8C765F16AAD387A30091D84283204A7BA9E210A5DF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads