hxxps://globalvale[.]sharepoint[.]com/[:]f[:]/r/teams/TranspInbound1/Documentos%20Compartilhados/05%20-%20Coletas%20-%20ASN,%20Coupa?e=5%3ad56cebeb45ea4fbe83a136b7bfa2baff&sharingv2=true&fromShare=true&at=9

Analysis

user interaction
yes
max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/10/2026, 16:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://globalvale.sharepoint.com/:f:/r/teams/TranspInbound1/Documentos%20Compartilhados/05%20-%20Coletas%20-%20ASN,%20Coupa?e=5%3ad56cebeb45ea4fbe83a136b7bfa2baff&sharingv2=true&fromShare=true&at=9
Sample261001-t4exeayerf

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 19 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1908602633\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1569199823\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\auto_open_controller.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\edge_tracking_page_validator.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1569199823\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\edge_confirmation_page_validator.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\product_page.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping_fre.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping_iframe_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1908602633\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\edge_driver.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping.html	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\edge_checkout_page_validator.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5728	msedge.exe
5812	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{F0DD646B-CD8B-45A4-9A3C-03CE12096630}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{E2CC60FB-4605-4C7C-8C73-4F86B10A721E}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe
4732	msedge.exe

Suspicious use of WriteProcessMemory 56 IoCs

description	pid	Process	procid_target
PID 4732 wrote to memory of 4804	4732	msedge.exe	84
PID 4732 wrote to memory of 5728	4732	msedge.exe	86
PID 4732 wrote to memory of 2680	4732	msedge.exe	85
PID 4732 wrote to memory of 2680	4732	msedge.exe	85
PID 4732 wrote to memory of 2680	4732	msedge.exe	85
PID 4732 wrote to memory of 2172	4732	msedge.exe	87
PID 4732 wrote to memory of 2172	4732	msedge.exe	87
PID 4732 wrote to memory of 5440	4732	msedge.exe	88
PID 4732 wrote to memory of 624	4732	msedge.exe	89
PID 4732 wrote to memory of 5440	4732	msedge.exe	88
PID 4732 wrote to memory of 5440	4732	msedge.exe	88
PID 4732 wrote to memory of 624	4732	msedge.exe	89
PID 4732 wrote to memory of 624	4732	msedge.exe	89
PID 4732 wrote to memory of 5368	4732	msedge.exe	96
PID 4732 wrote to memory of 5368	4732	msedge.exe	96
PID 4732 wrote to memory of 5368	4732	msedge.exe	96
PID 4732 wrote to memory of 688	4732	msedge.exe	101
PID 4732 wrote to memory of 1648	4732	msedge.exe	102
PID 4732 wrote to memory of 688	4732	msedge.exe	101
PID 4732 wrote to memory of 1648	4732	msedge.exe	102
PID 4732 wrote to memory of 2448	4732	msedge.exe	105
PID 4732 wrote to memory of 4860	4732	msedge.exe	112
PID 4860 wrote to memory of 5152	4860	msedge.exe	113
PID 4860 wrote to memory of 5812	4860	msedge.exe	115
PID 4860 wrote to memory of 1236	4860	msedge.exe	116
PID 4860 wrote to memory of 1236	4860	msedge.exe	116
PID 4860 wrote to memory of 1236	4860	msedge.exe	116
PID 4860 wrote to memory of 3800	4860	msedge.exe	117
PID 4860 wrote to memory of 3800	4860	msedge.exe	117
PID 4860 wrote to memory of 1644	4860	msedge.exe	120
PID 4860 wrote to memory of 5192	4860	msedge.exe	121
PID 4860 wrote to memory of 5192	4860	msedge.exe	121
PID 4860 wrote to memory of 3428	4860	msedge.exe	122
PID 4860 wrote to memory of 3428	4860	msedge.exe	122
PID 4860 wrote to memory of 3904	4860	msedge.exe	123
PID 4860 wrote to memory of 3904	4860	msedge.exe	123
PID 4860 wrote to memory of 3580	4860	msedge.exe	124
PID 4860 wrote to memory of 3580	4860	msedge.exe	124
PID 4860 wrote to memory of 4840	4860	msedge.exe	125
PID 4860 wrote to memory of 4840	4860	msedge.exe	125
PID 4860 wrote to memory of 1000	4860	msedge.exe	126
PID 4860 wrote to memory of 1000	4860	msedge.exe	126
PID 4860 wrote to memory of 688	4860	msedge.exe	127
PID 4860 wrote to memory of 688	4860	msedge.exe	127
PID 4860 wrote to memory of 6028	4860	msedge.exe	139
PID 4860 wrote to memory of 552	4860	msedge.exe	140
PID 4860 wrote to memory of 5332	4860	msedge.exe	141
PID 4860 wrote to memory of 2732	4860	msedge.exe	146
PID 4860 wrote to memory of 2732	4860	msedge.exe	146
PID 4860 wrote to memory of 4056	4860	msedge.exe	147
PID 4860 wrote to memory of 4056	4860	msedge.exe	147
PID 4860 wrote to memory of 2976	4860	msedge.exe	148
PID 4860 wrote to memory of 2976	4860	msedge.exe	148
PID 4860 wrote to memory of 2320	4860	msedge.exe	154
PID 4860 wrote to memory of 2044	4860	msedge.exe	155
PID 4860 wrote to memory of 2044	4860	msedge.exe	155

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://globalvale.sharepoint.com/:f:/r/teams/TranspInbound1/Documentos%20Compartilhados/05%20-%20Coletas%20-%20ASN,%20Coupa?e=5%3ad56cebeb45ea4fbe83a136b7bfa2baff&sharingv2=true&fromShare=true&at=9
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa3a36c188,0x7ffa3a36c194,0x7ffa3a36c1a0
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,6974412152078696268,4773295811400949648,262144 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,14319951049014404399,11234518372102479987,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2012,i,14658559978426059017,12643956062705890742,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3520,i,15908271673258010649,18007522540679267856,2097152 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=3552 /prefetch:1
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3524,i,13978371873381180355,6095635674485157598,2097152 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5016,i,10709623562808612117,127439254419979213,2097152 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:5368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,13545720696957997913,6813456399972117317,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,9909901396142830777,7521143769753231621,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,84019623793460787,6085633348488461986,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,84019623793460787,6085633348488461986,524288 --field-trial-handle=2280,i,9917904598346076338,4642597987807427991,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4860
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffa3a36c188,0x7ffa3a36c194,0x7ffa3a36c1a0
    3⤵
    PID:5152
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,6456363926207744626,17726984078916019852,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
    3⤵
    - System Time Discovery
    PID:5812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16836466933268038125,7972469065653490732,262144 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
    3⤵
    PID:1236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,3425122101897485387,12413597944410243810,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:8
    3⤵
    PID:3800
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,15523970107636162244,7922612952124995903,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
    3⤵
    PID:2460
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,15523970107636162244,7922612952124995903,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:8
    3⤵
    PID:1644
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4732,i,13421715157429288968,16641183610766668358,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
    3⤵
    PID:5192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4864,i,3728570518375347284,11484714933966538735,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
    3⤵
    PID:3428
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,11262345667036989730,13493726379340686468,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
    3⤵
    PID:3904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,1286810761861119194,90317247415480506,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
    3⤵
    PID:3580
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5088,i,1146437817957934588,13490948360821026417,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
    3⤵
    PID:4840
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4752,i,1682050435022285593,16191148521843398005,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:8
    3⤵
    PID:1000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,4560090928621971885,2361279028475854458,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
    3⤵
    PID:688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,15516778443410257026,10001785709805901216,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
    3⤵
    PID:6028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2684,i,14877069142196264479,10457495803098969492,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
    3⤵
    PID:552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,1292017404558045302,3228358722253346810,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:8
    3⤵
    PID:5332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4860,i,18078524959669098708,4786157960479153068,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:8
    3⤵
    PID:2732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,13618894495103905687,8282960265707021774,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
    3⤵
    PID:4056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,7134623450920716067,9550173088511034886,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4140 /prefetch:8
    3⤵
    PID:2976
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4368,i,12823168946526364679,8240574068755147152,262144 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2320
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,12378312903811528207,4341598132763725292,524288 --field-trial-handle=2248,i,17011629122855555891,13375409738161292466,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:8
    3⤵
    PID:2044

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5336

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:312

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

auto_open_controller.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\auto_open_controller.js
Size 1.2MB
SHA256 d869c3174aac70d7254929ea08fb83d5c01816ee27a323a8b05c5f9ce476bdce
MD5 925ac486261014840aa0a0f3bd12e966
SHA1 61f9ed482883be7fe6f133f0570f9cd4ef0229da
SHA512 73feb3e824b715b9170a9189c7c6ba6c23bd19839348f79318b8af1ec3b15b26e5f23a00aa18b2bbba3e2b6055b797721f1bdeb95711cbad7c1bb2bd25561108
SSDEEP 24576:qT14F9VI4qBeBNepcrK1DZfo0rKpUHQGyNPZEdkym399ON6JEiJsfaDpnsOIdqMH:qT14F9VIXBeBNepcrK1DZfo0rKpUHQGL
TLSH
T1B0552B84E1E2353466D748B960B3D2C075EC14583399E0E8FE6C58CA9B4FD4663F6A3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edge_tracking_page_validator.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\edge_tracking_page_validator.js
Size 62KB
SHA256 e98bd8164d4a50c2adb446502de71e7c0d85ed5b9a020ccffe97d26b352ca02e
MD5 d7e13eec6c6da2646859bce6aec20c1f
SHA1 75c338821461fddbe93eda589ffd498556ea16ff
SHA512 0a704001f64bf22c689260d2e7fcd401beca693e4b7009932578b0a8599ee9aba6b299bf54486ec576358782788eebe3434e6e38e8064663f870adf8ac4c853c
SSDEEP 1536:A+06CXWsmguy4uznXF077QiXdGOfKp8zoVYTLNrxFdoS:F06CTmguy4uznXFG7kWSS
TLSH
T1AA53F8B8E57373B69EDB00F510794C15EBAC2948F18AC190B71C264A25C9E41D3F7EB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

product_page.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\product_page.js
Size 1.0MB
SHA256 ecfa790517141024a88c66ee03adc5c8db8dd99c0bc84052037a242fb7696b93
MD5 31c5f7f09056a72d2d72e88738f88a44
SHA1 602798316164931c2766aad085b4a5b711e9394a
SHA512 28c565a7dfadde5dda77dd4b3288f250de5853d0e6429866a7c4d9fd974d2ad82228e69fa41d338ed5ddd00c1c74913bc68d25995e3e5c1e2061249de0cd2154
SSDEEP 24576:j14TAzAtsNvGNkJ6AUjK8OwcEDyXnhY5lPGNYWkGS8qn9tpKLVztEiJsfa2Znm6C:j14TAzA+NvGNkJ6AUjK8OwcEDyXnhY5Q
TLSH
T10D252B80E1E2253466D748B960B7D2C4B5DC04587399F1E8FA6C68CADB0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shopping.html

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping.html
Size 1KB
SHA256 4a07676f7b8f79d9db68e385485daa5912cbc46cbf1bcc003f2caacfd1132e35
MD5 0e8308d5832852ad3c299f0c63eea163
SHA1 b2ec3288c17bb302f42311dd55a9ee74640307c0
SHA512 04c11af676c54ec2c4da24c1256e3dab683255d8d8a9d29e5f005a2ccbd127437e123dac1809741ad31df4485bc4727e626f1f67f1cfa0da97ee9343edc0c9cd
TLSH
T1AF216A9AAE95C05801739E9A61B1E00DFD0AAC47D362C89E76FC02334FB23C81D57EB4
MD5 SHA1 SHA512 TLSH

Submit Download

shopping_fre.html

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping_fre.html
Size 1KB
SHA256 9a14b883e7e39b387c0938a3a7a9525bb9d4cee4b1944a0324be5ab4e3e39e0d
MD5 353e89cb1a90d49114c3c5a553364ed5
SHA1 47fb563be14569e0c18632949668d1bd6931e5d2
SHA512 467115c27e76e525237447554959067fb0874ffb922f8feed783ee47189dc99589723af31f6351e89ea905c3a022a2d7aaf88cebfcf529647cedefbba0308aa3
TLSH
T1C0217B9AADD1C06801779E9A65A1E00DFE1A6C47D362C49B76FC02338F723C80D57EB4
MD5 SHA1 SHA512 TLSH

Submit Download

shopping_iframe_driver.js

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1343647255\shopping_iframe_driver.js
Size 22KB
SHA256 e5e1474f8b311a96da56164723e8fd89355746fd7b54febafcb3091d04236a5b
MD5 49d4d484f526e38471d0a1ac43e4bf77
SHA1 231d285ce6f7383760ff08af10086a75ec15c6a5
SHA512 7b486c9b524be1840164b4add2364c96c7ccfbbb83d2199c268c51be769a7f7ad2c7dd26a6bb68252fb8ccff7c87418caee03759d02c2bbc9b5e875874cc1f7d
SSDEEP 384:OrtUQA2L7CqyD9Kf4uXbzpPh5ahw+rqFxLYeJSIP5FwFwMaZHw1tWUXCkP+Pk4cM:yUQA2XCn9+PXbzZYweekevP5F2wMIUX4
TLSH
T1BBA2E56071D7B6356BF804E820B76425FB0C3A25738E84D4F15D9C8528AB9C352FAFB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1569199823\typosquatting_list.pb
Size 1.4MB
SHA256 5435d91bee48abb353a7d203b4b7eecac6d2901a96fd0c934fcc8ecf173e5563
MD5 5bff34d92fc5a86bef266b458a6efc08
SHA1 95e2c2b9d976cb7855d6f7092ecb0cb241617182
SHA512 02625a49261c12154ebe377df81d4457ba449801273dcb27d742dfea86329b1da7088484467ff9ab6dae4e649783201a58efb9fbad630c0e29d1191b2ccec20d
SSDEEP 6144:NwUhpkDDI4SQRKjrKu5ujaJ+jb+1zIs4nKvL0+7rbKQPCL/LsBjeLXgJ1NCry25u:NtpiDI4daZHlIXKNYYZfdhvn8RZJcv+Y
TLSH
T1B365B5B9DFC00194DBB8112D20BE71D8181412A540E9DFEAFE7C855F2BC6AC977E85E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_1908602633\data.txt
Size 152KB
SHA256 4e932235a6fefae59866c98f69253bf2d3d0e7e2a2a9ae546685bc4646f9a297
MD5 b5394eb229ba53caf4fc321b5087e299
SHA1 b84ae45b51a9d200639a10ea487b1ba9b94ed3eb
SHA512 6e6f890c6fc57d470e2bedaf5b022d13e54762c8d424a4a43493b7eb68f2d22be2a1641f5ffa25a1756fef938841ec50c908e97161da28158a2c7e3b258b39d0
SSDEEP 3072:wPAgDcCHaLHl65aynyosxb3+BLvf55rOiWF4Vkia/UFwK:cX1aI5aZoKzMDXrOiW1igUB
TLSH
T1AAE3F240C9D0AFDDCEA8161C90BE0F1963E1CA8EC13A958ADB23FD4B6FD3A045A175D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

deny_etld1_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_etld1_domains.list
Size 6KB
SHA256 2a9b59ec22bbd49e4475d2d350d496023551953c8b5ebe97266aefe51a0c5c36
MD5 3ca9dab6be71da08f51aede14b0e900c
SHA1 2ca6be97955e3c31a0f3f3cef0182fca93db171e
SHA512 16c2e3694f48b8695eb725969d89669bbb1b7b01cf5fe1fa4e69aa919050ad6d60ce47e8fc18b030c94b15d171543420338700226dfd13bf226b74aa85de5539
SSDEEP 192:7y+Ncyo37Cu1+F8/fi3E6Cfr/z+lhLg3ZRfceMBjcvXmgqqE7:7Tc3bqUB/z+l1g3ZmeTfmf7
TLSH
T15FD19FE4B7F1C94D5DE027C9DE7E204B3B9286A7D228F86022319C27023F33C194A651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_full_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4860_602243129\deny_full_domains.list
Size 12KB
SHA256 f154d0bc65cd130b16d1b6471df8ed2841b2f2f6d90e9912b73b37985062e623
MD5 d46f0f6333abf9bbb92ea260bd257b20
SHA1 5da02d8b3d87b5bb18b36f969efdbf8645e7977c
SHA512 9da29f3a8e7d2681666bdee5436e9a95b1c840d0d4906c85fd71725b041f5a1fb0ed30f6151a5737eb08ec42b8ee3e9ab2beced4c8b57785abfd55186bcf16ba
SSDEEP 192:xQDXUZT4QcnYNTprtSa625Tf7wykvSYJ5cGuVeeg4+YxujfKg6VFvfItXlS0GcZK:x604Qcncg25lkj5cvkY8jKLnvgtxLEV
TLSH
T1C642BF8CB2479A85C491BF97F1082614888DDF3BF95327942C693CEAC59F40F5197283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

12e7e3ee-549c-4ae7-b019-bc6f29dcaaab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12e7e3ee-549c-4ae7-b019-bc6f29dcaaab.tmp
Size 28KB
SHA256 046cceb80c2aa7076cde57f81c2fc8f7abb5a53e1be30fcf9a9a34f59bdf9469
MD5 99df94f4b3e93a17209d155fdbbd16be
SHA1 61a79ac65d27cbea023b75388b57215bc054274b
SHA512 a1d5317b24d9bd45bbb4a55cedfb8a075bfade907ab9042ed444406a69597f0b93498d24f5225f2f308ec7083c303d0adf97f6618bb49bc7a92f4b62738cca8f
SSDEEP 768:VFsKjwgEYJrBC5TmDOO5eK7kKWKF0sOlK:oKeMOOv7kKbF0sOlK
TLSH
T1F5D25C71DCA5DDFBA8EA8EC4A74AB603DEE40173898C9AD8D1F96C2C10975ED0707817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1faa0990-2cde-4b77-bf08-c214e1262db7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1faa0990-2cde-4b77-bf08-c214e1262db7.tmp
Size 25KB
SHA256 17c4e9d77be12b5f59e5532970c6ac081a8f4558d44667e93f7cc079f046fa4b
MD5 0894154b7953f37ee1cab1e22a5f8008
SHA1 ae222e1d05c6c4a07724131c87b77ed1d177ea6f
SHA512 04aaf1f2bd7b61d954834221e01a34d03b4a8f16cde065ed1ce631e4307644f055a176642f4a7b10faf9f2784a0535086fa0c0759f76c9daa9cd89473c5bcf8b
SSDEEP 384:naiFiZcI63sN28TUNTUlIm2aKMiT4w2fiBCC2TmDGFCD7O6R2FeoivgL/7Iz4ou:RFQ63vwgcInBC5TmDGF67TRXIx
TLSH
T1E4C23A36EC98D9ABE9F64FDAA74A7A03DEE40163858C89C4D9D81D1D00975ED130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2bb33b16-bdc2-4752-8fe3-9b8f7c88e8bb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2bb33b16-bdc2-4752-8fe3-9b8f7c88e8bb.tmp
Size 30KB
SHA256 58583bb43904d518d3cb5d7f4eb6edbdd760582e139fefada7e0222db37e3061
MD5 10fe52e166314be422cc5a03a447c295
SHA1 31224263adddb409af6cd02e447c08afb561d1b7
SHA512 7b336b9947bc17c70b78980689e342efb774ef5b44a9d3cc736e4582697bd255c2f777dade2354fdfb715647c8dbda25970b09334311bfdaa0d9e575ece50ef4
SSDEEP 768:lFsKkwgENlrBC5TmD9sLi5S5n9azXsOoP:YKHlaLL4zXsOoP
TLSH
T110E217B1D894DDEBE9E6CEC5A74AE602AEE401378588999CC5F97C3C209F5FD0306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86ca6874-58ba-4f63-9ef2-c760ca579501.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\86ca6874-58ba-4f63-9ef2-c760ca579501.tmp
Size 27KB
SHA256 8d40b679c543b11e07a00cf5c8bbf68a1766938b55159a7539544a2e0de61f5a
MD5 6bd0b10f958b02008a1e714686039acc
SHA1 ff5351667421b2f28581a9755c2905b85029561e
SHA512 a6cd2898c33c270050dcd114e8791262f1582c0d24060ded930f2b12fde1f4cd589b234b2deaaa0f35f3f86fdfe21964213d957d7c89c8f859e8dbbdc17e7322
SSDEEP 384:nfiFOZcIKsN68TUNTUlI4caKMRQJMw2fiBCC2TmD9ulLAztgOIwZOyUEVgU/7Izx:qFsKjwgEYJrBC5TmD9sLAzXsOlK
TLSH
T193C24972ECA9DDBBECEB8E88B74A7603DEE41163888C8AD4D5D91D1C009359D070BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bc826aaa75d7da810bfdc30a1671df54c18887a7ddc779d5b9f03835587852b4
MD5 77e198de5db1473b46a54bf11e90ef65
SHA1 d40423f0ddb590b81cb9016394df150361acaffc
SHA512 208c9def9ae2c86b2de012eeb71379c0f243edb53a958e991a05233405a4a20955e43cd9ddeb6944b19a1811ed512d3123f7d75ab4ca5b9a71dca6edca139ba2
TLSH
T1ADD08028B57C7BE4F03D353D0224414C31CD5AB156067545925417554FD155315D48E9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 63883212e8d09ceae0ec4386ea47458e36fcf8b9e3037d73f148d488e3998050
MD5 c3de9665b25c01dbe5298965ad4cd40b
SHA1 ec5e1bdaadf7d3520ec2729ed48a403231cc7afd
SHA512 405f737f561d849ff733ca1ec49123aef41a49a12eea86923b2a0ca3a9f3893e3e8068b6b613ca0760443b8e1895ce425552c473172e6a4bf96d9e2286c734ec
TLSH
T120D080ACF2787A54E42A343C1515524C71CDAB707C07F440E15163642FD766111D40E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4e5093ea34dd78cbb525656f45aaddd6799dc0deb9a7f905c1c551703816860f
MD5 95dcedfe1fed66541725faf7f8ae8599
SHA1 0f6588ec7855739fb35547c5ec354edab09dd758
SHA512 e4413f75a0b92a660e63467c884562f9c06934d10ba338abb1542051581b6967011e359d2b907356467c357e09d61f8c8b23ad69c37c5a5146f1ce91fc9c1a44
TLSH
T194D080A8F2746B54E416343C1515524C71CDA7707C07F444E15163643FD667111D40E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

13f78e8f-d882-45a6-b85e-c973744b87b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\13f78e8f-d882-45a6-b85e-c973744b87b5.tmp
Size 649B
SHA256 da73d7ae195e5a20b7621d2d2e216ce6ba483db5218a7331153bafc42c111bb7
MD5 e09a887c3ad2edc30b6aed88024f0c5b
SHA1 f896b486c972a24bb69db876af6950eb0bed1e57
SHA512 b421e339caaf69e683d6fa04596b67017fdc14269b3c169664a6c45abb0ac6cc9888785a610180e53f53cf504876451fe0f18a25211e1fde2eb9a6a1a66459a8
TLSH
T1B8F0F4B9C821EC3B08FD1B7920A40B46F750236B2B81984B3B3D810C8FB163B468686C
MD5 SHA1 SHA512 TLSH

Submit Download

493af34f-85f3-471e-9b48-eb2421adba1e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\493af34f-85f3-471e-9b48-eb2421adba1e.tmp
Size 13KB
SHA256 4b10e3df2a0a3b20d3866afd9575a62e8acf3cc3900c2d4391b2c206430d8551
MD5 2f87725e684916ad30c79cd5dd222966
SHA1 506d7b09b55a8d39be861603b734b9747e58fa26
SHA512 996128650a8117ed6182aa54e7e4fbf22a3d1d7d15175bbacdae1e15543bdfed6beef4099c3c7c3c25ba96cb8263e4693655b0da860da25ac2fc4e9fe88139e4
SSDEEP 192:sxZ1RnkL/f8sVWpV7GWZnd8VzodpR4HW6+WNQlrZ/YgJrSMSIIgZtJVJ:sxZ1OL/f8sVWvygC+WHbg/XSMJZtJ/
TLSH
T19752C555AD38A97B8CC7D619BB55BF63E3F9103290914E48AAFC8A2C01E77DD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

607ad3ac-affa-42b3-813a-5233ac469da4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\607ad3ac-affa-42b3-813a-5233ac469da4.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

64bd30de-caa3-41ad-9639-2f96be0924b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\64bd30de-caa3-41ad-9639-2f96be0924b5.tmp
Size 12KB
SHA256 f6268fb71768357f0e50b5adab4a23e72508acc6d5b0afae559a0c917482c9a1
MD5 58ac582cf521d8a4f348b2d94245d3c4
SHA1 96dd2696188e516e10e74676a0abe422fe83fe7e
SHA512 214f73bb388dd1b2fce0b024e6b8cb98e591c4df6b15c6c906853e30d35a137d40348334c368660c528e8afad09c34fe3ec4a5e69565d0a77a865fef9d896c84
SSDEEP 192:sxZ1RnkL/f8sBWpV7aQZLT8VzodpR4HW6+WNQlrZ/YgJrSMrGIgZtJVJ:sxZ1OL/f8sBWv+Ok+WHbg/XSMyZtJ/
TLSH
T13052D555AD38A97B8CC7D619FB55BF63E2F9103390910E48AAFC8A2C11E77DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

794eae56-cec9-49c0-8578-58e3b93dc095.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\794eae56-cec9-49c0-8578-58e3b93dc095.tmp
Size 12KB
SHA256 3b866e77c02ce95ab10b3a8759d61099b39d0939970447190376c68e8a4b34e7
MD5 5706bd18b7a85c984c54e9cc72ee8c11
SHA1 627d651543f2545bea5873fabfb4bb783dca8944
SHA512 71c4a371b240efff690325f22a3add2a274b59b4ac0977733edba721293fce8f9ba64237a6ccdeddca390a35425c71f856c11ee54f305d5415b607629be9aab8
SSDEEP 192:sxZ1RYkL/f8sraQZLC8VzodpR4HW6+WNfrZ/YoLrSEIIgjtJVJ:sxZ1tL/f8suO9+WHbl/lSfjtJ/
TLSH
T1B142D555AD28A97B8CC7D619FB59BF53E2F9103390911E48AAFC8A2C15E77CD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e014726-568a-453c-be36-a8eb18c93aed.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e014726-568a-453c-be36-a8eb18c93aed.tmp
Size 13KB
SHA256 420a39576e4ed9f51f16bfbe30cf3308930c00b7c0bfc03efb18f98d732ef61c
MD5 e0f2023bac6c260f21c028836e7463a4
SHA1 f8c56099c20a8d42a6b370a8198c45e4f364e35a
SHA512 28835bdcebb3132b7d6e41b46c946f12a1df0caae4f38eff30d95e0d2cecbbbbcefebdc8c1ed5ed49206a7a43498c3bd0273d1237f0d7d520b607d4faacc346c
SSDEEP 192:sxZ1RnkL/f8sVWpV9WZnd8VzodpR4HW6+WNQlrZ/YgarSMSIIgZtJVJ:sxZ1OL/f8sVWv9gC+WHbg/mSMJZtJ/
TLSH
T1F252C555AD38A97B8CC7D619BB55BF53E3F9103390914E48AAFC8A2C01E77DD220744B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ca9865c-2e47-4c84-be1b-eb8d3fbd88cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ca9865c-2e47-4c84-be1b-eb8d3fbd88cd.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 8aab09d91fd4d0f0470e4d562fb74eac43b939a16583e2d3e250876b2723414d
MD5 c8fd81383811fae439ab3bdcc265a410
SHA1 3c932b3cb1554b70917d34a4c15f3a6d9b6ec30d
SHA512 990d7fd7a85cbf073e96c59b891d4f2a4dfbae5249ea240a8619f67dffe138f7dc7e4bf034534d7d411ec9d1beb4b52fe727048c35420387678f556c891b8ae5
SSDEEP 192:x7bmUIlsfHH3WwNWUtoOW25G1WG88flGpRkfO4h6TQau0pBQJaxa6JYQx:x75PXJN5t58flGp+fONTfXQJaxa6SY
TLSH
T181131B3EF782AE8AFFE7543E69675B71933CD850EEC0E5078235F20956A930A5C0E840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 cec79a5d11f557ddad66f8c49f4a9b9e6dc7b2e55d2a3baac5b06a5cc6e8f249
MD5 bcc3a9e44b0a0f521cca7b89ed925bfa
SHA1 8607807bc24d199dd30c6fbd196ff4f668c746cc
SHA512 4587696718e229b812959b6f27fdd2c5e7c36c41d646c6fa51412de8c040afdfb508cb3ef8a6189784febdaa7341f2be3ecab091f5e049cf4d769d8a7fdf4e27
SSDEEP 1536:uaPgVL/QY3L/lMY+mf5U8Ub1xUhZL/ZL/cL/rzF:usgVL/lL/z+xUhZL/ZL/cL/
TLSH
T1D14451F75951A00BDFA852F6D3133E3EC17B415E6CD1E8AAE1788C812825F31B6BDA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 7c9e0192c49f52f29be2616c4c2f7302b5a65f17c6b79196e4e9f464cb15961d
MD5 6d8eb8cd0963277405a08bcd1f3ee0f4
SHA1 f2a9b85dcb13adeba8023e2641edbe8d3cd48ebd
SHA512 6177fe64af1b26ddc5780f8e7bce05dcb7c555265da63338db491bbbf36b7e73be399e6374db88e2179a8a11376212de027627c57dc335beda37c911d8497c2c
SSDEEP 3072:WW3n49WyaPH3mmzfouoyVf1jhxLMglmVbUImcdLet:s9W1fmmL5VfdLLMglcUImmat
TLSH
T141252AEEC7682C82DF6B8770B0E0D9077E712182BA5DC0D39944C5D897D2B8576E92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 aff8ab7724bd5d8b125362a32f6d2223fee9f4ae40fade4d7a1fe4c698206523
MD5 04f525c294b00ace410c60f17cdc343d
SHA1 b083fe7c73e74f060e5b3bbe175ed942f761cb6a
SHA512 776e6103a9042c96568dbf53609c911386d24ef4dc5e0d1b7530624e8e29cb11b36c58f956cfb86441672d73892781f0ccafcea884d0608a6511c8279e165657
SSDEEP 24576:rhresmD22j7pG5MVKPUg6YqTISGn/R3t9u:lrDmDPMyVeUjTISQ9u
TLSH
T16E166CEDCA6858C3DD639A30B4F0E9477C7413C3F965C1D68C98C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 aab859eb14c01df1dc709b8cf2f2f2d6ae801a650d7ff3cb254a62e5efc8ec6d
MD5 868d0e1ece52997d3f38eb933b7ac202
SHA1 028c92345e04230eb89301662f572db7c2335b4e
SHA512 5478b122c6b38465649eaab12d1094f1be0335659666ace508a55db786c8fa0d989ef7b96631a7dde1880129b32b59b7994aac615e354b68d53227b982d549b7
TLSH
T14661B860D74088A4FFDC6570B2E4A877357C19429FE3FE8384EAECBAE8963156210204
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e568fb9d44a721ce8089a37a2aea69032edf005d668eb5a4bd5ace9926899ea9
MD5 ababba752b03ba06562c63164cf5b14b
SHA1 4d1f2883f253adc0f0f4f93b0c423858ebdb4d4f
SHA512 e7648be176904234df744781250fa1eb1293a5da308b9ec9fd5c4d1db6c32c45e3b1dadb50ce6573f5b5936b6e6deb980540bd96e8c76264ed66fc5c110aa121
TLSH
T1BC51C865D7544874FFDCA570A2E4A8BB353C4942DFE3BE8384E6FCFAE89A3146200204
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

b16a5da4-fef1-4ab6-aeac-19c6d17acbf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b16a5da4-fef1-4ab6-aeac-19c6d17acbf6.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 346B
SHA256 513f6b029f331cff4f282fd937a6f89c18184e0f7b640641161fbb98ed68843a
MD5 32c5946fd0f2a33dbe3b135d6599f79f
SHA1 5bee07ab907ac253dbe082e4401a009f655ce516
SHA512 c55c97f871d4e5ae5ba16535ebcc349c134cd80690aee0336868bcd599a970e5b740c8a3811df20751907f9d64fe41e5d6fb384221bb78449c15d74a8263e0e8
TLSH
T151E0DFE4A4CAC12E6528B8D301386B0DCA8434E3D791ED075B21C8C47A0A413BB82E9F
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 db7042c9a28a9a5b79439870e2e4c61ca3f4e02699ee6af649a56e140c320c74
MD5 33c2c6c1154e0e06f867706e89bff35d
SHA1 221ec75876e82efebe263136185829d52a5df61c
SHA512 d1526f72538b2b2bb49f5dcfb162a3beb516e765115f104bb599ab44fe65cd55a279ec71fe680b66637c177359223e335f715ff58740b2a3f6bd7ab149a3673f
TLSH
T167E07DE414CCC92D912C68D307F9A70DCBD83453F3843D06174BC884F101A83F28AAA0
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 32a16bdc49e82bee9dacb2667f935c0b29bf455f8c9fd74d1e12ce7049a520d2
MD5 a08bbb6b1b74299b47586be97d69714f
SHA1 3179e89f14c81a697f3514a5a600d1519f2dc5b3
SHA512 905d9172cceaac5568da1895c90f557038aa746c9b2bc4d2db3dac41f3ca7b291021e372334df2e9bb510b9c2a24940a751afb26e2a4beaa9952277ed8e58d26
SSDEEP 96:xBCXa+ICf3O6p6HEJs8bDV6Zluif2t7DaMrJYIs8bXV6Zluif2t7DaMrJYHCf6O:HknIB6pXIIudKIIudHGFp
TLSH
T15AD21AEBBE31AC1DF90403B9629F32AA4956660D7DC7E881A6CDD464FDF9A04E01D4CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 c35c2dff9ddf40579f2d793b219fb874cd8b880f818a9002776774a606941547
MD5 2ef9c7234d13976c456c8d1b45dc6e87
SHA1 466ab2c06de1d402b4603d29c948178f9cb8e88b
SHA512 e564b8b400e765d69979881175ccfc81881d9a32dc4dfeec079cfff3ed03873f43509ac96094506e228d86d389b917c63d313532f15562d2e833be2d12cd4454
SSDEEP 384:pIupXgGIJ/83uICtTBBtpB/97DXspU3iZ:pIvGItptTBBVAU3e
TLSH
T10414D65E6F312725CC7C427669EB25E31CACF03F8B4365CA68A55474DEF2B41A02C4AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 323B
SHA256 4ba25010fbf8de058ff4c737d47a0d2c6f2597d9be329b75f14f50c37b1a376c
MD5 8a27e5ad1a4395a54846b805199b0ea5
SHA1 730633db64275401952d3928914da967030ef41c
SHA512 68fdf38f9fe746953402fb9dca69fe51425fd4c26f94bcac83247bc2501ca753cd9aede7ffa00a307048dc741751a8897225f05f8f90f3a9c6f7d4e7f1451024
TLSH
T1BAE062F244186023E3032CF55390EB98732FE1A745D0DB8DE69A95452F527F96087551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 8cf052b90d9f38067d160d5ec89b45def38985f8f279276b60dcc00b6c5bc9aa
MD5 d0a1528b46981729b624626097f13c98
SHA1 fa02432537763f2d7a1ea0a880170a9058c457b1
SHA512 24a8f747fa1b4ae43ea052abcaf1d7913e22d6c54b94986ae4f04a0d19f138f7926217a1e9be47c58617e2fd59391f3b42f9488745b5a76ec0fd51037e00c120
TLSH
T1AEE026B04ADEC92E620CB0CB0339BB4DC7B83417E7847E0A1B15DA84FA09404A786AD2
MD5 SHA1 SHA512 TLSH

Submit Download

8caae378-eb36-40c6-a99b-6571836a57e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8caae378-eb36-40c6-a99b-6571836a57e8.tmp
Size 3KB
SHA256 d9b442344a825d29bd3006775737a70db43627f6e950b51db821d4b373a90cb9
MD5 a0c76176153da3b33033aae8574e8f8a
SHA1 a912b491310cee063983e1fe502d9cd4fe7bdbb7
SHA512 e13471fc80bd8a3d1584633d8778249005ef2141cbe516026b223667607bb7a54121f403ea1129cb7084e4cfe5d6bdcb0f95da4285b0032dcc481dd7f01377d6
TLSH
T1A271BEF7C7E4811EC91196F4AA14FE2BCE2D0914432C3C5A88D8EE5BA7E2471E14265F
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 ee2eed95806a1f8d54ef355912b6ba533fb710bb2dde526b7b2da331411f5833
MD5 4a15fe22c7a456ec5e30d016e6616bab
SHA1 d6ae8d4046a59a29beb6624da1f37ea30b49f610
SHA512 529a4906c394533179f4cb820d542fdd572c27559e948f0d7bc1b0a5c715b936d651bd13bb2e772653aa372f7017749cb972f3289566f7e23f1005a5cd1a15aa
SSDEEP 96:deMatUaAKUhOjPiKGAsx3sovDPL/nkAuoamsog3wbZA5rvWEaAdkrYsRsvsZMx:dLaSaHWOe/9vDPLPkAZaQVA5zWEazrix
TLSH
T199923A6C7F642312E2620677EAD005DD5E7C112F8353F4A9B9D890F39E62B9BD80207B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 b63f787b1541701555756b3c736b2113ebacd0e508efa21593cf7b0f7e05b2a3
MD5 cb6268f0906c3300ef73b660d14f7de4
SHA1 449201a743254ff53c89fd1746473e96bdb49e1f
SHA512 34c81ce1502e99d18aa50c55da0c528384ebfe6494f2a1c8cbfd0340ef571edf979e8abb409e74926fabbc2648da49adbe37c0c1f844d4eb9ddb12aeaba32cd7
SSDEEP 96:i/IEumQv8m1ccnvSYs5hIFJaNs71nzzCbeDNRsritX5beDnsSpunK38sqxnfse4P:i/IEumQv8m1ccnvSIdpRzctd1
TLSH
T183F2EFF707375106C94444B0A000AF8EAF16415B47B6B6EC77D48BE3F6931E2B6BA396
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 b781d0e3b7ae19fd934c5038dcd759f813fdc3aa611fc595367250b40da8e282
MD5 f35367b1b95b8b1d21c59dd90fce865f
SHA1 788e9b050a1ae46c82a1f7d4434fa7a80634a33a
SHA512 8604fd0d38d1d6eba3a86d83f56d1ab69e6879851194dec03a8903ca48ef8a31ea43989d8a2ba0afd39950dfcf8b2d511b23e5e94b966e74d1474d2d3aa0a3ac
TLSH
T126213D67CA7E787B2069C8AA0FCCF8056AB99C355151A0F8D667C3BD74811F31E47015
MD5 SHA1 SHA512 TLSH

Submit Download

ba2f7989-dbe0-42c1-881e-3d723bf94e3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ba2f7989-dbe0-42c1-881e-3d723bf94e3a.tmp
Size 2KB
SHA256 159ab43200945fdc321ce529d300d417ad09e9e04798711a0c76e5e8d95c3c66
MD5 8a66cab3d03de41dcd59531c70c9fff5
SHA1 da3dfc12b978eac7cbb2b03bfd5f3cd3814f4b91
SHA512 f3c52dfecde681d1026d2ab935d9365aebdb27ee27c90a11c4162a2d36a943b3ddca83e595fd5e9e45f8172fe3a031742dfc1c27f2bd6c4f4448126d1640009d
TLSH
T1E451CEF7C3E4856ECA1196F4AA18AE2BCE6C0514432C385AC5D8EE1BD3E24B1E14164F
MD5 SHA1 SHA512 TLSH

Submit Download

d512f539-9ee4-419a-8f6f-5c8dedd0c36d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d512f539-9ee4-419a-8f6f-5c8dedd0c36d.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

fd73672a-0440-40de-b69c-e97032a1c365.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fd73672a-0440-40de-b69c-e97032a1c365.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 335B
SHA256 99daeef26f290c2d903ced8c4732facca607d8fc0319c6abd5aa6aecd7f82bd6
MD5 d2831454229aa533bdba6f6d0b4ce390
SHA1 cccc03d7d1508f12f5ee9aa25012d962249a09e8
SHA512 d6623e191889e3c064a937c36cd6080e01ba7a4000b3230f17cc6498953dad8f1da02b29c0844042d1ebf3055bb194c62d5cbcd8b06fa3f1fdc0d316ebe8a93e
TLSH
T15CE026A4C5C8C93D702E30C706669709C3EC7527E3C43D262F89CAC06946669F3A6990
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 45a6cf32812853db0b5b5991adbfa33fb8fabdccd68349f293ce0275e52c40f9
MD5 c15a1b7c95fc7a6aae9f2b19c5ace1d8
SHA1 426a5a4452580af5a5ac6cad2ff905ba78c39258
SHA512 2c9dc6f47016e480077d7654c8a0120184ac84dba52b4db18c460d4ac4d9d0412258acfa4f05ce48c4cbe5356eac23e8009cae939d271e0829328ad3605cd9d2
TLSH
T1C6B012153B44E21FC8C9293002C69F947E11F20250008A13CC284F100E4A6686F41A96
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 5faeb02c9bab9b729cf2c9ed75a4e2cb9f6014a941a0b72ed111373a555901e7
MD5 0b0665496cc406f477fbd0c810980264
SHA1 ced4220c4f819c0cf2dde312b95efafee5ef6568
SHA512 dafa41de3a739f80fe0f8e227b36b1ac85508ce69a7d49ed6cecd1b18a7202af82f268113e549734cc4d82f7fb35e8186372717195e120939fb52e552b2ddaf6
TLSH
T12BE0D87469D9CB2E716E21CB076AE708C7A27513D7D469352B0DD5C0660A144B253950
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 6865dcb1397fde3dcc845b035f3a78e79955942bd1251617a46b4e03d6ed33e4
MD5 fecd38f8f40f86b24574b4ae7cd442c0
SHA1 056801bdbd02ddafeb4a5efcad955524d288f984
SHA512 9846657f7bf4b588af599af9f5a0ed9597aee28f84780ab907ec890951224d30d425f9979c6268fd9d0307e75a516186cfb6c6196d277ae35f19160d16b48cd8
TLSH
T177E026B495C8C63D600CE0D70265AB0DC3F0B91793C27A2A570D8880EA01111F3A7DD0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 24KB
SHA256 1ab3d076fd725f6c4a46bda117928f3bcc0d81308f326a46e074220b9e7c0386
MD5 8b2a8fd908b5a2dbfadf977f93180485
SHA1 e7dd8f2d40ba7982e4d6f6ab0c60bbafe3e482e3
SHA512 7b87ccc39e90085810629c59bc5bcb145fa20b92b2ed087e2b4a0b397b7ef6eb626f848098685a0181e536bacbf8f6e5ac81572984b68ddb9bef06e82d0c5f57
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdg4:ST/2dXOJhJlpfnpp3tNXVrN3+tf4U
TLSH
T131B2221571BB421039FE290882B69B6E064271733119E66F7FBD44B68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 33e18958ed44e61a27a1c916fe6344aa5ca6962076bd537053506298651dd7e5
MD5 708d3b80862e1876de6e8502360e58a5
SHA1 d0ab5eedacb8b96de81443d1d797f602498e1b94
SHA512 7d04a7b196320bc47283d413f09a2bb3d36224fc8015f56aabe163f10f0d8c2fec0f71d5cb764d986429af15948090c27a7ef8099b0abd101fe3f1b157a196dc
SSDEEP 192:ST/2dXOJhJlpfnpp3tNXVrN3+tf4puc/g:SL29ObJffppdNlrt+l4AcI
TLSH
T1DBC2421571BB425038FE291882B59B6E424231B33118E66F7FBD44B69E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 b676f83f1469fd96fbb17648dbf139135a4b9c9b773d27a44b79b61a2edf9574
MD5 d5995594c2adfeee00033cd75546ff2c
SHA1 8e036709d66f6f15b1d6b4ae077d0f82e4dbf185
SHA512 7c3cf7fe3a67afd900f23d5869037f8a5851a3d19ab0f43789291321fd2314b5d80886847b8bab51c1fa85a71ff21ef38b4c8dc0ffb822b46003ab706bba9916
SSDEEP 192:P+xWHBA98mfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxEBAVfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T13024740A7B747001EDE6D9725CB080771A3C716DCF22A6916DB254698EB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 18KB
SHA256 5523ebc8ce0bad7ea4d2f876d3bf7c4e349e21d83b5f2ae6e50d0158ff3b84ce
MD5 9a781377c33005af25a077dc6c9e3805
SHA1 7de16c4607b036002f4a9093ab55b84a08d5910d
SHA512 d70d638435c34cb372ee289f50359339bef49ce57980e4016070062cf8a92b5dd0f2f0773737ff301f2ff2892fd9255f27b82ea6407179837887a51bb571c180
SSDEEP 96:ZEtSyGhp22iSRs8bXV6Zluif2Rs8bjV6Zluif2t7DaMrJYdr7DaMrJYEsZbrEb/A:ZLTBIIueIIudC3B
TLSH
T1238219E3B8B4569DFD680234C98539C91D5A392E7CC3B5E246DD488C3F76B64910E988
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d40580d7-c288-4df1-b277-aefd3dec628e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d40580d7-c288-4df1-b277-aefd3dec628e.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 d33dcc2f32ae6fc4e8637f5f152d30e8cc76411254ec675f59f453652ad6351c
MD5 ae939fe6bea2c1e70767092cfd295e14
SHA1 c563423f54cc0e4073cff9e3990d478c011a49d3
SHA512 52b5ebf2622eba632d879b98f41ea1bb38db857ed1b97a1b268ca3b7a02806ff91d8b63e7535ad26251d6d126edf2bf231a892cf112b5842c2af2858c64ecf17
TLSH
T1CF5184C0A39564A47FC9B981C21E6903A4B53E76230ED8B1777F84F48F48C294EAFD61
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 9ec0557cfb61065f8bbf20e2652315d74917ff2362b6815c0e089b34427da52c
MD5 7e73c8f80547ca0d3982009abef8ee49
SHA1 59a3d863bf3d56fa80e1f7bf544dbc5cc4fd4c19
SHA512 9e8d149ae291049a9537716f4f5be965a7b7cb44f9eeca946f3ca5914041fc41f5047ea0a4678a74f709a8d1b5df3722d67d7f594b6698550a4a87a79cbad3c7
SSDEEP 192:8gR4OE8Aslli0wQ2sCxJnBJvaJa2DqmQL8IIIfbfMIMZoYcYmL:8eEls/72sAjmQL8IIIfbfMIMuB1L
TLSH
T1BC52612D260A1B33D05E1F77136A4B959BDE888101B3226D3162580F9DF7E67C6C92F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 19727938c990a641c00800f4034723c2ea35be3eaa28a8b8510e6b23fffb4756
MD5 68f8a6b50c5e76fc28671472694e22e6
SHA1 2ef7809d622e5f801acc3af0b5c5319285df8581
SHA512 aa897f318526625c2fa3ea2c94d49b9414c30f320f39ad65d38fa49b902a5d3d8e6cbfddd8c1781c1cd96a89a1dd0c6414acdc8e579024c2db7711f7706f239e
TLSH
T14DE026A0A8C8C9BEA11D70C706255719D3883C13EB80292A1F03D4C8E405111B28AD91
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 cdb572ee3fdb7908eef3de77452ca79db6fc41164e60a0c094b499eb6b99ef21
MD5 cb880bb7cff76953c646b7aa20fe573f
SHA1 49d939e5fe8a08556c8603d69a0aba6abbb402a5
SHA512 9ee0d2fb23503af40f479814fe2d8e52b51c16e6dbc39c1826ea0ecb24ffdaa99851fc48f4aa86d31e5dffa1fe02abce79db25795d89b71e83b1e3003fde7983
TLSH
T11621BC55F320C208E18E867DA06B97291338E8168FFCED0F847924252EB2E101E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 92f68ef8f0f5d26999a8ee2849f74aac5854e238007f2f063f7b97390b30da77
MD5 7f924d4173cde3e1720f4f0af518c084
SHA1 dfc7fa67c4ddf3d5b4f90177350aacfd35dd0e16
SHA512 5b6792126cb164d72e07b17220e161f9585858d51e37d14998a7bf820b1b5dd049db5e3f24731a4a8ecd8c16b76e264572cd299cfb916dced0c46d878c1b77c3
TLSH
T125E02060EDCCC61F501EB0DB02659F48C3993C53EB812E051F05CD84D505542F24FAD1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.25\manifest.json
Size 53B
SHA256 7612538ef6ea25a2078adf4ebda2b0565546d80189b6af46bb0e1c9744d720d5
MD5 46b34a0f2dbd5b58337d4cf05bdb4797
SHA1 b190fc81ede34f9fe8f4f5dee1b915331b76cc19
SHA512 49d0691d8eea580f863190f3073552b74bd550ec8b0a1b748fa0c5a18f05a515390735264f62f1aee0590017a1e4e85e470c32bfd49dfd371a47d1493ecab664
TLSH
T1B79002600414921716C10E906571B895A391661955850D1D04551558029586CE150298
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.114.0\manifest.json
Size 146B
SHA256 7e765ccd9f7f89bc111ef17d12194e83940dace4320e67bd582211969f117da1
MD5 ec88e92109abcf84de7911dd22725ce2
SHA1 b8a7b83f5ec59289282350824653b73712e89896
SHA512 b8f7e86d56f579a0b2b2c7b852e9322fa0424954f308587734ed2e5e8e3f7c8c38b7ecc42a92871885a9fb53695572ac687d5b92d67a9f6a87a3d29980c3ab13
TLSH
T174C02B33CC31AC300D3007E408F08601EB34134FF500B0163730008D0B3C470D0206D0
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 db7e262459554b3d372bb0b3d7cdd11e98b197428a365f90fb643e9fa2bfb9ef
MD5 eaf06ab4043151f861b050f7d611f6ed
SHA1 e2111073d71bdb32f41974a978d1e77bbd98765f
SHA512 8879540b277aa395cbb6fa7d16c32f9ff3578273776841e3fe27f9a292ab71fde7b5cc03f4bded22ed91c2de9ec02075863250f72dcd566fc023352faf4f474c
SSDEEP 3:MsEllllkEthXllkl2zEfl1D0l:/M/xT02zE0l
TLSH
T1F04404447FD14C07DD005030C051C7D41370D4100531574374D144335CC77400C10000
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 14b246ff9aa1d9c9d3a1634d2e14ecc9328e46a4eee0a65c6afce5e7d6674888
MD5 f3c3bfbcf0f8824cde9781b7ab85f219
SHA1 0b9e01bc069c089700c4c351f5280d7ea4eb77fe
SHA512 c50bdc3254c41afdb9ff99ef298f3477ccd3787a464d99c4cd67981c447767da2addd11bfa77bdef798bd5f2ed208260e2cc4af26567610c22ac75c4b8c70b1e
SSDEEP 768:lFsKkwgEYlrBC5TmD9sLi5S5n9azXsOoP:YKHkaLL4zXsOoP
TLSH
T16DE217B1D894DDEBE9E6CEC5A74AE602AEE401378588999CC5F97C3C209F5FD0306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 0a868bdd753aaec5497f5df81d0104a5a45dac30a21c6dd749bb774be009f436
MD5 88b99a3c2a4b474cd165cd59fac9cb27
SHA1 5cef660637c7e7792ae8dec02758b567ad922fe3
SHA512 336d2171f10e237ba6466a2da08ae6bd17f9a52d6cde15488b792884afe23a6efcb0f62e3defbdb613f3030d5af4086bda86413b91b1be11a504667b7c2053a8
SSDEEP 3:MsEllllkEthXllkl2zEfltf8/l:/M/xT02zN
TLSH
T1064404047FC00545D50010304071D3541370D450051157C33DD34433DCC77510C40001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.9.30.1\manifest.json
Size 118B
SHA256 3f89d5f63524c77efb5facb385319a03aee54129aa22bca5f6061b8654f7bc5b
MD5 064a722d540bb9c42e4db8268426a4e1
SHA1 dbf4fe6aba40365a0646508d6f1f558d767e234a
SHA512 ce6a19905edea82b03cc4b70907393c2fd31e308c9d6e6dac649bdfbf44b04bf0ca2ffc8f0e354784258ef3d0b25bc72655302dca37897c36f0848bc9debe394
TLSH
T196B092B00C1AA03B22849320ECA066C283F80A19E8021B1E088036481F8817881366B2
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.153\manifest.json
Size 177B
SHA256 0e9ec9e79542b4a26ff5da5ff91ed23c0fc9d4ee655cc135b64726daafb364a0
MD5 b06cf477c7639438f14301777daaaeb4
SHA1 77f7a86139f01bf8838df12e4c839143c0958932
SHA512 526576792f56bae509e5de7936815bacbdb262884c7b06110b5ad649b8ea8260622eba0244043ee6a972395297cbcbdc830cc105bd2526b619885c6c0ce42ce5
TLSH
T18CC012DFDC509DB119EB4332156D43C4D733CF0B1546450935FB66082E25985C193500
MD5 SHA1 SHA512 TLSH

Submit Download

c6657858-0803-428c-bc0f-1dd5f7aec091.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6657858-0803-428c-bc0f-1dd5f7aec091.tmp
Size 26KB
SHA256 f66ad040bc2c3a3a15161e162b4d95c2ae30d228a908c57d021655f4a9593be7
MD5 6d34329b202688ff99781e54fbcfc05f
SHA1 e0f125efd6347b2f70a92fcc81e689b96433f582
SHA512 6656ff3031505b09b3bd8ef9a5eef76d31f455901eb9c890d2ce8c649e4d48fa72eea27bc154c1f5d8130210dcc0d77b8ddf48cd27a21a9d1a6b28b5d06d4d45
SSDEEP 384:nOiFiZcI23sNx8TUNTUlI4caKMj8TMw2fiBCC2TmD9ulLiCttgOIwZOyUEVgL/7v:lFQ23kwgE+TrBC5TmD9sLiIXsOoP
TLSH
T1C1C23972ECA8DABBECEA4FC5A74A7603DEE44163898C9AD4D5D91D1C00975ED030BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38b30cea-70a6-4e9f-8cb6-508c88e1898c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\38b30cea-70a6-4e9f-8cb6-508c88e1898c.tmp
Size 2KB
SHA256 8b6a2416b70c6683e9f0e61c25d8b58d182ab843e28c740c2014934b2bb91f02
MD5 688f0adad5e6c015b822b33682251951
SHA1 e885a82b92d84c5343bc899cef47c954691bd9ab
SHA512 a7da903fa03fe9a096c48f59ad675d647e63d43470b257e827a83c97debb4f88d53311d14f8e2ada5fd2d1438a744dea3f98835cb4899e414f2cbc72debe14b3
TLSH
T1EA413FE05C385AD1D4BD0E7EB09B39EC80EC9721B8A0347D6C58ED988A7A61D2040C3F
MD5 SHA1 SHA512 TLSH

Submit Download

73130b44-dd5b-437a-bd1b-f787c2eefc23.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\73130b44-dd5b-437a-bd1b-f787c2eefc23.tmp
Size 2KB
SHA256 788682e14f311f73776b76c735e32430b1c5f1e9e0812328e6a200077db5e10c
MD5 d870ef5c7f49da96a8cbe2f437be4c94
SHA1 8c92d1d681f47d3249a700814b484f60c8ba9aee
SHA512 81342cbb6c12974fa292a7545f45d441d1e19e883069aa429120b1a90f43d258551635262f8d96cd75a00d4767a11fb86b608060da613e76249522378d17ccbe
TLSH
T156413FE04C385AD1D1BD0E7EB09B39EC91ECD721B8A4347D2C58E9989A7E61D208083F
MD5 SHA1 SHA512 TLSH

Submit Download

e1185bb1-e93b-4bee-83ad-b4377dde99a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\e1185bb1-e93b-4bee-83ad-b4377dde99a8.tmp
Size 2KB
SHA256 3db8d8e4b86fc10d780e22fe61963f2518934da35a7594a1ddd6d21c901d2d6a
MD5 10db5984a4e1cc853581b1365c9b267a
SHA1 e4942a71ab9c13c26f7f4e820395ae219d7c1625
SHA512 bf41817d795f4d30e8f8758cfea0bd0cf678ef3feff1a2442fce8128c4ba8e960e9b0892678f452acc45c8100716ab5b8a4c0d1d58e270270ca3896165bff2d4
TLSH
T1BE412EE04C3C5AD1D4BD0E7EB49B35EC94EC9721B8A4347D7858E9989A3AA1D3040C3F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 512B
SHA256 daa46605712ea2d8e58ca63782ff541bd95a70cfa51cf713db02a229404fc0ac
MD5 ba694b2beb67f9564b70cb4ec7a0d417
SHA1 55056573619d75ff06158402bcdd413f0bd63e0a
SHA512 f7ab9ddc1dc0705ed7c484cca9e9152c40525ad0ef228b35af53ec2f0822a81c988e10d9ad286ad0e30684b075ad5b89aee9453fb95b97b2c69be94913fbff4d
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d320c73fd62acdb09188f9de49eea3ef37d56d97bccc27ac82d70e2c33eab1ad
MD5 ac4ef26bc8de0fca8bc7149495ad3bfd
SHA1 ac931a77ace1559819bd9e61719790669c9080b9
SHA512 74acec2c508cf6e58cb8e37be432db4955477448a6ad610b19a6e0dfd207653bd502fe696c9b13b53446680dd2c147e96edb405ea320ae93e4a4deb154c64901
TLSH
T1E5414A58BAF9114CB3B37F569BF2A96D487ABC732D06945D10000E0F0A23B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 cee3c894975e7ea99c6968388aa78fca433af70e0ec9f46bd9b005c964378491
MD5 fff72333709dcbc20d6f0e274cf9a8b8
SHA1 58d3762baf1c49df4dd325d01d7ece8c560dde13
SHA512 66c7165883866bd02682c42b6a4e0cab7d00ba916bd84cf546832c8abe4b2be466b351b758fb8422092d8059da4efad3b2e2053d2f45d4a81864a9c774655b65
TLSH
T12E510C58A6EA5109B3776E5AAFF6746E983FB9333B06949E10110E4F0A23700CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

6cae1699-4f62-49ac-8add-b7b292ba7446.tmp

Path C:\Users\Admin\AppData\Local\Temp\6cae1699-4f62-49ac-8add-b7b292ba7446.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 180b1878b00c79fd3fbf8b87785c9f8cbb51b8a6b297e7e18a560c23812aa34e
MD5 ae8109f719de9cd64b67d6ae30afbb87
SHA1 5d54b31644e08094df4905fe375c9369ba6b84c4
SHA512 5b67964ddb890e034b8eeb999a864e43c66c4ce1e304eb0c5848b83e4b7ed895cd00f4cdd622b45da2de76296f76fc901f26b787de16bb8592f8ccc85c969de8
TLSH
T178417CD13935B63F8B8B0BC4A0A60C842560F591132EAA5CEE1A5474FD5CEE3572E7C6
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4860_1001717949\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

7546f946-b53c-401c-890f-6a5df4c3e698.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4860_216052263\7546f946-b53c-401c-890f-6a5df4c3e698.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4860_216052263\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1644-794-0x000001FBC2CF0000-0x000001FBC3CF0000-memory.dmp

Download

memory/2448-336-0x0000012E99400000-0x0000012E9A400000-memory.dmp

Download