hxxp://script[.]google[.]com/a/macros/wise[.]com/s/AKfycbxKJHMwa8YALmTGF_k1VA0X4O7RvodLhakbV1XK6F-cSL_NDcpK5Xn2O0xMQi7zhzL1/exec

Analysis

user interaction
yes
max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/10/2026, 09:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://script.google.com/a/macros/wise.com/s/AKfycbxKJHMwa8YALmTGF_k1VA0X4O7RvodLhakbV1XK6F-cSL_NDcpK5Xn2O0xMQi7zhzL1/exec
Sample261002-lwp4eavz2n

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Program Files directory 8 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1976066305\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1976066305\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_830288978\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_830288978\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_etld1_domains.list	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3924	msedge.exe
5796	msedge.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{45952829-4D62-4001-968F-A858D8B75121}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2091445952-3649787497-104050984-1000\{4E22DFAF-FD26-43D0-855B-6ACED61B6AF8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2448	msedge.exe
2448	msedge.exe
1720	msedge.exe
1720	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4664 wrote to memory of 6060	4664	msedge.exe	84
PID 4664 wrote to memory of 5796	4664	msedge.exe	85
PID 4664 wrote to memory of 2772	4664	msedge.exe	86
PID 4664 wrote to memory of 2772	4664	msedge.exe	86
PID 4664 wrote to memory of 2772	4664	msedge.exe	86
PID 4664 wrote to memory of 6100	4664	msedge.exe	87
PID 4664 wrote to memory of 6100	4664	msedge.exe	87
PID 4664 wrote to memory of 1180	4664	msedge.exe	89
PID 4664 wrote to memory of 1180	4664	msedge.exe	89
PID 4664 wrote to memory of 1180	4664	msedge.exe	89
PID 4664 wrote to memory of 5976	4664	msedge.exe	90
PID 4664 wrote to memory of 5976	4664	msedge.exe	90
PID 4664 wrote to memory of 5976	4664	msedge.exe	90
PID 4664 wrote to memory of 5848	4664	msedge.exe	94
PID 4664 wrote to memory of 5848	4664	msedge.exe	94
PID 4664 wrote to memory of 5848	4664	msedge.exe	94
PID 4664 wrote to memory of 5584	4664	msedge.exe	102
PID 4664 wrote to memory of 5584	4664	msedge.exe	102
PID 4664 wrote to memory of 3984	4664	msedge.exe	103
PID 4664 wrote to memory of 3984	4664	msedge.exe	103
PID 4664 wrote to memory of 5920	4664	msedge.exe	105
PID 4664 wrote to memory of 2448	4664	msedge.exe	113
PID 2448 wrote to memory of 3400	2448	msedge.exe	114
PID 2448 wrote to memory of 3924	2448	msedge.exe	115
PID 2448 wrote to memory of 3692	2448	msedge.exe	116
PID 2448 wrote to memory of 3692	2448	msedge.exe	116
PID 2448 wrote to memory of 3692	2448	msedge.exe	116
PID 2448 wrote to memory of 3492	2448	msedge.exe	117
PID 2448 wrote to memory of 3492	2448	msedge.exe	117
PID 2448 wrote to memory of 1552	2448	msedge.exe	121
PID 2448 wrote to memory of 5944	2448	msedge.exe	122
PID 2448 wrote to memory of 5944	2448	msedge.exe	122
PID 2448 wrote to memory of 2280	2448	msedge.exe	123
PID 2448 wrote to memory of 2280	2448	msedge.exe	123
PID 2448 wrote to memory of 5588	2448	msedge.exe	124
PID 2448 wrote to memory of 5588	2448	msedge.exe	124
PID 2448 wrote to memory of 4956	2448	msedge.exe	125
PID 2448 wrote to memory of 4956	2448	msedge.exe	125
PID 2448 wrote to memory of 4768	2448	msedge.exe	126
PID 2448 wrote to memory of 4768	2448	msedge.exe	126
PID 2448 wrote to memory of 996	2448	msedge.exe	127
PID 2448 wrote to memory of 996	2448	msedge.exe	127
PID 2448 wrote to memory of 5440	2448	msedge.exe	128
PID 2448 wrote to memory of 5440	2448	msedge.exe	128
PID 2448 wrote to memory of 5560	2448	msedge.exe	139
PID 2448 wrote to memory of 3680	2448	msedge.exe	140
PID 2448 wrote to memory of 2936	2448	msedge.exe	141
PID 2448 wrote to memory of 5452	2448	msedge.exe	146
PID 2448 wrote to memory of 5452	2448	msedge.exe	146
PID 2448 wrote to memory of 1968	2448	msedge.exe	148
PID 2448 wrote to memory of 1968	2448	msedge.exe	148
PID 2448 wrote to memory of 1720	2448	msedge.exe	149
PID 2448 wrote to memory of 4628	2448	msedge.exe	150
PID 2448 wrote to memory of 4628	2448	msedge.exe	150

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://script.google.com/a/macros/wise.com/s/AKfycbxKJHMwa8YALmTGF_k1VA0X4O7RvodLhakbV1XK6F-cSL_NDcpK5Xn2O0xMQi7zhzL1/exec
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff8ae91c188,0x7ff8ae91c194,0x7ff8ae91c1a0
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,11737927060251050364,1888744986793277359,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,1252348846215582664,12120945886797562834,262144 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,5771023900270959900,2508562277305930175,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,2263231896205324473,12539741316734570832,2097152 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,12228732767104892885,13667584951763946941,2097152 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4912,i,14808777408303058488,14980894282785922699,2097152 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3944,i,5276983236139187730,17085471212370111965,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=3920 /prefetch:8
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,14503137221671432669,17797646013425502417,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,13562734871012682363,781621727957295921,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,13562734871012682363,781621727957295921,524288 --field-trial-handle=2124,i,8078190064387304342,779169575926441274,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2c0,0x7ff8ae91c188,0x7ff8ae91c194,0x7ff8ae91c1a0
    3⤵
    PID:3400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,18133397217593671010,12503411772385438164,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
    3⤵
    - System Time Discovery
    PID:3924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,10482258790466731782,7660400601978103422,262144 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
    3⤵
    PID:3692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2484,i,6148336797826553809,13568720314340723092,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=2496 /prefetch:8
    3⤵
    PID:3492
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,6242993242228133994,585052936781455169,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
    3⤵
    PID:3756
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,6242993242228133994,585052936781455169,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
    3⤵
    PID:1552
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4716,i,256569204981004615,7542454267717163963,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
    3⤵
    PID:5944
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,10184282353533878856,15466770468168973012,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:8
    3⤵
    PID:2280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,3895724998040594946,10434453152788472944,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
    3⤵
    PID:5588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,6169676936625604620,13961627291070996086,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
    3⤵
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4760,i,13147959749578026844,7832224572898002736,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
    3⤵
    PID:4768
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,14610858956264269261,14796177186220938774,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
    3⤵
    PID:996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,9308749702537361945,6874870604442206818,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
    3⤵
    PID:5440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2652,i,6780679817534934609,8626073702064241267,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
    3⤵
    PID:5560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,3005013173411390206,10588732565213671662,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
    3⤵
    PID:3680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,3966592970299748127,7171818734394634697,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16498646899710593330,8437690167470138710,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4660 /prefetch:8
    3⤵
    PID:5452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=772,i,12804110964367698466,1819407097767079446,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:8
    3⤵
    PID:1968
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4296,i,2658118482327325543,736811383324715618,262144 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,6194132348770373544,13808844773838110170,524288 --field-trial-handle=2332,i,17907175987745289501,2331859651418515795,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
    3⤵
    PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:452

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4416

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

deny_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

deny_etld1_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_etld1_domains.list
Size 6KB
SHA256 2a9b59ec22bbd49e4475d2d350d496023551953c8b5ebe97266aefe51a0c5c36
MD5 3ca9dab6be71da08f51aede14b0e900c
SHA1 2ca6be97955e3c31a0f3f3cef0182fca93db171e
SHA512 16c2e3694f48b8695eb725969d89669bbb1b7b01cf5fe1fa4e69aa919050ad6d60ce47e8fc18b030c94b15d171543420338700226dfd13bf226b74aa85de5539
SSDEEP 192:7y+Ncyo37Cu1+F8/fi3E6Cfr/z+lhLg3ZRfceMBjcvXmgqqE7:7Tc3bqUB/z+l1g3ZmeTfmf7
TLSH
T15FD19FE4B7F1C94D5DE027C9DE7E204B3B9286A7D228F86022319C27023F33C194A651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_full_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1487105474\deny_full_domains.list
Size 12KB
SHA256 f154d0bc65cd130b16d1b6471df8ed2841b2f2f6d90e9912b73b37985062e623
MD5 d46f0f6333abf9bbb92ea260bd257b20
SHA1 5da02d8b3d87b5bb18b36f969efdbf8645e7977c
SHA512 9da29f3a8e7d2681666bdee5436e9a95b1c840d0d4906c85fd71725b041f5a1fb0ed30f6151a5737eb08ec42b8ee3e9ab2beced4c8b57785abfd55186bcf16ba
SSDEEP 192:xQDXUZT4QcnYNTprtSa625Tf7wykvSYJ5cGuVeeg4+YxujfKg6VFvfItXlS0GcZK:x604Qcncg25lkj5cvkY8jKLnvgtxLEV
TLSH
T1C642BF8CB2479A85C491BF97F1082614888DDF3BF95327942C693CEAC59F40F5197283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_1976066305\data.txt
Size 152KB
SHA256 4e932235a6fefae59866c98f69253bf2d3d0e7e2a2a9ae546685bc4646f9a297
MD5 b5394eb229ba53caf4fc321b5087e299
SHA1 b84ae45b51a9d200639a10ea487b1ba9b94ed3eb
SHA512 6e6f890c6fc57d470e2bedaf5b022d13e54762c8d424a4a43493b7eb68f2d22be2a1641f5ffa25a1756fef938841ec50c908e97161da28158a2c7e3b258b39d0
SSDEEP 3072:wPAgDcCHaLHl65aynyosxb3+BLvf55rOiWF4Vkia/UFwK:cX1aI5aZoKzMDXrOiW1igUB
TLSH
T1AAE3F240C9D0AFDDCEA8161C90BE0F1963E1CA8EC13A958ADB23FD4B6FD3A045A175D5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping2448_830288978\typosquatting_list.pb
Size 1.4MB
SHA256 c3f54ef721af3f87414d0a5c25f8aaf3a5d66d504240cd824c4424721aaa476a
MD5 df2545fc7667c45042471c3cc60b7943
SHA1 74a854e4b6b3e53868108dd2a18bfd4acf10a1d8
SHA512 963f8d98a10f163a77c7e7e8bdd5e70c85de92d28a3061168e409c3da49a6cb658dd27a4083cf038ef8eac0875c60dda5a225f4d4ba9f8c1dc76c1ec4ed33d20
SSDEEP 6144:0wUhpkDDI4DQRKjrKu5ujaJ+jb+1zIs4nKvL0+7rbKQPCL/LsBjeLXgJ1NCry25k:0tpiDI4maZHlIXKNYYZfYhvn8RZJcv+/
TLSH
T1A965B5B9DFC00194DBB8112D20BE71D8181412A540E9DFEAFE7C855F2BC6AC977E85E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b0f0414-e908-4bda-86eb-cafe499cfa90.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2b0f0414-e908-4bda-86eb-cafe499cfa90.tmp
Size 25KB
SHA256 a8ce2d983a379c8a582da7ebaf5ad87a7142817f460ddfbe7af2502978dc283c
MD5 c07f00bdb2198655375233b3e9512108
SHA1 d3b5ac31d8d6091fc9016a60363b1b40d39dba78
SHA512 775261afde3159897d3124ff5cff70d53e56bd864c3bc19f1b5237e787caf9eb47deea433b9490564459b570c60760777970ea00bbcb9676d60a2066dd58326b
SSDEEP 384:nKiFiZcI63sNB8TUNTUlIm2aKMi94w2fiBCfkhEyPF8sa+VYwSgL/7IzLon:BFQ63UwgcWnBCfkhDPF8hgAc
TLSH
T133C24B36EC94D9ABE8FB4FDAAB4A7A13DEF0016395DC5AC4D6D91D1D00871AD0307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2f583924-c9cb-477d-9e9c-1c88c738b887.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f583924-c9cb-477d-9e9c-1c88c738b887.tmp
Size 28KB
SHA256 bcacce23730e10f38d6baf71ac84c611d43613724f490ac1bfd1bed1b7a935d5
MD5 d9deaee8515c076d51a6f763d69890c3
SHA1 5084c4462e05ad11ecd5ff7a742f3f3bf7d945bb
SHA512 ae5aa80e435b95dcc86bb93c927da7a5d3d07ceaa5358f0f5f5e6c046923767c3168530bf424daff8ceca597b86e81dd236a169d977e7aa3fe78d35f2dbb30fb
SSDEEP 384:n3iF+ZcIBsNo8TUNTUlI4+aKMtabw2fiBCfkhEyZ557tAqkvMKWP4YgOIwZOyJoL:yF8BNwgemkBCfkhDZ5tK7kKWP4Msrse
TLSH
T157D24C75D895CEFBA8EB8AC9674AB603DDF40133898C9AC8D1E96D2C109B1FD0707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6f19e5ae-4294-40a6-b7c4-198595d21c1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6f19e5ae-4294-40a6-b7c4-198595d21c1b.tmp
Size 27KB
SHA256 9a7e2da0d5cace38064299c614aecab6fe2e47d331538c8519eedd48b60bfe39
MD5 6aa75171decdada3bca4ecc2ac9ac241
SHA1 76c5d8b88f4f0379fe01dd2243fa3b21a0260f31
SHA512 319ad8553e1e1b822345be01cc83253e3d6e2165a6b11c9dc0301d5d1e1c996d2bb7a0641d6197f8d1ef77ae9a264367aa034265f398b28d773ede8ee1e81e30
SSDEEP 384:nqiF+ZcIBsNo8TUNTUlI4+aKMtabw2fiBCfkhEyjOAQxtgOIwZOyJoGgU/7IzWo9:hF8BNwgemkBCfkhDCA+Xsrse
TLSH
T152C24B32DCA5CEBBECEB4A89B74A7643DEF40123998C9AC4D6D91D1C00972ED070BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7d0de7b1-96be-4d60-9de0-6af33e7ffe1a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7d0de7b1-96be-4d60-9de0-6af33e7ffe1a.tmp
Size 30KB
SHA256 a094f3d8193fbd2034cee5004f0a3319e4d6286510218d9fd597449c8e74a98d
MD5 96a463e479c526db44ad763a6832c1ee
SHA1 c93559ad7a13e61c4c09046287259191107ccc08
SHA512 66c747fb6258ee1b8660e682c664064e2d3072d28ddfa762f8a6fdab237fdd769bddda3efde95138582a0fb8e783a40ee1bf8c9d83beba93e0d4e1ad06be4ba3
SSDEEP 384:nIiF+ZcIBsNG8TUNTUlI4+aKMtLbw2fiBCfkhEyjOiGYASulAn9aHtgOIwZOyJod:TF8B/wge/kBCfkhDCiASFn9aHXsrVz
TLSH
T16FE22871D894DEEBA9EACAC5674AF602AEE401338598998CC5F97D3C209F5BD0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

913249c5-c27a-403f-a04c-6f9b4bf7b151.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\913249c5-c27a-403f-a04c-6f9b4bf7b151.tmp
Size 26KB
SHA256 98b7f26368c03af85bdfb6eeae82a43f6fbff74a67afc70d15b170d277adf0eb
MD5 27c43aefbed2efaa195b850fb9795ce1
SHA1 bb39e18e946f8aacb859678a175b186f876c2433
SHA512 be613d25f0dc161ac7f47a5f0fdaf0092d6b58e245c301783034303ee80d0cb2c7076844ec7602ebd09328c35407f7e179989a45d666138dae231df2ab94e89d
SSDEEP 384:nIiFiZcIgs3sNG8TUNTUlI4+aKM+Abw2fiBCfkhEyjOiNa6tgOIwZOyJoGgL/7II:TFQgs3/wgebkBCfkhDCiY6XsrVz
TLSH
T1FAC23A32D8A4DEBBEDEB4AC9B74A3A03DEF44223969C9AD4D5D91D1D00971ED030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3c1c88a1dc8e5439a1a520e9db930955bf4755654f664147c54e6cba8b43ed4c
MD5 22184503a294aa98846d9a4c3975971b
SHA1 44809070563819cceeff10eeef861544783faf98
SHA512 5d29c381872b72159a2d05366e0578c0ad56eb5ef51240db505660b787e0b3b88212c74bad2c16783f95846d95fdad86172cdc01a84d34426cca804e937a679d
TLSH
T1F4D02B24B2AC7654E01A343C0114428C30CE5970140BB400805413940FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 bc826aaa75d7da810bfdc30a1671df54c18887a7ddc779d5b9f03835587852b4
MD5 77e198de5db1473b46a54bf11e90ef65
SHA1 d40423f0ddb590b81cb9016394df150361acaffc
SHA512 208c9def9ae2c86b2de012eeb71379c0f243edb53a958e991a05233405a4a20955e43cd9ddeb6944b19a1811ed512d3123f7d75ab4ca5b9a71dca6edca139ba2
TLSH
T1ADD08028B57C7BE4F03D353D0224414C31CD5AB156067545925417554FD155315D48E9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 63883212e8d09ceae0ec4386ea47458e36fcf8b9e3037d73f148d488e3998050
MD5 c3de9665b25c01dbe5298965ad4cd40b
SHA1 ec5e1bdaadf7d3520ec2729ed48a403231cc7afd
SHA512 405f737f561d849ff733ca1ec49123aef41a49a12eea86923b2a0ca3a9f3893e3e8068b6b613ca0760443b8e1895ce425552c473172e6a4bf96d9e2286c734ec
TLSH
T120D080ACF2787A54E42A343C1515524C71CDAB707C07F440E15163642FD766111D40E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4e5093ea34dd78cbb525656f45aaddd6799dc0deb9a7f905c1c551703816860f
MD5 95dcedfe1fed66541725faf7f8ae8599
SHA1 0f6588ec7855739fb35547c5ec354edab09dd758
SHA512 e4413f75a0b92a660e63467c884562f9c06934d10ba338abb1542051581b6967011e359d2b907356467c357e09d61f8c8b23ad69c37c5a5146f1ce91fc9c1a44
TLSH
T194D080A8F2746B54E416343C1515524C71CDA7707C07F444E15163643FD667111D40E5
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2f67a665126f0d437497b394b50cc87ce72773b6abd85385bb78adf0ad326302
MD5 a98f4348736e1c7c5e70799864c15774
SHA1 fa2e3725e970aab935f77d155b649177f50be7d6
SHA512 c1dd68c743d45af6f713c7d8fade4a675abe4d224e86b956c5aaf959ccda0a92b9824b0e784a0ee9992843bfc2a7a73f85267479d6e5ffa0aa5827760492419d
TLSH
T19ED02B20B6A87654E006343C0114428C31CE5570140BB400809413A40FC261201C4069
MD5 SHA1 SHA512 TLSH

Submit Download

47a61304-372b-4210-84f3-2d5e21305949.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47a61304-372b-4210-84f3-2d5e21305949.tmp
Size 13KB
SHA256 86c96049522aa122e6d443392569428352fcb48d2f01c01581400369229591fc
MD5 a3b981c64024971bd8bbb887ef3cb059
SHA1 f293f28452937ad7dfcbaf0f0bfbf304bf09f817
SHA512 0daa02e1e169e58320fc909228462500fbcd277f1a04644599fc87c99c4a9d9aa0bab220a87045511e12e289d72757ca1f84677596d177a66f290190c5667a81
SSDEEP 192:sxZDRekV/fAsCWpVpaQZLJ8vzodpJQyHW6+WNDxY/XYg4ESUFIgbNt6J:sxZDLV/fAsCWvcOKkpHbCXXSOpt2
TLSH
T1E652B7156D28697B8CC7D219FB55BF63D3F9203294D15E48AAFC8A2C16E76DD220380B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

86375a1a-f9ae-48b0-9c50-2c4f697ffe91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86375a1a-f9ae-48b0-9c50-2c4f697ffe91.tmp
Size 649B
SHA256 93c26afa3ca575a4bc5d28036f26c325c6174458df10e8635d350e01f418a979
MD5 0e96360f93b031cd82156575f236b7a6
SHA1 97dd3ab26383f38bf8735006a34d2a89dee98547
SHA512 e690735d7fd7eebd37a30630c24f8c5736389d41e2fa2540ce13d4dc90edffeb4c6a14faa4239539156ce9e78cccc365810efa43fc4453b5e04e178e90e76510
TLSH
T180F0F9B5C921EC3B18FD1B3920940B46E75023672641984B3B3D410C4FB0537858592C
MD5 SHA1 SHA512 TLSH

Submit Download

8c750b49-cac5-49e9-9f2b-bbc38e9944cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c750b49-cac5-49e9-9f2b-bbc38e9944cd.tmp
Size 13KB
SHA256 428140565e275fd3fd3e0c228a8ba78a7834a69a8efcb9c0634cda9f0542b1dc
MD5 170bf940eec5119b4c3dd72beb1021ac
SHA1 871ea6f4d95cc8beee50a72e763d98b3b597d3af
SHA512 f38008c65ef92dc6c526d42678e2beb2c70a0d51bccbeee9a2d9f042d0664ffc0dc8333757617ad16eb397c94b0bf580dc4278207208e8f926c4af306357ac59
SSDEEP 192:sxZDRekV/fAs/WpVpGBZ2LVWQ8vzodpJQyHW6+WNDxY/XYg4ESvvIgbNt6J:sxZDLV/fAs/WvkPSWHkpHbCXXSXpt2
TLSH
T18852D9156D38697B8CC7D21EBB55BF53D3F91132A0D15E48AAFC892C06E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 bc0d8956e724d4ea759bd94794199493f1468e85776dd4b1c39fc36f405debc6
MD5 b843c2089e861c0ac5afa231388a946a
SHA1 e7a6898b1754cc73f08a4400de96b8d166c00b72
SHA512 2ed70a0a97532c2c5bc6c7d3ded6a949598002da41f8c22bf6132581360837d8b7ac70d34ba6a60e19432b6527aeb3ef61f49605bf9fd706bab7c155485d07b2
SSDEEP 96:sTDnbn/qIJU8iAx1Le/YD1ALReJoiSGHqPJ4TEiSIc9lH+Bgcw0:sXrqIhiAfBD2yS54T1i9lEw
TLSH
T18F13FA7DE784AC4EE7C60B3C412F8F7643B2A5B9D9ECC6174A76F02917A87C5182E190
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 51a0ed06862b22de5498770462587ddae74e2224c2d8cac93ce97cc535fe094b
MD5 cf4e4b2aaa2f70db37ed5889c84253b5
SHA1 abe83d5ee1839b54357d6294d18deb50bcf8a266
SHA512 75845d9e2aea486d8b3e681848757fd2c5e667cab98150b5228999e3a3a66df5a2d869f34ef2e49478d414db0e1aa3d5b6cd38cca9e703501c5c69011678b626
SSDEEP 768:1/aMa0xNNJGL/MYsNL/lhfhOYbD5Gw3JGHOY4a0Rw5H06flhYev:JaYJGL/MYwL/lZntZZY4qnlme
TLSH
T11C443EF75D52A00BCFA852F692033E3DC177451E6DD1F8A8E17D9C912828F35B2B9A48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 32953c16454da31a6fc158d9f305951938955afed64b370c319c887715a686c5
MD5 de3a5ed2b2d5d19731fe0964daa0f5f7
SHA1 b98b6f192dde5ee0875945a9b4b730a56d61766e
SHA512 8bf1d5c5d4dde0a57597f018f3060a812fee48e5d3cbc6dcbc3d914002d8fde4f1410e80ba2f20ca25ecbb897faea550f2d14e538d3845dbbe30299afcd0056f
SSDEEP 1536:spWrMRO/n49WJNcT0Tsiwo2BNDtd00YEVvm:CW3n49WOr5tdDjv
TLSH
T12925F1DBD7A9B6C3F1DA8232EBACDC8D8BFB5606249301648CD9784191DBAC111016BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 7c3952686849ff7a6a56b43bd13cef55619ae586e347f31350d8a88bbc7e2de6
MD5 0d5eba30317b097c97cfe8f67d0fb09a
SHA1 67601671405ce9ac7a78ca9393f7172af8558342
SHA512 e5b6481616e0b81b76ca4dcfd00d4144807cecb24019d4d7a62439b634ccc9df0fc9ad2c06ba3d54e8bc91c97a37ee3f62eef941dd8583582d071efb15d0a081
SSDEEP 12288:3s9clbv37vlOLbsf/j67QH21JqLGRdSyQT4Z9qwDbvZMay3J8GP9hbLGUX7b53i2:EqU9BmpEjA3V80Gn
TLSH
T151167CEDCA7858C3DD63AA30B4F0ED477C7413C3F955C1D68898C184026BBC5BBAA669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 296ad050d9d29a0a7850089ddfffc24be5b15798b73fabb7657ef9c811a4e23e
MD5 3f2b3ddb9e89ce27559c187b93376b94
SHA1 1716a56a3fe8c18132a71b1898e96628b6d37084
SHA512 29aef7dc2163e537086d81cd29816a077ec22eaec544d9fcde99e9944e3400c9fa7310dc81d75040a073098cdc63662041b940eb38cd1faa7ad8f3e78df0c11a
TLSH
T1AD411F49CA80B8E5DBA80FB1D2E622FB757059F0A647ED0E08ACC6BC374A315C500350
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

5cdb557e-751f-4d6d-9a07-4490bfc4e6ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\5cdb557e-751f-4d6d-9a07-4490bfc4e6ac.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 2626cf6667abc38f3b31eaa97635f9601fa7d12cc0bdab8b2f5d4fc0a4cb1c30
MD5 115326c512fb7d7bc28fcfbc5248498f
SHA1 75807b481d357f2402f40e23ae81700836a9bc86
SHA512 b03910feb7aa294a8a60b4d286d23e13829218998fc2a9f8d83491881ccf6f43a11380ba5e2146e4fa0092e7899f3319b1e54ed77be9ea9d872a901818707d3d
TLSH
T1CDE0D8E664CAC26E561478D30374770887803463D6D16D0B1B88CCC47B07012FE45556
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 83fa66a56671c8b575c6a9f38cf60514dd45837b5fbf63b2674bf4cb879050f8
MD5 7ec265f05cc74a0960fae29b219c3c6b
SHA1 d32ab797e5139f1f13e9b34cf7a8505c2d714aaf
SHA512 1142bef61eaf6c792a48ab5a80a53781a6f5706243711d12c1f15837e706eb329c3ff71361e3259da84743800ad20ffaff42817feea8ea5d8f401c0de16096ce
TLSH
T1DFE026A544C8C22E926868E303F8730C8BD0B42BABC03D0F1BCCC8406901B41AA863B4
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 c0091ff4605a514200ff4416959746517232f2e82f283492685ea3459a22293c
MD5 b4cd893946dcd21f8b039e96cc207779
SHA1 0815d788d37bb7f96b85da57fe1bd127b6c690bc
SHA512 5b3b5d9a241949431d62570c75b4c42ec0c3aa28a2d738db30d682f6a2dc4f0790f37b1536e4071c7cd98a5993cbc559a900cd02cd54e605ea56e2f1e228af67
SSDEEP 192:xaIykydyQlrLJ7e3bB8O/uIz5ydy55/J7e3:AIC57g8O7r7
TLSH
T132B2D7832E587832DDC2EC7E116E542DDB3BC56FAED8ED88315CC4276EE1C891416226
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 6632781aa903434f788006eb8e05ed3d8d91ffeea6a4e23de4b23733d398fd8e
MD5 3241b49c3e7acc4c210d6071064514cb
SHA1 699f14927dc8990168cbce1b926f9416c7605fba
SHA512 58c6da14b8b72a4bca8d1ae364e59302994f45ed05d0abdf9fec54065cdf24a3880aedacdfcb28043f5696ca85750cfc0356d318625580fa2a7076246c59f28a
SSDEEP 384:57uB7X/83uICtTBBBE7l7b7DXspU3i87g7:kNptTBBBLU3
TLSH
T12D24D65F1F183632CCA9E17A24EF48AB5A5DF03FCB417EC964658466CFE2D85600C86A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 6260e991e50c5d617a81a2f3e63b41356b1a41004894e7dd3293aaa27a5a35bd
MD5 a66956cee5257aab5ea25eec837770c8
SHA1 e70893d81f604cfca47c5b193b0abc4044fde643
SHA512 0984855f1778f40fe31c2bdebf607be0aa93ba8bc0db55653bb42c8c7e1781ffc346aabef6ad2f8e10aa2fe7ad8276ffe28f21715af36b4822934a2f41e80d40
TLSH
T19DE04FB585CDC52E6258607B83A87B0CDFA0F517EBC42E4A5F88D981F949244AB932D2
MD5 SHA1 SHA512 TLSH

Submit Download

1a63b52f-2a16-41de-abad-09cc53bd272a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1a63b52f-2a16-41de-abad-09cc53bd272a.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

1b17323d-4c09-4ed0-979a-d186ad494d8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1b17323d-4c09-4ed0-979a-d186ad494d8a.tmp
Size 2KB
SHA256 f1c63633d8468370dea87540f6d7a76625ac3544ec85f6ed835e6ff3475f8292
MD5 f81cd6b28ab9c9de371dfc53cbc932c9
SHA1 fc16b775f248ed1fd006a02f379367d8b80014be
SHA512 ac1db16d49e9da8ea18cc35a8e2434683cfc1f7c8d41cb2fcbb23bfb83cbffc4ee66b5f8f3681efe87401d5fbbe439426d4b376bfd86ce2df431759effefbb74
TLSH
T114519EF7C3E9C52E890156F4A714AE2FCE1D0A18432C3C5AC8E4AF6B93E2871E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

37b03c84-b5b2-4a47-96fd-f3d174258f36.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\37b03c84-b5b2-4a47-96fd-f3d174258f36.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

9f977ce6-815b-4105-a465-55a36a7a1683.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9f977ce6-815b-4105-a465-55a36a7a1683.tmp
Size 3KB
SHA256 8199f53fd7e5e50541ddcfd2f8678460a74ccd741d9eb98a6e9c7e3778a5ff45
MD5 10fd89f6d4c232e61ac0b181df5dc847
SHA1 a4a83376a45b63f12ec98cf0b90395931335385d
SHA512 025728bdc7c5704faff43ae829317d7faa62999ceb5497d20b335bbd9e8d0bc02ee6f64a5b7c7bdf7cc536fc355038c5d5ab178e0f1f80796c82fca168f8cf2b
TLSH
T14B618DF7C3E9852EC90156F4AB24BE2FCE1D0918432C3D5AC9E4AF5B93E2471E24165E
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 1ea5323c8653a83bb0ff115152fa55c97336ddf6031881cd80c81dddbc88eb90
MD5 5eed9d49e5e15b238d745465e42d319c
SHA1 b382de51d1e17305fe75f6dc6f549171ab9baf47
SHA512 0eaabf1ad3ff20c922b59d6fc33b72f9def658926a87e57f4ee595c4528b5f42473f6438f3ac452d170bccd44cc66cf70ee477c86dfaa878c18d09da35437e06
SSDEEP 48:TNLopFMatSaw/auUOt8BCoywJesXJIGbI+lovE613wUC:deMatUaAKibsG+Lo+
TLSH
T11F92734D5F303222C0F05BB6DDD186622F7C502C976737A9ED0460F3CE92A5BF5061AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 8faf3fe2500b9fdf72e24cc9b25122113210ba7f8d942e2f1cadabd370b33165
MD5 ccd68eaa8f78db0f7ed7083707ac3244
SHA1 360f2a67cea93e486b854b695915993978c4a2ad
SHA512 3086ad376dfd77f78de74593ac69566c7e8a629c46232f5fd0dbe7b33c183fe959082e6d59a4d28dd464a236c8bd7992cb0577eccbc552696984805950477ca8
SSDEEP 96:uIEumQv8m1ccnvS60I+85ajstfX6id3bT8g:uIEumQv8m1ccnvS6pgU7tT9
TLSH
T181F2ABFA0727A105D99445B0A4005FDFAF1A404B47B2B6EC66C447E3F3921E2B2A979A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 522B
SHA256 9d1841abfbd0743b2f8f25cb42ab8a6215abb98ba6d5eae51b541cce86355d1e
MD5 fee087c1ee55b47bdd671139b9a52e6b
SHA1 4764068640adfd6fa1db4e89f54d126d9747fca0
SHA512 f888d495fdbac0e12ac3d0d46948e09b9971832439455f5af765c84bdd7f6ab4cb32e2ea83cbe73383dd7145360a26697f5e726fdcde7c52f0f29c0942de62dd
TLSH
T14AF059A2C2BDF033203948F70E943C4AAAFEE0301150B0E8DEA7827CB0D25B72702036
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 91ed0284c4694f349f9828bc2a8aed841d8636da90f96a5e09438b02e729e950
MD5 b0fd6465c2ad8b64aae8521faf136ac8
SHA1 fe136c42b3a6b40b3f4a77aa4796833b6f249f29
SHA512 1862aa0b41357508855da062f5cd1ce799647b1e4e5b066d0e0db74cbd7f4bc497bed16cd06318d62d938ca995511c85bb33a0a4c6d745eec76d111a38e19533
TLSH
T132B01280B700C215C586CC3505C087C0A341F122005285CBCC984F10BC482683F06CB1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 347B
SHA256 c59c224531c6c8320e6648fc6dc7c67f050690c85378444b97250824373a63c9
MD5 0b3223db851e541bb2265db9672486f9
SHA1 d63e29ddc4130a3c0fa0abe6ce7cc40987e8a1fc
SHA512 d88f5fa34149a18b4dfa3e450eb6b3e6aec4223ca7f644fe40a6049a076d6545552eed007ff41d50fc2a1bee38ad2ad7ba13072dbf7cde7e9137e8b9b2cbf33c
TLSH
T1CEE0207015C9C72F624938EB0355F34CCBF2B417E6C42D1F2F4CE581A74A144764B190
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 ac581a36bbb16a0c08bdc751c51b86666f926c075b822df43949e7896bedb272
MD5 3a0888141c5a906b180c7ee73b3e3d1a
SHA1 5be2404d25f1782c763497eedcc11cfed788d4ee
SHA512 ab5d514c8ea3a6e512071584826159eafcf318d6f03b776d82402633603ad5a947eb02f2867efe6156a95bd128ef287c15151f375ca3b4b3bcb8a1fa9758185f
TLSH
T130E086F545C9C63D520D649703A8BB8C8BF0BC17A7C53E4F5B48C445A645144FAAE5E1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 2d7ccd85890ea551e27c4b8ee97c54840eb1354e652b86c906e1ba34801ea016
MD5 eefe630e308b3865f410974ed9aee2f0
SHA1 eeffd3e9cdd85e4f018e59a144b729cc8b161d50
SHA512 0af6807995259bb1496f8048f55ccf2107d5857ca2461e669be9fcc6637410397195618074b72120945bc2e66522f3b9253220148896a174ec4372bb4b7f32a6
SSDEEP 96:KM8wKFqmq2sK3qsrWKIcKKsAKVK66QKTywO3aKoErbWKY0KGnuKc82DOhVLZZdgW:ST/2dXOJhJlpfnpp3tNXVrN3AvD/
TLSH
T1F5B2221571BB421039FE291C92B5972E064272733219E66B7FBD00B68E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 28KB
SHA256 0cdb0febf4a7a3757257e09be5e974c5cb92149648ec412f4835b9273b818614
MD5 0d125bf5b476a600e9e4f1d0fe72208b
SHA1 f1418e10565581598a2e6a64465e8b8b52c31b41
SHA512 c0ccdf2384d1909a2001f2d8b9191fbc39958b47e46273b66912f6b9a6daee96f3f959aac15cc79f948367f229c56e822350f30c11f31e229e560de507760b33
SSDEEP 192:ST/2dXOJhJlpfnpp3tNXVrN3AvDEhdUB9e:SL29ObJffppdNlrtALE/UPe
TLSH
T1EBD2301571BB425038FE291C86B5972A028271B37118E67B7FFD40A68E2BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 80b1e9e59d27ac9e5c03beeac06d30b3ee91d8fddfc7ceeeeaf1f7491be84c6a
MD5 a5a6c2a7030722ab3d81d7a2cb4b01f3
SHA1 b42df2f990026f2e32aa96fa823b6a243c1c7fdf
SHA512 b547309150705953e8cac8cec4d11a646c618e9cdb337f8018cf657442b06f9ef14d58815cc274476f28ffd8959b4ed52acad624ceee5abc1e33771ff728a29f
SSDEEP 192:P+xWiznfT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:mxRnfQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T11A24630A7B747001EDE6D9725CB080771E3CB16D8F22A6916DB254698DB2853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b1b8a08f-3cd8-44a8-b77e-84d2e197fb08.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b1b8a08f-3cd8-44a8-b77e-84d2e197fb08.tmp
Size 12KB
SHA256 aa14c6d4903d423292fd7076008f196ffe7aa10cbf2f163ad3fa9c35c5b76e81
MD5 6cf683cefa5443db763fb81dc8a25a2f
SHA1 7233721e0f7be8842ea025e8f15704a9787e94e6
SHA512 06cd4ddd27c9be8d78991bc3ef6355d50580c94f689836de433548d586d9e897cb24c63875b56bf3013b385a0493286ecb3215a72d5d42b1d7bc4dcb2746f578
SSDEEP 192:sxZDRMkV/fAsBaQZLg8vzodpJmVHW6+WNuY/XYoMESQvIg5Nt6J:sxZDdV/fAs0ObkYHb5XzSsLt2
TLSH
T18942D9156D28A97B8CCBD219FB55BF53D3F9203294D11E48AAFC8A2C15E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba19903c-e8d6-4113-8674-c9c3b2fbe7f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ba19903c-e8d6-4113-8674-c9c3b2fbe7f4.tmp
Size 12KB
SHA256 d1f4fe1e54fa82b1582b8c01af49ba455024e0501f6a5bdd1f94149322eb41ed
MD5 495ec1c1ee653aa7f3a8497850873ecd
SHA1 b92b65464761d53adc303689c5087e40687d12e5
SHA512 cd44bd0bdef89871463d7d2815c93d4b2e8ff31506a66c127538f2e6fa546ed9a241ae3180ce3eafc726ef06c6c40e3976804a90184a28c727ad9d422d5e179c
SSDEEP 192:sxZDRMkV/fAspaQZL78vzodpJ59HW6+WNulV/YoCESQvIgjt6J:sxZDdV/fAscO0kFHby/BSsjt2
TLSH
T13E42D7156D28A97B8CC7D209BB15BF63D3F9503290D11E48AAFC8A2C05E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2ca2fc0-7820-42b5-8a7d-14c5273f572f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2ca2fc0-7820-42b5-8a7d-14c5273f572f.tmp
Size 13KB
SHA256 da83cabb8c02fd308396ed931c9cdc2c77ccbef7eafa54ec112ee8554868c40e
MD5 8a4327b3cedd8e369c5f2df84d4d72b6
SHA1 301dd2b247eac097de041461a044def608758367
SHA512 4eff3d3c57ebd2be8dbfc73fbe036dae928c10808ad5c30ed0dcdbaa9082f06689623c54ec105b99726de0ae41980094f82611d2ad07c864ec6051567ac38250
SSDEEP 192:sxZDRekV/fAs/WpVaBZ2LVWQ8vzodpJQyHW6+WNDxY/XYgqESvvIgbNt6J:sxZDLV/fAs/WvaPSWHkpHbCXZSXpt2
TLSH
T1E152C8156D38697B8CC7D21EBB55BF53D3F92132A0D15E48AAFC892C06E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c3f88251-ba3c-4d17-82fa-c3b4e500a67c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c3f88251-ba3c-4d17-82fa-c3b4e500a67c.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

d2b5fe29-05b9-48b3-8fd3-88dcc113e0e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2b5fe29-05b9-48b3-8fd3-88dcc113e0e3.tmp
Size 27KB
SHA256 b889e5382c9e415bcf4e5e68d2959c49597a0b5dcecea8a5067e3c14924f16f9
MD5 355b4edfda2a0287b0e92e6bb13bfc45
SHA1 654be442ee8176e74f3cbcc353b26ad58f0793b3
SHA512 d5ac6b4b1c43a1693926a1f4b0344b0e9c9c7b4f201b20fbb4e5c9a919e780eab5d79897f6e3aca7afe239b52cbfa08377837a95a157097e70915d91fefeb0cb
SSDEEP 768:Px6r8j+WviyUK8F1+UoAYDCx9Tuqh0VfUC9xbog/OVXpLlvVajYroorbgnov:Px6r8j+WviyUKu1jaqpLd4jjovgK
TLSH
T1D4C2E93B640CCB7E4FC41E9DDC1A6F972D9802C796588D408BFA954C02C77EA912A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d5821d13-9314-4e55-9f21-1f678a961ed6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d5821d13-9314-4e55-9f21-1f678a961ed6.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 7e78b03143c743f54aa488e0724b1510b2a5ababb492843021d9182e5070c750
MD5 2980af576e480b303892304581b87c67
SHA1 b336a77606f80417c194784599b02c9cdd77eaa2
SHA512 cbb637d8ffb960f2c51bc6c10ed5aa7fa53be930d34b18579fbfa0f4aa37c355bb9fd6a39243445bddde95f98e436e7af0b9f0fb32aec28e1768759c431e499e
TLSH
T1EF5181C0A39994D87FC9AA41C32E750364A17E7A260E98B1777E84F58F48C184E7FD71
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 0549f8ba7606a14e08955ee0d39b99361092defc79d27433229cc1bd95966a94
MD5 bdefdb7fc9c079a2564a973988c61a8d
SHA1 3e2c3aed8d0ca70b7e8245ada7998259766ae799
SHA512 de73fd09376136b6deb8d2bbe28dd8302c1b2f628d6eab0a9a8598fd676cdb10659165d90ca8ffd3c52abad55f9571479076c66f2fee44d4c062d45d2366bdf1
SSDEEP 192:8gR4OE8Aslli0wQ2sCxJnBJvaJa2DRBQEGIII+beMIM45YcYyRE:8eEls/72sAKBQEGIII+beMIMSBbE
TLSH
T19F52832E260A5B33D09E1F77136E4B559BDD888101B3626D3162680F9CF3A67C6C92F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 322B
SHA256 4989f96d3e655d8536214b14e83790085456b1ac5b5e98c0ca121b173bec174c
MD5 3d371dea50990efc2821fb4d10a075e6
SHA1 d497c42526ad7ddbd8ef9438235760b7a86abc35
SHA512 fbf460183291d4d99bd043f68ef8139399c20c5a4c3b43b9f51528f7090df05c998bbb592902e2ddb41be80e0adc46c67d3e795e1873d966977e4ca3e2267eca
TLSH
T13FE020A5D4C8D23E615930970254630CC7807417FEC13D4D1F84C8447405600FA55151
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 cdb572ee3fdb7908eef3de77452ca79db6fc41164e60a0c094b499eb6b99ef21
MD5 cb880bb7cff76953c646b7aa20fe573f
SHA1 49d939e5fe8a08556c8603d69a0aba6abbb402a5
SHA512 9ee0d2fb23503af40f479814fe2d8e52b51c16e6dbc39c1826ea0ecb24ffdaa99851fc48f4aa86d31e5dffa1fe02abce79db25795d89b71e83b1e3003fde7983
TLSH
T11621BC55F320C208E18E867DA06B97291338E8168FFCED0F847924252EB2E101E8B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 a56e3c8335fd28e4617861a87dbd2dcceb25d6ef1f7f5780075c7602a3f33540
MD5 88ccde54e8def437d3994fb1953e932f
SHA1 10edbbeae83518b99b472295f8ef753a3e491246
SHA512 b92510889e8e17c79d0a6bf56ccf5575eebefa914403e89d71eed022d6c8161fb4a9aad858d712b3da97babc3dd58e5e1e68f437b5fcc360f55fca1d8ef52b3c
TLSH
T14FE020E0E5C4D21F925820B303A8B34897D17C13EEC02E0D1FC4DD445E46345BE971D1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.25\manifest.json
Size 53B
SHA256 7612538ef6ea25a2078adf4ebda2b0565546d80189b6af46bb0e1c9744d720d5
MD5 46b34a0f2dbd5b58337d4cf05bdb4797
SHA1 b190fc81ede34f9fe8f4f5dee1b915331b76cc19
SHA512 49d0691d8eea580f863190f3073552b74bd550ec8b0a1b748fa0c5a18f05a515390735264f62f1aee0590017a1e4e85e470c32bfd49dfd371a47d1493ecab664
TLSH
T1B79002600414921716C10E906571B895A391661955850D1D04551558029586CE150298
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 4ed8fea0ba74d3d0961b7cd59549d3fa25ecd009c750a44562f684fad4618c03
MD5 cf3785ff74c725b0083b1c80b5bab6d0
SHA1 e1d31f798abaca3420472afb08390ad2ebd3858a
SHA512 50910024a568b034d7cd2cc5113121b8481dc00876fb45957790aefa75ba95dba3890dd4cf0ceb8a0610d1651bfb98da0cedccc8270a2afc8ab823a06a352399
SSDEEP 3:MsEllllkEthXllkl2zEflaQa:/M/xT02z7Q
TLSH
T1604404047FD01C05D700103044F1C3505370D4104511574334D544375CC75440C00504
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 53374cc8a7887c09fb1f8cb02245821bc32c60a28812f907bb7e7b2b2630f27d
MD5 75557bb8b0088807c06b3f984497fd74
SHA1 27c9edb9d7328f80ceff0bb8027f04cdb0ae8f02
SHA512 eaae2e62199220613b9bca94d95cdddae5da78d3cd0a6b44676fc25c9cab1099deb7f940ad7038243b816879b99f541baa46f91417347040091fa44b6c33070f
SSDEEP 384:nIiF+ZcIBsNG8TUNTUlI4+aKMtKbw2fiBCfkhEyjOiGYASulAn9aHtgOIwZOyJod:TF8B/wgeekBCfkhDCiASFn9aHXsrVz
TLSH
T1EFE22871D894DEEBA9EACEC5674AF602AEE401338598998CC5F97D3C209F5BD0307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 df0baa56b2d56941b6eb719816b7e863d2d2152aaee224885e80640beec1cb22
MD5 214bbe6f6a67ea9f7fbf06cdc77b3657
SHA1 efdcac4bceec5cc47c88d0da9b53c82d0bd6765d
SHA512 d81846690cac1281b899bf429510c494a4d368eac61142fdac0600e32c768737b565f5d0062f78e88fd5c3c355a8a2fa7492409e9f0c92570ae77576c06f58c2
SSDEEP 3:MsEllllkEthXllkl2zEflbBoz:/M/xT02zQo
TLSH
T1484404147FC01415D7441030C4D1C3511770D410053557C335D14437FCC7D500C00004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.10.2.1\manifest.json
Size 118B
SHA256 fcf65026c865a8c7109925a445b0f0bfe3bb97c5ea28972a474ea2ff12d35a3b
MD5 435110963cefa59288ce8d70ed464734
SHA1 828e9018e08cb15f74053ebd67e7b75908580e57
SHA512 78a4f90fbc48e22c7e3c3b75dc3340be94764d84313aa24c426dcd516970e08c826b1d65428d17013bf6ff84e61a115935017a006f7c127c02aacc41960be2d0
TLSH
T152B092B00C1AE02B22C09320ECA06682C3F80228E8161B1E088036881F8817981362B2
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.153\manifest.json
Size 177B
SHA256 0e9ec9e79542b4a26ff5da5ff91ed23c0fc9d4ee655cc135b64726daafb364a0
MD5 b06cf477c7639438f14301777daaaeb4
SHA1 77f7a86139f01bf8838df12e4c839143c0958932
SHA512 526576792f56bae509e5de7936815bacbdb262884c7b06110b5ad649b8ea8260622eba0244043ee6a972395297cbcbdc830cc105bd2526b619885c6c0ce42ce5
TLSH
T18CC012DFDC509DB119EB4332156D43C4D733CF0B1546450935FB66082E25985C193500
MD5 SHA1 SHA512 TLSH

Submit Download

9159784d-9094-4f8f-85d6-f74884b75fd5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\9159784d-9094-4f8f-85d6-f74884b75fd5.tmp
Size 2KB
SHA256 8b6a2416b70c6683e9f0e61c25d8b58d182ab843e28c740c2014934b2bb91f02
MD5 688f0adad5e6c015b822b33682251951
SHA1 e885a82b92d84c5343bc899cef47c954691bd9ab
SHA512 a7da903fa03fe9a096c48f59ad675d647e63d43470b257e827a83c97debb4f88d53311d14f8e2ada5fd2d1438a744dea3f98835cb4899e414f2cbc72debe14b3
TLSH
T1EA413FE05C385AD1D4BD0E7EB09B39EC80EC9721B8A0347D6C58ED988A7A61D2040C3F
MD5 SHA1 SHA512 TLSH

Submit Download

9f5b8cc1-b611-483b-b626-379cb9a2d737.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\9f5b8cc1-b611-483b-b626-379cb9a2d737.tmp
Size 2KB
SHA256 3db8d8e4b86fc10d780e22fe61963f2518934da35a7594a1ddd6d21c901d2d6a
MD5 10db5984a4e1cc853581b1365c9b267a
SHA1 e4942a71ab9c13c26f7f4e820395ae219d7c1625
SHA512 bf41817d795f4d30e8f8758cfea0bd0cf678ef3feff1a2442fce8128c4ba8e960e9b0892678f452acc45c8100716ab5b8a4c0d1d58e270270ca3896165bff2d4
TLSH
T1BE412EE04C3C5AD1D4BD0E7EB49B35EC94EC9721B8A4347D7858E9989A3AA1D3040C3F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 07892f939a0a75a9f2565924efda36373706075a0a8e6f572fb54d81df78a403
MD5 cb18e33257d6ff7c99080cf648d00dc8
SHA1 0a29781a476f7dd7b88c1e3a44b08b887d6cbf21
SHA512 4373172ca3d9dc59bcb85a9c0260750f21f58b6280b83887f721d259efb70491c5a5869e4f1c6d61dc33241c8df6b3e93fcf5464d452046b047310a2cc08dd48
SSDEEP 48:7Mcpsqp/IHRH34kWqB1kQnjhHmr6ITmUH:7FmKIHRHIbKkQndHmLB
TLSH
T1B742896EDA2CA9A2FEE00B3ED7D1D4127B3AA60EC2E4D9F2095B505747C444405DB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a9627f498879e92288f0dc333da09373963e8eb48c1a771278c0250b5b4e3e31
MD5 5a5afca285218b8797e82a0e23e90ec0
SHA1 0f3ed09e600714236fd31a409004b0584b3023c2
SHA512 b2e3f4f3127ad140efb45ef2f8f1d8eea657ac1c0abad38ecc436700c0b30e635e6e1683c9825995bd8e8d68b52fc8af17d47b0a7d203cd1c87d051dbf779070
TLSH
T107412B48BAEA114DB3B76F166BF6686D487FB8672E07905D10010E4F4623B40DD61B37
MD5 SHA1 SHA512 TLSH

Submit Download

8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
Size 2KB
SHA256 37458072ebdc6d2971ad9e5381c11801ab1bcf402fd9a7b3ed558c1febe472b4
MD5 bce3a1d4ad15aef0e3358e38941fc6bc
SHA1 262c029ece2fea8c622b115bb9c9e6e10d989857
SHA512 3019b819f7ed75481a8b19f9fc01b1ef821d36c8bebf6768ed5ca224054cd401d741d393e75490569715d1e75f9eec9ed1426e502989df4592202db01c04ded7
TLSH
T1C6514A68A6F91148B373BF59EFF6B46E497AFD732A06C09D10110D4F4A22A00CCA1737
MD5 SHA1 SHA512 TLSH

Submit Download

752c38eb-05c2-44ce-8130-274023f16a51.tmp

Path C:\Users\Admin\AppData\Local\Temp\752c38eb-05c2-44ce-8130-274023f16a51.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 cc0466cd11270c19678b955a18b2e46c9af1360ee6918419c4a54af1fd31bbab
MD5 e97476fee8b4e71b936c0527a1bac871
SHA1 e08a9fc5893a313fcd4564525d1212ff7b045c9d
SHA512 82a5ff30f7cdf78e208c3612fd5633961993a5b03289a3d3b5b5348b59b83b9e8583ddca0f29a517f6b957d186c70daab14fa66483a0f541ee8f6f72bc8df644
TLSH
T1DB4168D13931B73F4B8B4BC460A60C842660E191132EAA5CEE0A5474FD6CEE2572E7C6
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2448_1206498892\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

532e3e7d-148f-45ea-94fa-0529482aada6.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2448_1399964234\532e3e7d-148f-45ea-94fa-0529482aada6.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2448_1399964234\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1552-782-0x000001F9A11B0000-0x000001F9A21B0000-memory.dmp

Download

memory/5920-201-0x0000025134AE0000-0x0000025135AE0000-memory.dmp

Download