6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6

Analysis

user interaction
yes
max time kernel
149s
max time network
144s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
11/10/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FGD5eEps.html
Size 3KB
Sample261011-vbexdacw9n
SHA256 6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6
MD5 bee2ecad568cca3bbba7dcb9f3ced48b
SHA1 927852d4fc04ce2952187f54179d0f651be57179
SHA512 b759f1f046960c2c9bc20b1f874fadaf76ec9caa7321fcb0bcaf5ffe7b7a7828a84ca4b7d3a0030c08aa20966fe2394fc071b5b1b5de0ae938043b8a2b96ca1b
TLSH
T1656142038840C8279165A3347AD2F508CA68D183D35DADA9B29E119E5AC7FA1C7F72F5
MD5 SHA1 SHA512 TLSH

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2324	msedge.exe

Drops file in Windows directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_etld1_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1046676107\well_known_domains.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_703321654\data.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_703321654\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_160797480\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_full_domains.list	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1046676107\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_160797480\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_domains.list	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4308	msedge.exe
5860	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1570888168-524493533-3242721904-1000\{5DD93983-8E93-47C5-BF84-F3C423841561}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1570888168-524493533-3242721904-1000\{D293A7FB-C734-4A62-9B80-190583852558}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
1236	msedge.exe
1236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe
4924	msedge.exe

Suspicious use of WriteProcessMemory 55 IoCs

description	pid	Process	procid_target
PID 4924 wrote to memory of 5056	4924	msedge.exe	83
PID 4924 wrote to memory of 5860	4924	msedge.exe	84
PID 4924 wrote to memory of 4044	4924	msedge.exe	85
PID 4924 wrote to memory of 4044	4924	msedge.exe	85
PID 4924 wrote to memory of 4044	4924	msedge.exe	85
PID 4924 wrote to memory of 3692	4924	msedge.exe	86
PID 4924 wrote to memory of 3692	4924	msedge.exe	86
PID 4924 wrote to memory of 4084	4924	msedge.exe	89
PID 4924 wrote to memory of 4084	4924	msedge.exe	89
PID 4924 wrote to memory of 4084	4924	msedge.exe	89
PID 4924 wrote to memory of 4024	4924	msedge.exe	90
PID 4924 wrote to memory of 4024	4924	msedge.exe	90
PID 4924 wrote to memory of 4024	4924	msedge.exe	90
PID 4924 wrote to memory of 5208	4924	msedge.exe	91
PID 4924 wrote to memory of 4420	4924	msedge.exe	92
PID 4924 wrote to memory of 5208	4924	msedge.exe	91
PID 4924 wrote to memory of 4420	4924	msedge.exe	92
PID 4924 wrote to memory of 4416	4924	msedge.exe	93
PID 4924 wrote to memory of 5260	4924	msedge.exe	95
PID 4416 wrote to memory of 2140	4416	msedge.exe	96
PID 4924 wrote to memory of 2324	4924	msedge.exe	99
PID 2324 wrote to memory of 1084	2324	msedge.exe	100
PID 2324 wrote to memory of 4308	2324	msedge.exe	101
PID 2324 wrote to memory of 2088	2324	msedge.exe	102
PID 2324 wrote to memory of 2088	2324	msedge.exe	102
PID 2324 wrote to memory of 2088	2324	msedge.exe	102
PID 2324 wrote to memory of 3364	2324	msedge.exe	103
PID 2324 wrote to memory of 3364	2324	msedge.exe	103
PID 2324 wrote to memory of 788	2324	msedge.exe	106
PID 2324 wrote to memory of 844	2324	msedge.exe	107
PID 2324 wrote to memory of 844	2324	msedge.exe	107
PID 2324 wrote to memory of 3780	2324	msedge.exe	108
PID 2324 wrote to memory of 3780	2324	msedge.exe	108
PID 2324 wrote to memory of 1700	2324	msedge.exe	109
PID 2324 wrote to memory of 1700	2324	msedge.exe	109
PID 2324 wrote to memory of 1920	2324	msedge.exe	110
PID 2324 wrote to memory of 1920	2324	msedge.exe	110
PID 2324 wrote to memory of 2512	2324	msedge.exe	111
PID 2324 wrote to memory of 2512	2324	msedge.exe	111
PID 2324 wrote to memory of 5208	2324	msedge.exe	112
PID 2324 wrote to memory of 5208	2324	msedge.exe	112
PID 2324 wrote to memory of 1164	2324	msedge.exe	113
PID 2324 wrote to memory of 1164	2324	msedge.exe	113
PID 2324 wrote to memory of 3256	2324	msedge.exe	114
PID 2324 wrote to memory of 4960	2324	msedge.exe	115
PID 2324 wrote to memory of 4936	2324	msedge.exe	116
PID 2324 wrote to memory of 5584	2324	msedge.exe	118
PID 2324 wrote to memory of 5584	2324	msedge.exe	118
PID 2324 wrote to memory of 5324	2324	msedge.exe	119
PID 2324 wrote to memory of 5324	2324	msedge.exe	119
PID 2324 wrote to memory of 5432	2324	msedge.exe	120
PID 2324 wrote to memory of 5432	2324	msedge.exe	120
PID 2324 wrote to memory of 1236	2324	msedge.exe	121
PID 2324 wrote to memory of 5396	2324	msedge.exe	122
PID 2324 wrote to memory of 5396	2324	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\FGD5eEps.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff9d625c188,0x7ff9d625c194,0x7ff9d625c1a0
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1636,i,5079588585044298588,11133131197258103301,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1508,i,8958523500088802375,9845711619211144271,262144 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,8803946769823464602,12429962445650882057,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:13
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3524,i,3243973789643152194,7258093237495621645,2097152 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3544,i,14854632929487164951,15624217750137075376,2097152 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,12582250209970069447,5298090832020783623,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,17117373253917913140,18041640671269399017,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:14
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,13893196137689550106,1594829783475496702,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4416
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1108
    3⤵
    PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17967299778527605562,13752329082877796453,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17967299778527605562,13752329082877796453,524288 --field-trial-handle=2260,i,2954471955627526061,15805879770417388783,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
  2⤵
  PID:5260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:2324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ff9d625c188,0x7ff9d625c194,0x7ff9d625c1a0
    3⤵
    PID:1084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,4729015332627801566,15260485013868878463,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:11
    3⤵
    - System Time Discovery
    PID:4308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,14406694745703287242,16295462227494436881,262144 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
    3⤵
    PID:2088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2116,i,9071812006383312842,367378675207357812,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:13
    3⤵
    PID:3364
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2582535180621076556,6421857641788045116,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
    3⤵
    PID:1696
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4492,i,2582535180621076556,6421857641788045116,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:14
    3⤵
    PID:788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,12628226345781420536,14710671881555034952,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:14
    3⤵
    PID:844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,1757853846507255428,15805671952292572021,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:14
    3⤵
    PID:3780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,9386253517175988961,4752815088829490736,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
    3⤵
    PID:1700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,9563498525792321370,3190326158496835534,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4968 /prefetch:14
    3⤵
    PID:1920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4880,i,16845627163393353256,15935690511725559033,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
    3⤵
    PID:2512
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4808,i,15074410717980612855,11211825995364849264,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:14
    3⤵
    PID:5208
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,10092990745155431886,5388834826989509886,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:14
    3⤵
    PID:1164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,1556477906267566867,17220871767117699297,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
    3⤵
    PID:3256
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,15195121706436177009,11172546529044071709,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
    3⤵
    PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,1553563411237856243,5819672808313124831,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:14
    3⤵
    PID:4936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4356,i,639330927061219859,4063520439929319932,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:14
    3⤵
    PID:5584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,4572902519053396487,17663959953346549559,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
    3⤵
    PID:5324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,13117153538328620088,10793374772002407231,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=4892 /prefetch:14
    3⤵
    PID:5432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4572,i,12456858526793543429,13520575500840326733,262144 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:10
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1236
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4088,i,11429163913630676549,7488081932080257506,524288 --field-trial-handle=2276,i,16066095886499290899,11861146361761213450,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:14
    3⤵
    PID:5396

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4588

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1872e769-ede0-43b7-9f0a-d511fb2006e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1872e769-ede0-43b7-9f0a-d511fb2006e8.tmp
Size 30KB
SHA256 763ae38fca8314a4ef5e67a2fdd3db2543e544c7da3b507e664698aa7085f282
MD5 059d2ff144a2033da68887d6ef84092f
SHA1 60f3918aaca292e9a1e2baf4dd97224c98c05afb
SHA512 0275b6c8edf83d7b3432a9776328c0ef598c199791bb6f93d8c765636c9e1eff51da55dca4606afc3631d68458c42bf3bdf62008f1a33977cdc5c7000d67aa50
SSDEEP 384:n/iFSZcIl8Nq8TUNTUlIR7wqp6yYqKb2f19KNLLYm7fkWBLd+l/MTlgL/7IzV:KFglNwgG9qr9QoetB+l/MTX
TLSH
T1F1E2273DDC60DABFD8EEBF89A64D76169EE41237D4B84988DBD44F0C807618DA306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2ee4628a-82a1-4473-b3a8-1a6cbb1c9665.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2ee4628a-82a1-4473-b3a8-1a6cbb1c9665.tmp
Size 26KB
SHA256 36865a249b27541df57b2ce8c5bc06b3e9ff3b374cb499588d322401ae65730b
MD5 f12bf9d1419f74181e8b9bae61ac20e9
SHA1 5b3aebd5c2cc0bccad78794c7ccc496c6526b8ad
SHA512 bc29e51bc0d39f9d2aaa70f7a0335373b68dbdbed66a119abb14aaf538b780d08dbe9772917d83c0608717fe6452119505876aa703cde0d791e613bf40ef7f3d
SSDEEP 384:n/iFiZcIb38Nq8TUNTUlIR7wqpg/Y4Kb2f19KNLLYm7fDMTlgL/7IzV:KFQb3NwgGk4r9QoeDMTX
TLSH
T17BC25A32DCA4DABBEDEB8ED5A68E3607DEF01163999C5AC8D9D85D1C009B1DD030BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64c25b67-c9cd-4e97-aabb-efe015a329f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64c25b67-c9cd-4e97-aabb-efe015a329f1.tmp
Size 25KB
SHA256 175f7097a222e943fe82a8740fa7bb1efb206960eb91b04f7f33a61918626992
MD5 acf0c8092b839af91cfc5e9e7b123ab6
SHA1 f078989ecb56933ca7053eb7d968750653c45685
SHA512 b1f93a65942031b4004dc57e23aeb70ca987b0dd427a710b43e857bfbf3e25cc5fc84ec86633767bc95ecd1ee743a791df1ee1d1e89992c959d55ddfbe861215
SSDEEP 384:nhiFiZcI638No8TUNTUlIxBwqBkogb2f19KNLLYL5sa+VYVUgL/7Izyof:IFQ63Xwgw3o59QoL5hgWU
TLSH
T126C23935EC54D9BBECEB8FD6AB8A7607EEF0115384AC59C8D9D45D1C008719D1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9ccefc26-8bf8-4e89-b0e7-39eea26755d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9ccefc26-8bf8-4e89-b0e7-39eea26755d1.tmp
Size 27KB
SHA256 7a5bf6d69d7294d7c5ef9c3c10da62f8f0d5004b304f8f84bb1acc986ebd8e9c
MD5 6bbd078e0f797fc5f8da2c35513a7f24
SHA1 e97947bae14dcd5c071723a1f069077484c87831
SHA512 f8758fd50404b8f0a1fba517575d4159c2e3dd7e5b50c34c64772d4691e234d9d7115924a9e6213960db092dda3f115c39d16745eed78416b213aded7c746dc7
SSDEEP 384:n0iFSZcIl8Nm8TUNTUlIR7wqp67YtKb2f19KNLLYm7TQSMTlIU/7Izk:PFglhwgGetr9QomtMTd
TLSH
T1C0C25B31DCA4DABBEDEB9E95A68E7607DEF01163989C4AC8E5D89D0C00872DD070BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 721b08b4b688c2d5b497b211c9e6bbfe487d31b6b64a94fd4577d75f86dd0656
MD5 b8ba646bbb457a579422de017e05f70e
SHA1 b93060f8eaccc2d9a7491c2f9eeaf4fb63134330
SHA512 d62f2134e2da1ebfa019f821cddecaef89acd6bcd66ca99eb29e6d14dbb819b43de1963443108ea0330c3de6e0502c7b1bd8b46ecb57218b335a6654265bc675
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCbco8XfgYJ0zFqpP0KLsyW1Lj6:fRqxosfxWMk8xzo84YWm0otWj
TLSH
T12B257D49B34494FFC883197589BE17902334F6DE5F02C35B6A376A0E2E671D44B45224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee8f775247a998ec6d5050cfb3f178a515f5082455093a3e77da38f02cb05fcd
MD5 c759415be793bb2eaf498d742273e146
SHA1 406689bc27b8b0df8240b43c8cbe4c907eaaa83e
SHA512 88d76463290c5fda33f7847d773f3281a2e758f1033475e5af3fa40704c5deca0872b62b7e355654caf6fd52bed2321bc28d77cdc5b25ace71e0655f945254a0
TLSH
T16ED0C07BF53A03F0D23C71390533000001108662061203A800504C15A9F008044EBCF4
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68c57d3d8e68bc1a0def1c3134136eae6573be3d69e4476b7639601f53d93cac
MD5 289874132287440a56300547ca0392aa
SHA1 6b3b2cbc375c06813bbcdf5cc0f0fb6b1e44d34a
SHA512 23d383ea0172c741c9a460ae8e0a161f7bfa4bd6d86a7114f766c2a4ed76537663103d08a88b4aa5aff2816a203638d6a4ce530675c8a964384ee1211201df08
TLSH
T1B7D0C0FFF6BB1220CF087070072B12000200D020101301BC4058410D70D054050DADFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6c271bd24467587fdcb64121b1fcc61638a2ad2ca4c3a66f5e714c571bededd1
MD5 4adda0e17bf93257d251ef62b71d8bb8
SHA1 573595fa01f50387b2045d0a0d95f5ce5c17a1d4
SHA512 3fd6500a35f7e8ad26cd4a16e3e375c5475bde5e9d624802c318a720f68329fb7ab2ab7c686c7eab371033afcf446ea8776982d37670c1ccbee3d291cf2e01b2
TLSH
T142D0C0FBF6B70320CF047070076B12000200D020101301BC4058410D70D054050DADFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cb58490731045c4d4ef8ae90fd5b5394608566e0de59eb2fcf0ecafd0e27c1e4
MD5 a1449147626cc89b1f49004bd7e5d7ce
SHA1 e848ee4aaefc37442c33cbecb41170227e80799f
SHA512 09a97d82a24abaaf732d89be9ab3b4434bd39ecb04c04633d236c4752119bff4b381aa75666a5cca804d38dfd7487cee9fe3800fd60f91ad3cfffc59a6e0ec34
TLSH
T1B5D02B1BBEAD02A0E11331390637420031C4E140480310188490033228C268104E44F0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c9a92cbd849eecadff108aa705c8bffeefa88b48debb99ebb0a61da60d1ea55d
MD5 3eab7477df5ca8aedeabf1695c6ec99e
SHA1 47e45efb75000cd4d9e036210864e45f420f2323
SHA512 0465738c688cb93e5238241731fb0a05395e81c567aa2fffc33a9f478454ed7814c50cbc62e962000f8c572df3a8f4d2780caaf1956dec8d990b4097d0125ee8
TLSH
T11ED02B1FBAAD12A0E12331390637420030C4E540480310188450032228C268100E44F0
MD5 SHA1 SHA512 TLSH

Submit Download

0879d773-f641-4f45-9566-097b31db3a9b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0879d773-f641-4f45-9566-097b31db3a9b.tmp
Size 12KB
SHA256 976cf563b0da309d9bdad7b95ae8cfd5ecf2122dd060a137f5c0341d86b0e5a8
MD5 30b1b24b1d36145b6f10baa30e42233a
SHA1 3eb6cdb0cbe0832d8278f1c57e5f6db5fa394606
SHA512 109d8aea6943e678988a9c06b91fef9e10799c22b1c9adae23b4570c0f79414cf578858f9dfefd1379e7540c1d6dcc92329a3ae0c704783c1dafc999488b3e1c
SSDEEP 192:sxZ8RZ8FM/fZswcWpVA4ZExozodpE9/W6+WNGY0wFSxqWGYIgZaJ:sxZ8uM/fZshWvAGKo/bG58ZUZW
TLSH
T16F42D815AD68A93B9CC7D319BB65BF53D7F91037A0812E44A6FC892C05EB6DD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23b2d6ba-52be-4d63-a49e-77001a90b708.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23b2d6ba-52be-4d63-a49e-77001a90b708.tmp
Size 414B
SHA256 cff7ecbb0f9ef2f080fa2d6254b8129d18087cee952281b169ab6a75a653d202
MD5 9d8488bb42fa6dd5a928ea041b236e62
SHA1 8d05e5e819c0bb7183767ab67c0aa376557afa91
SHA512 13424c2ef7f3b1b3a833d868e8a57ae4471d33c80785c7b226504aeb8f89722407c290ed2ac97fa031587cb9c1747d9516953e7986920140fa2a46237329146f
TLSH
T192E02BAAC972ED270EFC0B1864904785DB5113AF3A40994F3A3D910D8FB56A7469AC5C
MD5 SHA1 SHA512 TLSH

Submit Download

2b4a32fd-542f-4756-a74a-9c87b8c6c1ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b4a32fd-542f-4756-a74a-9c87b8c6c1ab.tmp
Size 12KB
SHA256 f22b11d8dceab7b88e2267ae30e26b74f320fc1d3dd5b8f5ccd3714eda081ea3
MD5 cef13321f8307d4dc5293a56453dfeaa
SHA1 b4a716868f9ae63cabe32041c836097d97267363
SHA512 bdb23a7e769d53b96e490e6a890e62436bc98579b99654d8a78c5d50c8a6fb23208a5628f99084a5b8cc1cd40f2a3e71e82d7c5cde169182c0b6219b5e734eff
SSDEEP 192:sxZ8RZ8FM/fZswcWpVO4ZExozodpE9/W6+WNGY0wFixqWGYIgZaJ:sxZ8uM/fZshWvOGKo/bG58JUZW
TLSH
T11442D915AD68A93B9CC7D319BB65BF53D7F91033A0912E44A6FC892C05EB6DD120380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8c8187d2-1f0e-47fb-ab77-f5987e440eeb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c8187d2-1f0e-47fb-ab77-f5987e440eeb.tmp
Size 12KB
SHA256 0640932840036780e810d246ae8b041123aca7787e788240d67c566e2dc1024d
MD5 0bc58aa5a05c16c015e7cc5a27f8df60
SHA1 b03fb7ddb51069c1926f07863bf1d0eb8dc2e6ab
SHA512 0f519547354f707438e3a3271ea2d8abf162ef4753caedd1f23f912e8d091fa6073c57f0f58454c32874394fbfdaa44465550c68d2ca5c5278fdb48d160efb11
SSDEEP 192:sxZ8RZ8FM/fZsNWpVCqqzodpE9/W6+WNGY0wFixq6gYIgZaJ:sxZ8uM/fZsNWvC2o/bG58JWZW
TLSH
T15A42E8156D68A93B8CC7E319FB65BF53D7F91036A0912E48A6FC891C05EB6DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8e005184-485c-4c4e-a139-4707980336ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8e005184-485c-4c4e-a139-4707980336ac.tmp
Size 28KB
SHA256 7e5c0efbe62817fc26e7111fa924548ed0c54e74db7ffb89f5210c999d5de653
MD5 741caa4e5283e663de2f3e3453954f46
SHA1 3b6324cfed1d6ce1c5d6ac02126b58c0901742fd
SHA512 ac00c1db14fb285d5f4f4c3e11378b36cdcc5d34b4526b93e60f071dd1fe86400d4d6051a59d9c5674b0ee3bc06730c08c986f9e67854a3eed2a96cde8ecc0ca
SSDEEP 768:SPcas8Tw23fWRmLJQt18F1+UoAYDCx9Tuqh0VfUC9xbog/OV3VOLl/hf0+7Yroq/:SPcas8Tw23fWRmLJQt1u1jaKVOLph8+s
TLSH
T107D2093F640CCB7E4FC01A99DC16AF976EA802C7A6688D4447FE994C02C77EB51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9fb91647-1d52-4317-9482-ef0717c5e891.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9fb91647-1d52-4317-9482-ef0717c5e891.tmp
Size 12KB
SHA256 bc12e70fa627e0c5a1f28845008ea4040214bce93d62b357933ceeebda060791
MD5 3cd971e5f0c308505daf159feceea2d5
SHA1 395d276259ea4a4d40bc09eba6609ac35c9b4fb9
SHA512 809a3aeaa064d2710fface427f6f6bda50a042614e73521044bb6625d3cf30c752f5b5fad652f30b24135ce423c4547849d25d71b535bae3f8489294a6d067d8
SSDEEP 192:sxZ8RZ8FM/fZs0cWpVO4ZExozodpE9/W6+WNGY0wFixqWGYIgZaJ:sxZ8uM/fZs1WvOGKo/bG58JUZW
TLSH
T19E42E815AD68A93B8CC7D319BB65BF53D7F91033A0812E44A6FC892C05EB6DD220380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 9c4847b603d0649b3f69a8efc76f7dadc941a33d3f17f4967c6cbe89fa32efff
MD5 f3495dcfaf8671efcfd21ba55c24fb27
SHA1 bc5242c04db783dc6287c2e80b673591a5db43d4
SHA512 628a9e9496e3bf85121cdd5f1f9f9ffd8ca73b8b9528d4a76c6764332de7de5c4802fd4130f4e10335e22ad8d8a710088614b46e15ec71009c7f8e0b7af13bd8
SSDEEP 192:OVacF53nWtYm4xv23IHyvl7HlREWY55bKkHvEwXtPMskohSSy3Bn0y3Um1kLH7ja:WGb3wy1HlRmIyc2M5CSrRnx9kLb
TLSH
T1C6133C7C7A960E9BE3E3813CD91B5F35E3B1D866F9C204874671F188032578B190EA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 dd10b7be7cd1e73b480a4ebc69e3f8a139a38703ede9378e121434ec3d9e917e
MD5 3b559e276774891b27ebdb9ec79d3f9c
SHA1 def594b4d9f178c5a1111a99f6c2614f30c4f744
SHA512 ccfbf10ba14b0e57f6e68bfa5eba5e307e711ad0699dafeb63ee4239bb57490fe58315ae4f0667c81dd2de0ec1634ccc1f10f86e50f2e308bffff0b78fbd4e9c
SSDEEP 1536:IBL/OVbL/NuM1en/maPvme2yWL/RL/xL/Rg+6AtdQn35UyyN:IBL/CbL/Dymanme2lL/RL/xL/D6b
TLSH
T1D0442EF71951A01BCBA852F5E2033F3DD1BB455D3CD1E8A9E5788C812C25F22B6BDA84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 b8910ee84784314920a98835d5d4881808f5f761c6dfd6921796da4c0bdd5c3f
MD5 1019d9fcb2322056486a9ca2af263499
SHA1 3c11086a76b305af4374a43c421623fa5daa5fc2
SHA512 ceaf00b14bc2c3f454ae919f50e2852490d626294961832a47553fa71023e1430271796949be09cc08e2f17c429565a96b2ab3685e1616ed5cc48f3391d41d5a
SSDEEP 24576:wEWfte+8gItSndqx+LKzZZDK0IvUmGgehac2yEBrWjUL+:pW0pIdqlzZZDNQUmTbBIUa
TLSH
T104166CEDCA6858C3CD63AA30B4F0E9477C7413C3F965C1D68C98C584026B7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d7936ff757e7542cb16d8691f1506a5a6d1973a6b7a5b56940578fa972a6e459
MD5 8e5feb52036d6ba730a42fa617461eb6
SHA1 4ad50c1fd19b7cd341e1c44aa598136e6fcae164
SHA512 a20cbd5a71969645af012be957d8d805f8643bddeffb797aee50e623e80511130bfc31096bbd9e85c51387f70a584022376c17f9f6206648d3bd73f2cb0430fc
TLSH
T1FD612A8104105295D7EF4831C6E223873CF4DD8231532DDD1C9BF8B8560AB775C80F68
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

48b3f599-6daf-414e-a650-b82b8307f028.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\48b3f599-6daf-414e-a650-b82b8307f028.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 9920fd52c053e15f780d02c5e94473c50fed34fe798fb0ef131924b969d3b2f2
MD5 a0b71bd449bc8fde3c6f88a884875cc1
SHA1 eb19cfa855a216b350787e0e9d60789dea0f906e
SHA512 fc9c02773063763b15f7ee1758579a77f88c8c23afe3ccb6fe62c6e2e725ada53bc05664455bfc5b4a57820f2a7d3054565b5860a2cc2815b22b953f841c04f2
TLSH
T1B1E0D89459CAC22DA71934DB12247F18C288355AD7817D873700E8C07747506F396D47
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 570B
SHA256 99def1b557f19f04c1affc6f247d0451f33fc10ec42e73792223c3215ac98be6
MD5 d4ba0ae0bb0b9faff3da6f35fdbc3c8a
SHA1 fb3e9dec7f35a9b1d94e54a5659dd0de484055e7
SHA512 86fd07c34b9abd4c52ba19eae291936f92bc6d38a75c021edc1dedbc15617669876180cd99f959c62476d82ec6bb9f5fe4c6cb4d82cb037efb76d99a4d3d9c51
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 b9c42775f928bc1ee144be6f3a84627d9860d19d044f2ba6639f23aafa5a0416
MD5 13f3179bdac043d9da1644aeb4647718
SHA1 d82ac0fcbc7244e3275aa8be0aa78caf0b49c154
SHA512 115fbefcd109eeb5f8243610de7fc468cb7484d9333e1e6e09c07d65a5a991eae911f36711f3352a4ad40018fd3b71b11cab1fb1fe59f8651f8ea879040a3519
TLSH
T168E07D240BCCC13DF12C68F70379672887F0351AFA803D075748D8447249342B3AB680
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.110.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 644dc4cbd2bac52314e225ff0404bb62986a670bb14cd7dbe579799470f66595
MD5 bdd933ce86259d9faff28a2be0da0ee1
SHA1 c3b8a5d035b27c39dd8049a30eda7e010e4ae572
SHA512 16c2693762781f4581045c74cef483445bd1e7bffc71dc2d31c36eb9507517a60796eda9c29a8e732c6af79778e5cf9243c12ff020de15958020df4e40648001
SSDEEP 192:xNv0+G83uxXBBK31GkSJpEnXEJH7DNspUC:xNva83uFBBQ1GkS3EnO7DNspUC
TLSH
T12C14530F5F213312CE6C403629E654A35DADF43F8B527ADA78641470CEE3A52A06C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 903e36f5be3ad2ea7dd8f3497b3a19d3c5146f9709b6b931ba45d2ebae1457b2
MD5 bd3077d36022fad7d8e8cc5a5ba47344
SHA1 621250adb67c4526617dfa025416b5a9b1905def
SHA512 76550315d02eed9ba69516ea932d40e960b3654ac1435cfa6067c01d8239b84e854a9d300b05afdb66e5c77302f1a464800603c8068d48891b3149eb4afb128f
TLSH
T196E0D8A08ADEC11D520C24DB0264BF5CD7A0241AD6847E051B08ED90F049204E7A65C1
MD5 SHA1 SHA512 TLSH

Submit Download

01deee72-69a8-4bc6-8d0e-74634b0a8751.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\01deee72-69a8-4bc6-8d0e-74634b0a8751.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

518e6550-ce4f-411a-be8b-9363ecf38a3e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\518e6550-ce4f-411a-be8b-9363ecf38a3e.tmp
Size 1KB
SHA256 b982470a81c3aa1b3bc930da1f455d18710cc020b74a67cb93c5393fd52d4c90
MD5 2de9c3b5e9790fc59cd4d0717b679470
SHA1 5d700ff7b49324de6b7b632c118e0312b003de25
SHA512 6210d0bca5b22f5507cfdf9c9b4587e619a56e5f754925f46d85a17f8101c6135ff275e18adfa8320365e9451a9e610d327874778e07cf030b5b9e979289fa31
TLSH
T1F231BFF7C7E8866E890196F0B618AE2BCE2D0914432C3D5AC4E4EF1B93E3471D14155F
MD5 SHA1 SHA512 TLSH

Submit Download

8fa92eb8-8381-462b-871f-7f2bcc0bec3b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8fa92eb8-8381-462b-871f-7f2bcc0bec3b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 3c6b911f4895d9c51412587489ea9ec5c979760e7d1e0dee30325e48b5094897
MD5 571c02054cfa53c5dacbf6a91b51e470
SHA1 a42fbf1ea7e4eb782ce7d7990938409a91d9b9f3
SHA512 070073e278cfbdf064011d8a12284f813b7986467f01fed004f14d2ce4a2433ca5a7b77fb0578e9dda9cffbe99bf5d317d0ffda019ff2f5871141daded8c2ef6
SSDEEP 48:TNLopFMatSaw/auUOt8BMo+wvvw6NVAAwH:deMatUaAK0yw6NuAA
TLSH
T12B922E4E4F346211D0F04B72EDD489622E7C102DC363765ADE5424F2CDA259FFA060AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 fbe6a4f001ddf70d4c3b4f6b51aa3fae2215afa4786130387f2df16539c44649
MD5 fdffdb543e041a4216fb4de9a8298f9c
SHA1 e297b343195cdba3960387def63fc2bf7b73cda3
SHA512 240103a61442a1bef56b4f3105e975f21be10b67d53153a7929b9cfc0b6653e4ddb37d54521cd85c5d982bae7e20cff501f5fd38ebc68829281e23f07cc7e4ce
SSDEEP 48:TaIopKWurJNVr1GJmA8pv82pfurJNVrdHXuccaurJN2VrJ1n4n1GmzNGU1cSBwl0:uIEumQv8m1ccnvS6cYaKZf5nFXZ5x4g
TLSH
T1BCF2BDFB07276205D99444F0A4009FCEAF06404B47B6B6EC76D447E2F7A21E2B2B9796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccdd891b-9307-4617-aba6-507678092772.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ccdd891b-9307-4617-aba6-507678092772.tmp
Size 2KB
SHA256 59ca8969431e4cdc81923c9230cd2ac26b2990d9d2d5df7686521d0f77d856aa
MD5 dd5d05bdeeca8aaab544cab9ab5cf0af
SHA1 abcecf8bc055b56563462ddbab1335341d621232
SHA512 3d3e503c25053d4688df33e98ff671332aed7c15f4473cdf76291aaf4ad36bb672157505270d84cd14da4daed290b3791d1d151918bed46f40a8a69999f4fdf4
TLSH
T1E041B0F7C2E8866D890156F0AA14BE1FCE2E0914532C3D5AC8E4EF5F97E3471E28165E
MD5 SHA1 SHA512 TLSH

Submit Download

e5665bd8-6ed2-4150-89fd-08d99e4b0453.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e5665bd8-6ed2-4150-89fd-08d99e4b0453.tmp
Size 188B
SHA256 9022fd382673bb11336053763490bdef16fd52e259703f8218eb9a118a3bd435
MD5 8e0f710255bd6e118800e8b63027d58d
SHA1 bee40d8db9013cc2331492ac5f3e119160e3b10c
SHA512 e5cc01a5aade7b087cf7dea469b6902edb85aa50549d5685b5c69fc8ed3d37f8b8a6ea26b13277cd36e5055966180ae85eefdf7b0d7dea7e5a85fcf8e73b32da
TLSH
T16BC0221188B9F432107A46395FA0B8807E3AD438020080A4CCA5C33C60D00BB9B96029
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 226c9eb9d81c5b62105f636bf51b3ea30dee67e5c94bd8c1e2ad608fbf3f334b
MD5 44b1236606effdbc7d262233ae2f2fcf
SHA1 ab822831973af1600778f9536612921d693f604f
SHA512 e832f51b460ba499e6e2be8da96bb45f86bf5708d48f9154994b21740444816999a741cdb45603f9b17248ffe86dd086dff7b10e79bb7c53afbed4a948be1d1d
TLSH
T150E080E00ACDC13EF51E71970154D318D7D8F45BD6C53D191F44D950524BA4472675C1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 b280653060a6a35aa2f1129c5705e195ae7b64233e83526448d57ed5b935e69e
MD5 a6309ac94c1b451ad31a996a9568429e
SHA1 6054ec5aff73b953a7f16a71f559b9625aa2867e
SHA512 1f31ce34515056faaedd1a2c2ae3b193710fcb82636d08ceceed6dd1388af106ff3a4488f51a4d5170fb0541e873f99b10cdf9fca047b73deabb33d706a9507b
TLSH
T145E048B01BCEC23FA24F60DB0268E318C6A6B45AD6C539292B08F990630E6447357641
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 2ee04e610c4d996b6b935966679f40bc3f14eedab2b6e125f7120214fabd6ae6
MD5 e98dce3b0cc273fade4b3d2d3f9b61e2
SHA1 83b16bfb79f98fe3c2c8739730873e4ce7b70437
SHA512 48857fb513adfd0196550c43ffea2e7ff92ad783207343584e5447e9d4102c62a99d57d51f99e659d990dd2426d5ae7cf3fd8aedb686c8c5498c881259732388
TLSH
T183E086704BCEC23D524E60D702A8E71CD7F4A85FD7C53B5E5708D890B109244B3BBA90
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 26KB
SHA256 49cfd837ec8c274c1795bd03ff21128642ae919c3ce7250311f903eb75eedfac
MD5 c8aa2ca47282d5a4ef609659c2c8e2dd
SHA1 dededcb5d213107ff64522fcccbbf4c8fea325a2
SHA512 87463b129e4000447d72e6a0d2ea6e1d608b6bc17125236e97d3d62ddb318149afc20d6f5970dd15c4a0c54846557d4134e4a92ff0e62a2e8256f46eee8fad6b
SSDEEP 96:K8cAKF62iU4K5CeWgKXqfCusKjKUUgK9a+2vOKY4nwAKtSWGVCKGQ9XKKwcO21Wp:ir/+SvIrlfrljh9DdgslV9rnAnB1ZJA
TLSH
T16EC2671531BA12453CBE290C81B5D76F128235B33129E62B7FBD44A68E6BE085DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 d2e40bd11d69814058c30a31504f9cc978ac82dc743777228ed5026960d1e199
MD5 fbe63955939db659ca92d7a32c783778
SHA1 cdc3aa5229443180f132867911ba6ef5562051e0
SHA512 38c24593af1f5d367fb3f666801c5308c6c87c7c8c93a15928b1efd8b62920940ffefeb19c9b095114b68972359ccda2e08234e06b54281f665058e64a9933cb
SSDEEP 96:K8cAKF62iU4K5CeWgKXqfCusKjKUUgK9a+2vOKY4nwAKtSWGVCKGQ9XKKwcO21WI:ir/+SvIrlfrljh9DdgslV9rnAnB5
TLSH
T1B0B2551571BA12453CBE290C81B5972F128235B33119EA3B7FBD44A68E6BE085DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 83b91605ad86e72a289094731757b529a0c4d47fc709e579659456dd9697ff44
MD5 c6a72763b6809308e054be377a022c0d
SHA1 0b2804ea4fbe04d7ac5491275dd40bcb10b7381e
SHA512 42a487e08d99801d31ec4347ca4fb2fcf25bdf89f2d3fcc82481df11dbb0f9f1a6ab1b94537f0b8bd8968b8ce6e5c4c33fff43a136204240ed6e464dc83de783
SSDEEP 192:FvoWd+qPhfT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:aMbJfQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T11D24530A7B747001DDE7E9725CB080771A3CB16ECF22A6915DA254698DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b84cbea7-362f-4af2-8cb3-24e507609235.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b84cbea7-362f-4af2-8cb3-24e507609235.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 1efb5a60e3d2461340161cc7c782a9658e069375606a4d3755f8e9c5274f626a
MD5 efcfde7d9cf97653b408ceaa07e1f461
SHA1 8a39be7431255ee6d9f2f8fba2beda088643b6cf
SHA512 3cc3a2501743a5ff0934412c08bca7d3d3c3176c46946a3e582a65adf8a290ab22ede4bc483a30fc1895756a4b820f75d5da2a308dc6665a76cfb389361ae03e
TLSH
T1615167C0A3A56489BFC9BA81C22D951364E13E7A260EA971772D84F45F8CC1C4F7FE61
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 13KB
SHA256 4a7b14874eccf267023c123f401eb214df77bf43d3b012d0da837d4b120aa329
MD5 5f9dd2d3938a17f235ca61091817838a
SHA1 9a4779996dac4e100d31bf986c88c8993912bdc2
SHA512 80bff71bf9947b42395714d652c6e7772c6f8492b43fce89218400e59e4f275e8a607e866304e39b19a3a294e116a9c330c814a7da89ed2a0cd84c041d5170cb
SSDEEP 192:WnBORYqAsalu0KrsTy3MPBT6GQZ9III6bmMIM8FjYcYNGc:lRYDsQCsOIQ/III6bmMIMCB6b
TLSH
T13C52932D2F052F33C15E5FB7526B4B9627C888418276226D71613C0F9CF2E9B86C91FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 ba3e714594ba0d727886fcddfa3d6f145ae3c715f2a4878c933a4204fc20d5cf
MD5 ab387f94a53ae1c87e9dbf71b32b3fa5
SHA1 d9b3502092b118fd1f35b1bbf8d247154609fac1
SHA512 79ac175069a9346e46462f2f94f49b4da079d0db3c810c0be21b0f63f16823ddd691405cb164b76378816b795895cb4ae3d72e20d01d8591ee21eb3208a4f68e
TLSH
T1B3E02654AECCC12EF11D20E70134537CE7853A1BEE80390E1F08C988A146241B3AB5C1
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 379ca00ab2ade22f9b55db0671949489003b7c08b59eeec9b5a1f03101f0e2eb
MD5 6ddbe21becb6af6c3882074e075139ed
SHA1 20a090155de060a528ecdfaadc2731fea0feb350
SHA512 2f221d1955e8daf8ec28ed9e5307afde475fda4c28926ea7b8c56daa646d72e13f5b6ae51f307d4532fd1e1ec6e66da9fafdd2e368ef1291f53796d44098ef80
TLSH
T15E21B256F320C158E24A867DA16B97351338E8069FFCEC0F407A74356EB2E111E8B6F1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 80cca48b291548f4b2e2c327557692ca08815e7412820f0382e5b5dcb3284b84
MD5 c9e5707a0c219b0fdb0edc7cd3bd3796
SHA1 f1a45a711227c7b49a2ab7296f50ec88d8220779
SHA512 e8404c9afc406da61f1dc0c48264ec215376ee267e42b824762a6cc11c10ad6372b365112bf6c61c2932ff3de7d0e1bad1fb02bad98d7b915283327223268353
TLSH
T1A2E0D85469C8C11FA11920E30174936CD7963917EE803E091F04CA485146282735B5C1
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.26\manifest.json
Size 53B
SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
MD5 231f4c6814bd04e1dff159c333e99a8f
SHA1 e7a5e431643eb7e17b88cd2bc6d76be5be95edf2
SHA512 10edf632be82534001690da65ece25b5c0882a44afd68b54ba078676f06cc19183c50e64b771f36b1d5a52ce2e885dc34ca4f4c049eb517770ee33c03ae06d21
TLSH
T1A29002600814921716C14E506570B882A391661955950D1D04455558029586CE0502A9
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 cd10e2c001bbc312adc04d72aeb327d10d482cc4eb97d7f407bbb010b87d3a1f
MD5 8f2c92c3cb22979f51a52749c1979d87
SHA1 0cf4f1b7f0b50e4388ef35c2885c9c10ca0a148f
SHA512 e0083fa260f3319ed7dd64b6967edf3d40fdea43fd48241c91e6cc94cb0dfc4049a2d6e458271f302f9e6e31ad6a9cf903b187a721415014f55f749d6ebc5bdd
SSDEEP 3:MsEllllkEthXllkl2zEfli/:/M/xT02z1
TLSH
T1F14404047FD4440DCD0410304053C3D03F73D4101D11574334D144335CC75510F00005
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 53399612a3215f0ab2be8ca425c29012adb3fa013924d2ebe515f78c6a8a43d5
MD5 a1ff8e06ee6cf3592b3e08d4999ce6a1
SHA1 0e3a1faa0850697ddf93a3136ae3a5a3f201f527
SHA512 9248edbe1a71366cfd8459efb4eb774639d6f7d93d1ca4dd1be14d87cdaf6435a360e7d1077e6cb809cec97b4d17278a4606315b970ca29dbc56b45b16c4a1bf
SSDEEP 384:n/iFSZcIl8Nq8TUNTUlIR7wqp67YqKb2f19KNLLYm7fkWBLd+l/MTlgL/7IzV:KFglNwgGeqr9QoetB+l/MTX
TLSH
T110E2273DDC60D9BFD8EEBF89A64D76169EE41237D4B84988DBD84F0C807618DA306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 4b2ae2e97e894eeff82fcb9da5f655197491086bb6ce6f8c6d93400a025cdc72
MD5 d845da0c219f3f10d4f806712392358a
SHA1 037931f0c1159cba8849b7cd2f2b48ef816a0812
SHA512 ec588db419133b422d6417101cb6f6eece6c6dbafcb13f76d81fd241c5eb90d2bc01ca0fd1dc8bb10b476ea9155884df9657bb70ccc0a6434c3ce434ee753282
SSDEEP 3:MsEllllkEthXllkl2zEflHfNlt:/M/xT02zOd
TLSH
T14D4404147FC00405C50010304053C3501771DC1115315F4334D144335CD7D500D0044C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.10.11.1\manifest.json
Size 119B
SHA256 602c605420f4e5da16eb2471e65d37cc36fefc4ada2f2b4e150dfa391911d3db
MD5 bca97f2ac53f73ce2e92d674af736b0d
SHA1 c4ef64aa3397b2887458acffbc895b28f09fce3d
SHA512 610be8574d2328f25ef5f62f824b3429d53a9d14ed718f5754597e95f761657865d5f2056be3f1f7d9574970b324cae9f2229fefed577b800bd1213cd59d4b0d
TLSH
T1D2B092B00C1AA03B22C09320EDA1668283F80228E8021B1E18C076881F8827980362B2
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.153\manifest.json
Size 177B
SHA256 0e9ec9e79542b4a26ff5da5ff91ed23c0fc9d4ee655cc135b64726daafb364a0
MD5 b06cf477c7639438f14301777daaaeb4
SHA1 77f7a86139f01bf8838df12e4c839143c0958932
SHA512 526576792f56bae509e5de7936815bacbdb262884c7b06110b5ad649b8ea8260622eba0244043ee6a972395297cbcbdc830cc105bd2526b619885c6c0ce42ce5
TLSH
T18CC012DFDC509DB119EB4332156D43C4D733CF0B1546450935FB66082E25985C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.3\manifest.json
Size 141B
SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
MD5 3a5a48cc06d7f5cf2ec6e467e34915dd
SHA1 b6c3679e8961f0af7b5a56704992d5561ebaf6c1
SHA512 ae2de2b1827831eaeae6c9d00d081aa7be570fb050368eabc6b549469b14d7409b55e3726d4ac8ceb6cf75e48b3a88604345cb56a53f0686dd84cf8cb262125a
TLSH
T130C04C5585005D71509D87781D6C97054B12CF5618946509DDC68309EC1DCCB64B234F
MD5 SHA1 SHA512 TLSH

Submit Download

c0faaa2c-a265-42b7-a1d5-94ef1859e1e7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c0faaa2c-a265-42b7-a1d5-94ef1859e1e7.tmp
Size 28KB
SHA256 6b1dcd499a2d046e07c183f9e1ef9d7894b3a7f4911933215edfac70b4f645de
MD5 b2e186ebbe52a256e4dc8eee474453b4
SHA1 9a4a11a1ee2431fa4058894c3bf851fc6836b698
SHA512 f67d69c4fd302be970d4b799cd436ee629a6a4b1eec3510d6997164e7958b3605aabb189c1999bbcac916fd1f89ceb5d40b60f9f582ad3f7fcd93347540c9717
SSDEEP 384:nwiFSZcIl8Nm8TUNTUlIR7wqp67YtKb2f19KNLLYWEZEt92DTlIU/7Izk:LFglhwgGetr9QoWEmt92DTd
TLSH
T1E5D25A3ADC64DA7FE9EF6F85A74E3607DEE41237D8A859C8D6D84E0C00A219D5307C12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7908939d-a92d-45bd-9d11-c356433924d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\7908939d-a92d-45bd-9d11-c356433924d4.tmp
Size 2KB
SHA256 7092b6f5557f2d2aca6b84e2c61091c73beac3ccc838d52a7c94af3aa2215d0c
MD5 f30e24e4132a871840ea2003206e0374
SHA1 7c64fa95d8db6e36977b513580d8ef0c28a2e71f
SHA512 a6414e59dff101a494ae8aaacdf3ba71dee918ac90644eb83b42c4d0bbabf5b50f44e50fea57db19077e0aa25f897912a20a868d51e3d3145df844966a87c1dc
TLSH
T1095140E05C396AC5D1FC0E7EB4CB35EC90ECA721B89434792858E9988A7E61D3084C3F
MD5 SHA1 SHA512 TLSH

Submit Download

84b0e909-d48b-4bf1-9ee3-556badd76d94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\84b0e909-d48b-4bf1-9ee3-556badd76d94.tmp
Size 2KB
SHA256 1194f0cc3ebe8a5c4145cd37621257c3e64eb83d6311a0fd0eefff5c7be4b747
MD5 2b544bf8190472789a079c2505b685ac
SHA1 0bd1d1ff51785441abafbf7a0f3041ca04e427fb
SHA512 3627ed387649fe8a8ae12f453c18c80d2def651c2611837a75e55588340001255691e8f74360a6a3bfcad3ae7f48c35775bfda85445233f4616d25bfbc58e6a4
TLSH
T18A5140E15C386AC5D0FD0EBEB49735FC84EC9621B4A03479285CE998897AA2D3484C3F
MD5 SHA1 SHA512 TLSH

Submit Download

a9c07533-372b-4393-9041-af06dde1379b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\a9c07533-372b-4393-9041-af06dde1379b.tmp
Size 2KB
SHA256 438b4568692055a3e9a47d4c9cd6d2f557a2a44f31236c2318418c8a59d731ab
MD5 58ed0a01e87e2ba8853e6aa121de3c26
SHA1 b144a00e9cc87b0438cc072d3e81f52d35f4a739
SHA512 d9f84d590c1269fe8ac5ff21ab18b9b83fce6d1c1a4c37aa8dc5e58b2bbb097505a5815da2a60118552db230f2f106f918cda60dcce6ff36dd8900ca7e048ff1
TLSH
T1A9512FE04C396AD5D1FC0EBEB4DB36EC94EC9621B49434792858E998897AA1D3044C3F
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 9061cef2dae36773bac05af99d1133ae3692f735df7565ff5f17f40a9deed9ec
MD5 88bf35a77b25e16c2037a71dfa6c2ddb
SHA1 2d6c7cfeea66e7cee4cc057e175d750b3f25d8c2
SHA512 9ae87b7b18aa23df20082c9f55ebc9d731675eeea7cdfe9270bda1f6c72d9c44280986bb3b6415da0ad26735e6949728b8e46327ba31cf424615aeded58b7e55
SSDEEP 768:OQaOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:xLhaqLI1WcxKgdfHJHH
TLSH
T1AD63D9FB495B02D0FB9941F4924B76CCC35B299C8CF8E7D2F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 39edc76049982740e3054df294ba0cea397486f72a63a38eec172596d5e77d93
MD5 e78046a327abee2ee1a797a81bb96252
SHA1 d51f40fe5bcde32985627d1014a13437649e7c44
SHA512 ddf04b0921d68e7b37b3277f57e5a48a0a183c42237b85188308f451f1510ca4eb61a3309a07446c5447047750f824d2db7c8785d08a3191600d960ac46fd0c1
SSDEEP 24:64WC5f+qLo4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw3:tp+qp/IHRH34kWqB1kQnjhHmr6ITmUM
TLSH
T1C242886EDA2CAAA2FEE40B3ED7D1D0127B36A60EC2E4C5F1095B405746C440405DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 96a273c4e50b1085a5735141f71708f81a74d8c59c875922859c2959cb7cd6b3
MD5 0c20a67a986922c66b58ec0bc809be7c
SHA1 23c3ca3d26fd5798f72e2edfdc2ad71cddbf045d
SHA512 c0a51ed67760ea5d61d6954d28bd9fdbeadf34e753692e76a3270ada742041af614f187a978ac476d8e24d86f6b10a840364107c6b4217b00b507fe21f0882fe
TLSH
T1534149913935A63F4B874FD490660CC53970F181132E661CEE4664B4BD9CEE26B2E7C9
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2324_1539000742\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca8c5d68-a724-4ea4-9c08-dea33e49f86f.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2324_1539000742\ca8c5d68-a724-4ea4-9c08-dea33e49f86f.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2324_1982745067\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

a348fe21-6876-47c8-9fc6-425174485ba0.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2324_1982745067\a348fe21-6876-47c8-9fc6-425174485ba0.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

well_known_domains.dll

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1046676107\well_known_domains.dll
Size 86KB
SHA256 f63a806e2b89ed1db25687026abff5df4675a82a13882cdb2a47d1b08d2c996e
MD5 94e3e395b95eed4fe8857e0258d62491
SHA1 0e9bb0173cb2df4be5eea77cef5a09bb5b3116b3
SHA512 b680ece7a8b72a6f78a1643ee52a606fe7a094fe058bac041c25b775dd472834a1df349d45594a11fe6eb4c41d083bdb9809e944d9ff254d795f04e177ac19d7
SSDEEP 1536:HJxEzwtlOEMkVXvopF0BYDfBny/nXi7IruMPzEVWHxgeBz4:HA2DMggpuusPXBuEuaxgEc
TLSH
T17583F14A7AAC149BE9EB8674E2645E17BB72775B071893EF1342D0040DF73C1AE35A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_160797480\typosquatting_list.pb
Size 1.3MB
SHA256 04672ded43f6bdec8e338f29007b2ae3781810e0cc5316b1e9f95d282e520644
MD5 5eec5d09d648a9e89b7c2dd0c5ca6390
SHA1 e4983ad7e593c178ead8db893659b2a8df0265b1
SHA512 3b3ff57777ab1dad1ae13c6079d92f05ef6845aeea80105a60be437a97f4739776babe34a5aa73e22dff6b8a6fadeef17e01e936b744c4b54eb2796e89a4f839
SSDEEP 6144:8jDtBXxsq8gmjr2+8KjXOkujb+XYIshDdI0+6xsB5CL/LsBjeLXgJG1NpTrNVgeF:2t9xsUGe/DIsxTEdt0MdgNtbW8N1Q+
TLSH
T1A255B5B9DFC00154DBB8112D20BE71D8181412A540E9DFEAFE7C859F2BC6AC977E85E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

deny_etld1_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_etld1_domains.list
Size 6KB
SHA256 2a9b59ec22bbd49e4475d2d350d496023551953c8b5ebe97266aefe51a0c5c36
MD5 3ca9dab6be71da08f51aede14b0e900c
SHA1 2ca6be97955e3c31a0f3f3cef0182fca93db171e
SHA512 16c2e3694f48b8695eb725969d89669bbb1b7b01cf5fe1fa4e69aa919050ad6d60ce47e8fc18b030c94b15d171543420338700226dfd13bf226b74aa85de5539
SSDEEP 192:7y+Ncyo37Cu1+F8/fi3E6Cfr/z+lhLg3ZRfceMBjcvXmgqqE7:7Tc3bqUB/z+l1g3ZmeTfmf7
TLSH
T15FD19FE4B7F1C94D5DE027C9DE7E204B3B9286A7D228F86022319C27023F33C194A651
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_full_domains.list

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_1636934647\deny_full_domains.list
Size 12KB
SHA256 f154d0bc65cd130b16d1b6471df8ed2841b2f2f6d90e9912b73b37985062e623
MD5 d46f0f6333abf9bbb92ea260bd257b20
SHA1 5da02d8b3d87b5bb18b36f969efdbf8645e7977c
SHA512 9da29f3a8e7d2681666bdee5436e9a95b1c840d0d4906c85fd71725b041f5a1fb0ed30f6151a5737eb08ec42b8ee3e9ab2beced4c8b57785abfd55186bcf16ba
SSDEEP 192:xQDXUZT4QcnYNTprtSa625Tf7wykvSYJ5cGuVeeg4+YxujfKg6VFvfItXlS0GcZK:x604Qcncg25lkj5cvkY8jKLnvgtxLEV
TLSH
T1C642BF8CB2479A85C491BF97F1082614888DDF3BF95327942C693CEAC59F40F5197283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2324_703321654\data.txt
Size 152KB
SHA256 bf2c0a94df6f6a32ea1072e61ed3767c23fb8b3e864b0f6144f65c4b8e477338
MD5 6dd40551f20e2c6ad5dc991e60a7d4cb
SHA1 1147d32c228d4def80fb6415d1f58c1edad29055
SHA512 0d654ba49f9c53349b90cd2ce15424477b9c06ae3ae7bcfa09f61e12607f94750cc065d85458e985632f7c316e79d3b9ff279248fa1e6e4181f16e37ab31023c
SSDEEP 3072:GPAgDcCHaLHl65aynyosxb3+BLvf5yTewIjNq/eq:6X1aI5aZoKzMD4Ajy
TLSH
T19FE3F2608EC45F99CFE4292C90BF1F1A63E18BCD811A698EDB63FD066FA7A0415271D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download