hxxps://script[.]google[.]com/macros/s/AKfycbztrX9rWHiwAuOMbgE5FSpK1D6Hxeg022d_qfMFKDRdsAkzubKR5wINuiUmBy6ZgYYbiw/exec?year=8

Analysis

user interaction
yes
max time kernel
21s
max time network
27s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 22:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://script.google.com/macros/s/AKfycbztrX9rWHiwAuOMbgE5FSpK1D6Hxeg022d_qfMFKDRdsAkzubKR5wINuiUmBy6ZgYYbiw/exec?year=8
Sample261017-2xte8aew8s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2892	msedge.exe
2016	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1704430598-3087477806-3297458608-1000\{CCACEC57-7D51-426D-A198-F4F6ED4EA596}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 928 wrote to memory of 5432	928	msedge.exe	89
PID 928 wrote to memory of 2892	928	msedge.exe	91
PID 928 wrote to memory of 5272	928	msedge.exe	90
PID 928 wrote to memory of 5272	928	msedge.exe	90
PID 928 wrote to memory of 5272	928	msedge.exe	90
PID 928 wrote to memory of 5108	928	msedge.exe	92
PID 928 wrote to memory of 5108	928	msedge.exe	92
PID 928 wrote to memory of 4300	928	msedge.exe	94
PID 928 wrote to memory of 4300	928	msedge.exe	94
PID 928 wrote to memory of 4300	928	msedge.exe	94
PID 928 wrote to memory of 4612	928	msedge.exe	95
PID 928 wrote to memory of 4612	928	msedge.exe	95
PID 928 wrote to memory of 4612	928	msedge.exe	95
PID 928 wrote to memory of 5980	928	msedge.exe	96
PID 928 wrote to memory of 5980	928	msedge.exe	96
PID 928 wrote to memory of 5980	928	msedge.exe	96
PID 928 wrote to memory of 3872	928	msedge.exe	97
PID 928 wrote to memory of 3872	928	msedge.exe	97
PID 928 wrote to memory of 3872	928	msedge.exe	97
PID 928 wrote to memory of 3556	928	msedge.exe	99
PID 928 wrote to memory of 3556	928	msedge.exe	99
PID 928 wrote to memory of 3556	928	msedge.exe	99
PID 928 wrote to memory of 5904	928	msedge.exe	100
PID 928 wrote to memory of 5148	928	msedge.exe	101
PID 928 wrote to memory of 5904	928	msedge.exe	100
PID 928 wrote to memory of 5148	928	msedge.exe	101
PID 928 wrote to memory of 6048	928	msedge.exe	103
PID 928 wrote to memory of 1448	928	msedge.exe	106
PID 1448 wrote to memory of 956	1448	msedge.exe	107
PID 1448 wrote to memory of 2148	1448	msedge.exe	109
PID 1448 wrote to memory of 2016	1448	msedge.exe	110
PID 1448 wrote to memory of 2148	1448	msedge.exe	109
PID 1448 wrote to memory of 2148	1448	msedge.exe	109
PID 1448 wrote to memory of 5756	1448	msedge.exe	111
PID 1448 wrote to memory of 5756	1448	msedge.exe	111

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://script.google.com/macros/s/AKfycbztrX9rWHiwAuOMbgE5FSpK1D6Hxeg022d_qfMFKDRdsAkzubKR5wINuiUmBy6ZgYYbiw/exec?year=8
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb83f9c188,0x7ffb83f9c194,0x7ffb83f9c1a0
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,16325144657687000786,18159400448672748891,262144 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=3052 /prefetch:2
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,15457541087217968969,13834040408502909701,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,12335838937684511494,9829597490329916010,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=3192 /prefetch:13
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,10748759395498155621,8435550795916638624,2097152 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3560,i,2162530599257524337,6420075862027529136,2097152 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,12273846390611015469,13818905095615549091,2097152 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,11671836932093999614,10360383259173618715,2097152 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:9
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5372,i,2332123373002218121,16280007361550714453,2097152 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,17595765597749209880,8093576709155608904,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,10762132396537826213,17168902633024133581,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,13422628038270202562,3737039342953974381,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,13422628038270202562,3737039342953974381,524288 --field-trial-handle=3040,i,8973368059142685484,12143658466174147849,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:14
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Suspicious use of WriteProcessMemory
  PID:1448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffb83f9c188,0x7ffb83f9c194,0x7ffb83f9c1a0
    3⤵
    PID:956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1944,i,1607597439391239699,17333534339231193952,262144 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:2
    3⤵
    PID:2148
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,12077411091466086738,8578435082768403813,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2528,i,18127906541326946196,6415094076220652595,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:13
    3⤵
    PID:5756
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,31619025607978111,11205601668297956095,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
    3⤵
    PID:4288
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,31619025607978111,11205601668297956095,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
    3⤵
    PID:4956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,7873603638440786772,12153714784695973978,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:14
    3⤵
    PID:2212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,6275145265458158120,10411147248177794028,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
    3⤵
    PID:4680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4852,i,3439286915176332179,7392952524136573123,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:14
    3⤵
    PID:2936
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,12270062413369294664,13497700839249310659,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
    3⤵
    PID:2332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,13943029987289370013,4189364847650604023,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
    3⤵
    PID:4728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5184,i,3143094486886980407,6963712015619414164,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
    3⤵
    PID:5464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,13310021531866850080,14998165194938471448,524288 --field-trial-handle=2504,i,12709892315684087808,1604116207120024434,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
    3⤵
    PID:4732

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5240

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3032

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1240

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2892

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1e01dacb-11f8-43e8-aa1c-d703f89b6e5b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1e01dacb-11f8-43e8-aa1c-d703f89b6e5b.tmp
Size 38KB
SHA256 e493579774524126ee8841caebf4a1950a7d1b08ea5ef142c06f85832739da13
MD5 eb71567b919d60f59979645b99138e55
SHA1 7e3625f345278e9cfb991242eec1267729b83a4c
SHA512 66fd69e60f6982284e62ee1d335c20eaa1e28cc512b27366d3132885ac1c615cd25a8d0d866e6a54bddcbcac9e54035cd81669208a7e39be1c4cab06bf7172f0
SSDEEP 768:vN/UxvxjgC+5j3UVaX8mieOMYftujFnUPO4Qp7cPAiSm2eo4w4cciGrTFI9AgZbk:vwZj3+5j3U8XlBjFwQpYoimeoR4ccFFn
TLSH
T19003C0B598A8AE339CF39781365D6343FFF0416355C52EA4CAE92E0D428B7AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

40a78620-4961-4be3-b73d-3dc80748fc7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\40a78620-4961-4be3-b73d-3dc80748fc7b.tmp
Size 38KB
SHA256 84da8dc2c3f92ba940d1a8a25fd278674966a81c23ecd61e8344c6e09bdd6495
MD5 1167c0520ba30fba461cdb96f25ea586
SHA1 8814e88d32823e1bcc0e07fd011ac4ec0541fcc0
SHA512 02a4013fdca2b8c30cc7379f19ede6c551e79a70551c2330865cf0a9a83bd0cb80f12fb4e069af53da321dc54b6627e8d415941c5df94e3774d7c37e254f4c41
SSDEEP 768:D9U3N63cieOMYftujTnUPO4Qp7cPAiSm2eo4w4cciGrTFlVS9g1OxTTLS:D9U3EsBjTwQpYoimeoR4ccFFnH1OZm
TLSH
T142038EBC9CA49E3F48EEB344721D2666AEA44237E8F40A58D7C95B0CC17259EF707C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b2a7268-6941-468b-b2aa-0b56e0e4279e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9b2a7268-6941-468b-b2aa-0b56e0e4279e.tmp
Size 37KB
SHA256 6cac946de26d8715d6ce4defc8ee811822913f0170c5ba8c54b6cb1a649a5979
MD5 7ebf93c88a8d6bd3cf983385ef87a3ab
SHA1 fc3d58c87b9522f24b5b0976c10dc7a6479c54fe
SHA512 423c3bb13367d076a62bbc1f77a5f70a23afedc2ae432f724c7ee293c1f3576ff766360a061c3a35c7260ce8e0f71dc120ae2e5b7f16e7beb4d3a2795bce1da8
SSDEEP 768:vw/UxvxjgC+5j3FVUg8uieOMKjFnUPO4Qp7cPAiSm2eo4w4cciGrTF5OAgZbCM3s:vdZj3+5j3FqgVwjFwQpYoimeoR4ccFFf
TLSH
T1C003BEB5D8A8AE378CF39784365D6342EFF1416395C12AA4CAE92F0D42872AD430BC56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 d94841acc41ca658a5ee48a1ef8763d968ff86dec9b648ab9d4d5f3d4fea0d3a
MD5 3ec4eb6dbe24df0552b56af18c05a2b9
SHA1 fd334aef86650c95ae106374f1bb923cd2432390
SHA512 44bb44d7dffcecb78e155155b9571e4c572f63ed79c2a0c69cf356c04a91ff7d4cca3351e2c6a641095a4fbe0d38498ae9c3f0ebaf029b3ba42f1da7597e026e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P77:fwUQC5VwBIiElEd2K57P77
TLSH
T1B6B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1ff2e3194d2fb878d61f7f68081a6bd42e6f8b3dc079f4f16092347b19b25233
MD5 64ca41244171c3d3f74573e87fc18d8b
SHA1 41fa69200b46a2f05d00caa3c4cb189bd96b3cd9
SHA512 3fe221e748fd605160b0d5f16bf7d369693106cd13cd0c731345bb976fb78e6d051bbf3e33d08e4f0d35778722803ac06d07652c5934ece14656c878a82d9b79
TLSH
T180D022052A266EACD22E207042108E005140CA235501000189032C149A600821C42DFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 648887a89dac8888df245d8758dcd78e85ae79931c9464f19b0967fcd69c3d2f
MD5 b053e18c94ac6f6c60a9e0a281e1687b
SHA1 17ed2d8ae6844c2878132336a2fea7d044381f8b
SHA512 abf3d05979a55f573445c0c7a95529a5899c0d9f55f350b3eb35132d8502e23e6c764ffc98e92f4374754aa22e9292fd03f8e6e8113c0e919f428e797e339bfa
TLSH
T151D02BB9DFECCD62D54820B402508E116095B4156D490040D903BC04DD110814D03569
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3cbb7af0e83c94179bef0806545e1fa5f5169cf8349acae5c079c81f30baed7b
MD5 4035a26ff2de56bee451019eb108651d
SHA1 7f57af283e9ebd7032797bec17d784320d5d7fe6
SHA512 efeec07ddf9e59d09c89e6d1caae8b4913c6fd3edd5d906647a04f1e12caff50afedcd70983d7f54d4fac92ff7d752c6896e41e913f83b803ea938cd741397a2
TLSH
T1FED080D9AF567D2CDF5F64B05745DF505140D93674070434C91B6D1CB5515452C42EFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 24f01750ab2b7d6a7b70c3a7db8aca8fb32636ebc737201d13a266e4e4b510f8
MD5 55f5f8a785e8f3cc27f5246b4343c453
SHA1 64be506b5d4b755a79d06f01eedcb21791063721
SHA512 db9b8f2a5f615c01ee66bf8bc36363a136d4284a20a7ed486f0a76e2680162c4cb99e0d6795a74d6f51148caae0ddcdf4390d49e5abafe33165368b9fccaa7cb
TLSH
T18DD080D5AF567C2CDF5F64B05745DF505140D93620070434C91B5D1CB5515452D41EFC
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 68f353a62995fc87917d7d1eef768abe00ffab02e1d3e469100f99b6987f6488
MD5 5ba62d3fe2ddefdf87e8dd139f3e421b
SHA1 1986deda7bda2ac5b490eacb9fe2784fb6d01648
SHA512 4e6a767b24298d2e01c8dbefa41509e1bc67cf2c2f34fd0bf866fc1017e1d15a470a5a95feb8ee1cccf4b8ccf5fa9054bcbb93919c00de89eeffec199b68baf9
TLSH
T19CD02BB5DFFCCC62D54820B802518E116085B41519490040DA03FC04DD110814D03555
MD5 SHA1 SHA512 TLSH

Submit Download

1703fb4f-7ee0-4e8a-8b81-4f2a3653b1b5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1703fb4f-7ee0-4e8a-8b81-4f2a3653b1b5.tmp
Size 23KB
SHA256 f05426b71d05a2ef782aeae054187f96eda871f7a4eed67df6a14b5aeaffdd0e
MD5 5af5a440a9d90aec6d3b1b911f55e346
SHA1 d65e88cd6c50a5e57a42f4d5a842a45d2cefb759
SHA512 0ffbd399f8e9fcd61a95c2c6e46537abc3d37d598fd64dea43e723cd35e15438f87c31a3844506c20f259ab56927af52227cb0d68db199efd938e61f2c291fb4
SSDEEP 384:D7JakElfCtg17Ff9tKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVXn975RwBroMXw:DFakE5Wg1Bf9t8F1+UoAYDCx9Tuqh0Vk
TLSH
T117B2CA3F744CCB7E8F804A9DAC196F976D9802C79A588D4047FE994C03C77EA92294DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1f17e954-93b8-4d2d-849e-f9b67a64841c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f17e954-93b8-4d2d-849e-f9b67a64841c.tmp
Size 11KB
SHA256 c036052935a9929a076df36707a140351ea5d1e794bc989e010fd2e2be2c11b6
MD5 4ebd7673ed0e8806cadff6b1b0526a0a
SHA1 85877dd1e5e8dc3b44ae658faf24104d1d241b0a
SHA512 5a3829a312a03dcff09b0dfcaefa1de94b6de309d0704ad29fc620a1d42fa759028dbbc889918beea0f93d49cb6f8ed830128cfa80b1102d4e418c588e3b5810
SSDEEP 192:sxRgRUbd/feSsIJOzoA8po2/g6+WNxw0/YczQXriT4GA7IgIJ:sxRgwd/feSsmzL/5V/sbiTMTs
TLSH
T12432A7156D28AA3B8CDBD20DBB65BF53D2F91032A5955F48B6FC8A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38695a54-5900-4958-a206-b744120e62c2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\38695a54-5900-4958-a206-b744120e62c2.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

5e5aaf3c-a9a6-46c2-8757-d1975a996265.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5e5aaf3c-a9a6-46c2-8757-d1975a996265.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7615ff72-250a-4f01-92d3-89ac78cc7003.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7615ff72-250a-4f01-92d3-89ac78cc7003.tmp
Size 11KB
SHA256 ef17dd7d424e1d615c9b970ca863329cf8920179271a1f370bc2931dfc9ed0bb
MD5 71ca839dbb109ff3e46a8f22626a3e3d
SHA1 f74d89b0cd9c127aefdd5ed536a5b1efc6e05b9f
SHA512 55dddd84cb188ac73bf05e35b3f3a77d2c4ce50bef80ef76223a45b2fc4b4ffb9a8078bc4d76fb77aa50d93d9c3008c346a361ff891de15b7f0f4c18435d0bdd
SSDEEP 192:sxRzRUbd/feSsFJOzoA8po2/g6+WNxfAXYcMQXriT4GA7IgD5J:sxRzwd/feSsDzL/5eXTbiTMTf
TLSH
T1B632A8156D28AA3B4CDBD20DBB55BF53D2F95032B1955F48B6FC8A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 21df3f3328a9cb2f5e017081cb6d6236bf4c0d55057d7ba0512ba24513d97d2e
MD5 ba52d3717449e0032e3bce2f450a91bf
SHA1 92aa5a3823445b4b2631afbe4ac915350b54934a
SHA512 4e76527344f1f27135ae464c85ec2607ef0ccd77d8f1cacb539cf0eaa07e7264ff0833d3695cd1dd7bf29ab8b5f3ebb70ce7b1e2a1e660fdfa748c36abaf591f
TLSH
T1B0E022AAC921EC2B09FD1B6EA0918746EB40132B2B50994F3A3DC10C8FF163A0586D1D
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 d3d9e6e6481cd0394a7b33e1a29b57a14267f207a0a8bd83184c3a87d6a5a3ae
MD5 b0b9b882150a055f013bed425b230a5c
SHA1 282d9c775da74e3c7f477ddc152ac40474f97c57
SHA512 7b45299dfd319d8ba9242d71d2c602e8e2128d8077e9497dd417323ed3a3ae54f58079a4309ea3278ba1f7c3eea628d0a8c951b539069bb806418d8ccc807b9f
SSDEEP 192:KhoznEkDha+6ufBCMiTlG1UiM0u9vE2sFlx0KilpqIS3:kkDc+6uElG1Y0v7m5O
TLSH
T171132EBC7A451D22F3D6C87E42CBAB356B71A026E9D27447ACB2F85D78443089E1F50D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 e97ecece5b1ec5fc6a88a6a76f68afba63f46ce0ba0649cad0b1a932c924df69
MD5 f6ee0346f64787d400b3a2dcd401d866
SHA1 4e84ee66d1419eebaacb71b908b3bb735f369e99
SHA512 c393678ca03336e095dee13cf685837cb8f0e3a31ca85d93ca902c20790b770bfdefd372d19a1ac03d75b020b1583748e81d649b05dd4cfbfdbb37939172f999
SSDEEP 768:c7eJvNcl3TVAL/P8fpOL/JLnNsMK1byFVSGSaHtj33UKezfjO77X2mU:c7e4TVAL/PgpOL/J+aVfBJXezi
TLSH
T19F444FFB1951605BCBA852F5D6033E3ED177411E7CD2F8A9E1788C812825F71B2BDA48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 83009bdcba3207bade679ae600b2071a6e53a43dccbb42c5c503cd60932a79ba
MD5 d7dd46b1646cfa402130de3b4bab44e1
SHA1 fc6f95ef1bbd3a46c0b9db97b6e6906891c271bc
SHA512 f1713b29f5df9b73d4d70115bd15b28a76e034d79bca0c16bfdb8008c2c64abe9294ffa6ce5c36219e8d894513f9a8ed81bd691f2c8010ccdb08b4829a0f3df0
SSDEEP 3072:6v9G+bW0BHUntyMyi2WY9QVfouomtqYeczhmtnXC:6QuBMyeFrtqYJi
TLSH
T1AF255CEFCB682C83CA6B877074D0D90B7E702182BA9DD0D39944C5E957D2B8175E92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 4b31f295adfa6e51cdad9a945555da05c058f2c35eeedce14fa4c96bc39c5343
MD5 fa0bd7aa6ef3af6ce7dfe5b7d15b967a
SHA1 4efdaf45d3e965798a7b3fe2d3f13a564bcdfe83
SHA512 eb507086a451077bc643e0fe222b09ab8416a30da757cff0d8120634cf325818b3b6e45b4a4f542fb537d2fe492bfc20756ba5485f1e3b07a547836e75e4073f
SSDEEP 12288:Hhe/uGfQ4R4+t9y5v4FFvL+N5gT9S7QW9GowDbjxu2JOeMA05cyrR/artAMbIDP7:OqgwgZBqw0KnKG
TLSH
T180165BEDC97858C3CD63A930B4F0E9877C7413C3F965D1D68898C18402AB7C5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 c89cf560960c8fddc76eed709e0c3fe810265b70f22b16e1a60f001b64af9699
MD5 140fbf5f8552dde1fd421a20c85722ea
SHA1 a4e980ce43e4d8f8ea3893e1cfabb5b0d957a5fa
SHA512 61994fd3f7443a62d891b60a40bba7f1c9728c84af9b941f888cea20c5e38a0c21e4eec60a37c21e9d6233b744ae190964be90053769aa60c507b6fee28c2009
TLSH
T183414500C278A295F79DA37204C61B8BBB3485B152C33FF14F5AD1F7DA453A5C189A0C
MD5 SHA1 SHA512 TLSH

Submit Download

fbd29900-ee9c-4278-b033-daf0d181da52.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fbd29900-ee9c-4278-b033-daf0d181da52.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 d73d31528fa150434e70e5bf4374d6dd495a71e1249c3acb5ccb1d50e582ba11
MD5 d91b095244a927b7f14bf9b023bb29bd
SHA1 3b85280a210f164bbb231a16a0d9f3e46c6cb839
SHA512 04a50c6edf97b6e0a3168cab163812ca97448f8071c800508528353a61eac7a05537d02c403f15f427568efbd9a2228f98750badd4c02c585dddea0d3b8c56df
TLSH
T14CE026A5B5DBD22F772A38C72324DB48D3D2346AD6897D4B6700CCC87E4A201F283696
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 342B
SHA256 39dfdec86949f152a1471442545245ac5f3372b56428a6f61dffac0a3ec159e7
MD5 829a3c6987490c82e6ba954662c1d61b
SHA1 3799630075c4e24b21e810bb5896dd5ecb96c9b5
SHA512 0fe38650c2f79854b11bb4f6564fa45639e74cf8e644f7913c55cc92ee0ebe58c20307360aa83432e6521c046c39ccf2d2e1098695cae563817d0f4af593e30a
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 1d2f43d55839ba2292fe21ec345e55fc3573441666b93ff4a3796f8c38dbfb25
MD5 b6e4b94eedd87c64f0096d9e9396891b
SHA1 19a675f94fc72f1a6c8c772e8b3cdec93fe5bdaa
SHA512 e665956c63edadfcb24b639c4d3962d7585fd660ad3a45c2506c7cfaa41fb83f69cbab475ace3cc655db383e6d4ebea1bad43f2464ef69652c998cd7a1ebd291
TLSH
T1F2E086D824DAD22FA1286CD74378630987E3349AAA8839071749E948A545759E2A7290
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 475f12864892aa7b74be2630191c6d8f0223c403e99ba88c526ed36a19ab91bd
MD5 eec0746e532e1aa3315a9bcbaaec4a2e
SHA1 b3092a8c10c8f3ae716f6e3bc8beec6eccc0e4d4
SHA512 dbb680492930aaf08078604ab14d0d1e63853a735d0a896644c8eb4d4ed380aa94f0cc9f573a04a7abc1c06fa1ad335a082b07b9242e5b463f1c06605f0a2bbf
SSDEEP 24:TLlWK3iOvwxwwweePKmJIOAdQBVA/kjo/TJZwJ9OV3WOT/uReQQ:TWm+/9ZW943WOT/
TLSH
T156E24B2A5E7C7121CD667136AC2194665CB910DA977336F23EE000796F8228BC535CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 870f652e659534095ba32d3a0ffc035bb6567ae5ceacf1640b19507f7c037ea2
MD5 a78c67ae6911ede97ac3f41d9a650574
SHA1 5f665716022c91dc6043170c55d957d199a9a31e
SHA512 4d27405c9d5711d258602022fa3846fbaa3dfea2a7d2f4d7918f335c64bb14e27b07f2ae34d986c1134b50d3332c3860ae93f3ceef3ab9ead1214215b4595cc5
SSDEEP 48:IzBmw6QU1PzDOPaM6kOPaMzE1Nu8MYqbB7mB1B1K0hEbZEz3mAm6OKrsG2qsBJnL:UBCxDTkXndVqcNKEcEz3mAB7wJnqy4Q
TLSH
T125B2F8031E3CB403EF950D7A22796039DC37F2A8DF69AD5A346890605DF86A178385EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 224KB
SHA256 40521c0ad919bd4b986b88568e2561eb882f62d2b14c796c6d12e0551fe5c0aa
MD5 b83692cc30cada41824f1931b835a6aa
SHA1 45528562b35c1fc363b9fc94c270382cc8b9f88a
SHA512 e07f2fe255bec3125a28d6cd6f800b6f0c98c3d8dcc68c7d5b30eb66bab128f6fea260e8287b3c6c11c7d112e6ea66f403ed6dfe3728a1976c1cce4c89b149db
SSDEEP 192:rCpOWrH+bF+UI3iWGVoWN3qL/mDVVV63:rCpO4IkUI3ijVoWN3qL/mDA
TLSH
T1EA241E0F5F353722CDBD813669E644A35C7DF03F8B5266DA6C6114B4CEE2652A02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 334B
SHA256 e475899bcd645e5a73ee923c502855c5ec9834ad60bf812fbd029de13c3859ff
MD5 bcfc6f95611d34b3c0529bb56733a1f3
SHA1 96b7d54321c7554c93cae2b42e1030799504b743
SHA512 4a3811c661a307961599661408ac943a394dd839e14e46aad8ce62d4908570817bc79d9184e303b25277e14e3b7eaa0ddba6a2d2b6a96832ed02c1965d8a0f10
TLSH
T192E026A554DEC22F734D608B022C670EDBB2341AE7883E0E1F04E944F989204A3836D2
MD5 SHA1 SHA512 TLSH

Submit Download

3133b969-b554-4963-8e23-4c2248c5850a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3133b969-b554-4963-8e23-4c2248c5850a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

5abc949e-2402-49fb-b2f5-643670f1f31f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5abc949e-2402-49fb-b2f5-643670f1f31f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

8be77e39-8ec9-44cb-91bd-7db4817b0b58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8be77e39-8ec9-44cb-91bd-7db4817b0b58.tmp
Size 4KB
SHA256 ff37a2f2b04e817f8d7c732563d26c839c01e821f6f3c449d801145f16675f46
MD5 e0367d76622ee1456fe88dfa13ed02de
SHA1 ad1df4e24787941d39e8eb994271738679f6d039
SHA512 4345b4a23a330d3634d3bc61859f1661f74b08d53ad6c565e34de7a39c1c7c7a96eb4433d215d771b08c301694efe393a6af1ad7b83eda7236a7d9c4d040ea6f
SSDEEP 48:YALlNOOh4yOzQyfVafo7CCgmgjhhnONzsfazEsQkzsP/sD2zKsKZsWcsXcwEsMCF:DsOqyQVaaZijhMzktihtLcwItG
TLSH
T19E818CF7C7E8C62D891155F4AB15AF1FCE2D0514432C3C6A88D8AE2B93F2871D141A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 24KB
SHA256 9ffaca89f6e2f6c152f7b0d849c675ed6bf361317a6cbf2d03eaef2a950c5b9a
MD5 be2c9e0bd117953a999cd751bcbce75c
SHA1 d4f75b45096bd3112a245de142ffedd588bcdad9
SHA512 6e987354e098cca8681095433781e0ca2cd6ef186d7c84547c949f6ee34df094c31c32038611b877195b3616609346d97dc318870e825a2d5f008b40f220fb90
SSDEEP 48:Txk/LopFMaty423w/a9NUuTjAw7oHwUapGkBjW43:qDeMatha9RAb/apDB7
TLSH
T1D5B20E4E1F307221D0B44B77E9D589232E7C101CD3B73A5ADE1420F28DA26AFF90556A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 356B
SHA256 abd6cc00567bccf9ee8a667e60dc441b77ec60327351abbf8cafddd4dc83c11d
MD5 c39c6a1aa0b691da0fe366124ba1e37c
SHA1 f10f31be010a4009d542b1c4b9fb3aafe2cc8913
SHA512 17351c727bc7ea2ab3257731307e190d16d59236d92c524dd05f3d3e0a24b01066a83521fb834e7782cedcf3f130f50e0243c9cd983e285011b37005a6416d1f
TLSH
T160E068D2C0F9F037102A1A7A0C483CA136B9B434645010E2C8CB827C70C18F76E16438
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 d62099139bb208bdd717550293c37268097cb9f991f8037b81cf3918870a22fd
MD5 0d725f4cca6638b392321e087603003d
SHA1 f5219b6a9ae8d82adbdd7d08d1bfe1f06b8f510a
SHA512 7f96abf52f336f604839bcf9800eff000cfe8abb0c7ce5eebdee4c0412e33164d47f1027eed4f76d4193095027168a17c6f7623c15f2c8244cec9591f3f94f9b
TLSH
T150E0DF1056DAD27E711960870226C30DD3A6742FD2C83E462F80DA84628A684B693290
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 609e1c67eb95495398e436df74c80a6e0e8f2d06fa416dbba6f6710ec8ee34c4
MD5 ca02dd837654f3284a352084020ad9b4
SHA1 3ea9ef2334bcd39d165ce36c7071dedfbf85b684
SHA512 cf73f552bcac5275e9f143486dc10e8c6951a1136a65ee293c9dbff44ecf94b03abad35cc768dc28c1daf3abd928510ae767c5b3b1b737f118c1500f0ec7f941
TLSH
T1E1B012407B426331C48D4530055A8BFB6350E01130807613CC684F294D6A5982E81C81
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 37d75618bc7e19186d26d0052f71c8889966b50ad8c9e2b685d9ff9f44799f75
MD5 28ed2e409e4c2efa7169b69fed6f9857
SHA1 7746dc66d0286a945e3a25cb7f159cea01917588
SHA512 538f7a058a81d11daa1f2aff1aac057f43638194324273c95278c1c9d1ddb6803e06855c3937ad4cb6d8220723278b96e24a4852e073c758e3c8ab8dba3df48c
TLSH
T1CBE0D82065CFD72F729D208B0225E30DD3A37426D6C87A592B0CE584634A2807383250
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000003.log
Size 175B
SHA256 80d1388b9a7150eb0291175fe693dd7b6bce910c3e4fff51e94841d31d771dbe
MD5 cb63c64828a27af7253afb7c7d986654
SHA1 8a54aeb86f79cc69e6f11278d874cebd328ae466
SHA512 e0dbdd6931c9272e0b52bb2ef7895121f6324379f584899343342a057737a9837cc476842ea781a1de5c17a20c06e0a7d24c0ed6ea41fdd95bb99296e8810f9a
TLSH
T135C09BD55F903023FDCA5D3D0DAB53041720C4752F74CF57D28430901C0A285FF61145
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 66bfb56d5374e0af4466b620114fff0b896d418ebfb095a86d43877884b00aed
MD5 2b6379f207ac369bbe39d8a71235f112
SHA1 bba4a8eee2dcb68af6751ee28371df0a7da56190
SHA512 c72cf3fb824a2b2d9b3dc9e7ff885548871cd6840c680075f3a0f613a2951fdd0c3497bc0684acee00b8703a5c76b8d103edfe5569507ea59ddb4cd8756da088
TLSH
T172E0867096DBE73EB10860C30674974E87F26C3A97C87A4A5708B464B345284B2A77A0
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f6becfc2c480a29fb88f1681b3d2819ebd7e0bd0e82f20dc2178f01662195820
MD5 0871b4774e08f17d770f9b3a26e64376
SHA1 17ba2701cbef6e562a354d880af10d9e9ca61a73
SHA512 9b6016c719d9efd045cc50f4690ee4f5ab4f007c7240f13c98455f450aa372c7092652b2d2dffedd865e96855ba80e261f02d8a931b9bf39e55b0a597260a3ec
SSDEEP 48:KckIDKRKUzyFDIBKgA0iZa1pjnzgHPkzIoxgKp1xbglBwuU75tyi:KckQKRKKuDiKgALmQKjiGN
TLSH
T186915021717B6293387D260462D8FA9A474B31F33068F53B3BE940725AEEE440DBD5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 6456e56ad646a6f66f7ad801965d2e599b024a5530e10c46ce07eb2248059529
MD5 e9668ef35e85bb4e46f61f9b92955d2e
SHA1 31d5bab1795a91bea0699264b0c6c23b9dfb4efb
SHA512 a9141419023638e235616551a6859a4e11202626868eadfbdf310cd4019bd691f08d77fee4e0ab01a0ffda3b75db595300e0483054115f134683d6036c059d83
SSDEEP 48:KckIDKRKUzyFDIBKgA0iZa1pjnzgHPkzIoxgKp1xbglBwuU75tyJgI3Ktescz:KckQKRKKuDiKgALmQKjiGyggKtefz
TLSH
T17DC14E11717B528338BD2A0861D8E99B875B70F33068F52B7BE841624FEEE040EBD4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 256KB
SHA256 8d7737eb4d96a8cee3ae0d4909bde2d6bdf96223444251f4a170a24ba1cfd125
MD5 692ddabafbd9ca72b8cabf99fef337b6
SHA1 44cef8a1c17d5c4e4773092a5841ed1a0bde1538
SHA512 8d5bace15d409bbe8bf957157732b5a38ce3c94ebdfac3fea96bf50142d543756e5e959ec03a327ce78f3338dc24068ee8be7f8d595af57d76372e8353ed8df6
SSDEEP 384:DNrRZyCSDnxTICy7MEhIKyll7svbFKfk7:xFZJSDnisyI1l7svbF9
TLSH
T10844740A7B747001EDE6DD725CB080771E3CB16E8F22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 33af3c79b19580f19f10d382fd9f1ddfb7ab991e50962a534a767f936fdbfc12
MD5 602d9de5dbe69eff1233dd7489d99107
SHA1 98789e8f856ad39649a5538a4f14554f7b102248
SHA512 5aaff69f85e99e40ac7353b288596ecc432cd84a999eef7f1e37fcc97d1602cd487425aed8151e436a355ea9a42d7c5362502172467f0976812bb06e60d47efa
SSDEEP 48:DEK3tjkSI5IUltGhp22iSBgiOPaMlNOrOPaMDW:DEtSyGhp22iS9kS9
TLSH
T18552129BEE343112CCE986324BE001E1FE67513DCFC0E61344E910251AF49D15B1B5DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b271ebd7-3059-4da6-98fb-8f27b65f130a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b271ebd7-3059-4da6-98fb-8f27b65f130a.tmp
Size 12KB
SHA256 8e0a1abc4e6583006275fbfb334dd73cd9ab8377e16f81337b51d78c0b02af7e
MD5 5a1e0930fb3786b3dbcb77e3bf418d35
SHA1 5326c57b7650b41d79e8583ac854e89c5169644b
SHA512 e9187d000908489d146ea8b86649d11c619536e880cdef6d4a340d8fec2c2a8f407ea6ebdc3fa7ee5ad678f6a23803a8159f1744bf7223880894425e9bd4f0d3
SSDEEP 192:sxRzRybd/feSsaWpVFJOzoA8po2/g6+WNxhfAXYEIuXriTEgA7IgD5J:sxRzCd/feSsaWvDzL/5YXtbiTCTf
TLSH
T1FC42A616AD24AA3B8CDBD21DFB65BF53D2F91032A1955F48A6FC891C04E77DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bceeac2c-a8e1-4c66-b793-c0e5d1646cf8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bceeac2c-a8e1-4c66-b793-c0e5d1646cf8.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 488B
SHA256 6f3c2735401e002add4fffb25ec3e4bd74812011b0bf596142311f2bb2481735
MD5 393ea59c32f14fa768e143bd1a60ce35
SHA1 1e3055e16160db6faf221492f8bab2addfd13472
SHA512 c66fa7e822848134c476881ec9268ead72c3faf9ea0580c9a9e80065885f83b80f970fd9d93548eb66592bee85f2a8964d900fc7b475d9ce366690ea5122bcea
TLSH
T157F0B4C1235B70536ACCAB40820CB503A5ED2EB7110D74B5375D92A44FCC8080F2FD72
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 12KB
SHA256 af6b549208dc6260789d711bf0a3394c426eee35602f1516972993589dec26a4
MD5 7ff2571a78026c70d3c9d981c1873fa4
SHA1 413c7a03654d69fec452ccc7c0552862eea9d650
SHA512 1a683f762c5342a44b88bf49f1f9133b7a2867f2ae40d06036b25ed0e91fd3a7a69cf589adb70ab457f70674ed0896ca605a2021616c0d2b0ed52bb33f0a95c6
SSDEEP 192:FQrIII6b6MIME1YcY9klOohAs4lrhwQ2sLr:FQrIII6b6MIMiBCois6p2s
TLSH
T19442856F2B051B77C45F5F36136382659BD448C14472A12D72926C1F8EF3E9B82C96F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 f10cb5ea0ffc07629e9b55af7c90b47bcbb7dc7d32edb653f2300e2bf999ae4b
MD5 ca42e13868dec6452d1a52bfaeeaf997
SHA1 63682ed715b32153c41bd74b2f0a5b2a7c5634b5
SHA512 25bf8c4117877e4cdc2ff4eb519c530ed6491816629ab86bd0c79b2fc2d357efbe83e8a9749de08864b92c2321a0e18601f371a414060506f329dafacb9f2e61
TLSH
T1DEE08694FDDAD23FF21828C70165478CD7E7291FEE88794A1F04D49CA545244B29B591
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 d5f0a8b532e8c82ce17042501c6dffb88a6bfad970f71d0d00cd982f880a8bc1
MD5 1ef333ecfe577cc2f47134a5dbffd0f3
SHA1 86f0ff13ecd8cfc2f2e1163c8624fc91e64eb35e
SHA512 76e54d4561885924c79644b3406822ddf04001d6343c5d27e0bd72a9985966f03360a0fd10e89daedf10c180da0d65434baa40d2ae0565cf9db8ece06d0051d1
TLSH
T1F321E551F330C618F14E863A607E97290778D8428FBCEC0F487920246E72B141D4B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 4a396873d3c499af026253db288b04110b226177666ffa3a88ae529d16e5f24b
MD5 416cd43b347d9dc19739143e7e6f54c0
SHA1 aae4651c5ee032fc648645358efd46a31fde15ac
SHA512 17bbc71ff6c72135d210048913d8cefa3d8cd86b6bf2a8fabd2380aaf0810cc9aa593dbc041c5b5109c3f0083dd1566e482b096575b80f2c06d89299ae4680dc
TLSH
T19DE02690B8CAE23FE11865C7016587C8C3E3381BEE883E0A1F04CF88A949245B28F191
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 2d08beceda7171074fc107ca970a0d256aa1f5dd10c624a82d06745e69959906
MD5 8b939347c477c6998787c0eb2fcbd704
SHA1 25119205ae81371cfd80c301bf656187cecf0325
SHA512 ff17f3ae5a3a5246f5f503fb9c60f36f89b8532191497a2395ec6f66bb649de795f577f31343b21a7336cf0a5cffb62c1ba01fd0ecb951097e9bf91d212e291d
SSDEEP 3:MsEllllkEthXllkl2zEflnc:/M/xT02zp
TLSH
T1FC4404547FC15C15C500313440D1C3D01374D410051157C33CD544375CC77400C40044
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 d3bdcd140f7fb8821555428e8c9643f9a6f5a7b2bdf4e1bfddee6889eaddd301
MD5 6a1154d71cbc08909bf0659f83facb93
SHA1 f05c57d98c40e7b2661b750a0019ac3f95f186f4
SHA512 6ee01548c747b9831a04132973bd991dbe295a7e2b9f59b497c6e38f91e24d6741ef53a967266e31a454ee117323d9c53d49481f2d3b632756f63766aae0c1d9
SSDEEP 3:MsEllllkEthXllkl2zEfl9PNc:/M/xT02z+N
TLSH
T161440444FFC03C05C500143040D1C3501370D411451157D334D34D335CCF7400C04004
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

campaign_history

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
Size 20KB
SHA256 103b44688bcb9a55451ebf94c2cc215ecbed01597d535aea8567b1ac4560d7a9
MD5 8d73c1b7726be1d678e5d4aa09451258
SHA1 b57c1a4a245a9c78d34adf4490d3aae86c3b2ee7
SHA512 84295f4be6899ecb32f670d1bfeab65b4d91abca353b560d2906855bf1e11ef639d3048f7d984054175e0b9b5a2a98c6c577033c2b96ce87d3e8c045b9fd735a
SSDEEP 12:TLJYJiEZXiDiIF8izX4fhhdWeci2oesJahvGFUxOUDaa1i3isZQQtydU/qzQdUT6:TL+j0afDdWec9sJVUOVCvXjy
TLSH
T12892F1366D352033E8DB4736B89349D10EBC125DC9A778548ED40D210D61BC1A6492FC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 bff7dcdd2eb2a394222687f727b0d263ce53611d6ac8ffe982577293bb78a49e
MD5 2caafa1a178481f1cc7bed242b321085
SHA1 3a1db9906b3bbd374bc4ef338ac648421c49523e
SHA512 ec13d8708a7f63f0fc8d8d4100bd672142cf0c10eb9b2d8d4cfbfc8d56281704104e169b91842423a3ed77094d25c27469a37a113d10cd63c35ae64bdd8fc58f
SSDEEP 3:MsEllllkEthXllkl2zEflAz:/M/xT02zn
TLSH
T1D34404447FCC1445C501117040D3C3503370D4100711F7C374D54C335CD77400C04047
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

a54d2180-554c-4898-9fbd-40b3045f07c9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a54d2180-554c-4898-9fbd-40b3045f07c9.tmp
Size 34KB
SHA256 fccd4ce03369b0471245829fff2889702b49e687d08b8f6a4755ad01f173ef30
MD5 30e520f5c471cee94904b0d9c8623277
SHA1 00630c1fb9307d9b55a73f11df2551ab5a7f91ca
SHA512 754623e11d4d075577798ec2ae5833c576f22365808b17837533f5d26c7f240356d7e77a83d91553a8e5023cedaed51f45766b3c70e453a69d9e5636f6b2e7cb
SSDEEP 768:DzU3NgacieOMYftujTnUPO4Qp7cPAiSm2eo4w4cciGrTFl9xTTLS:DzU325BjTwQpYoimeoR4ccFFfZm
TLSH
T16AF2AEB1A8A4AE638CE39291761D7343FFF08213AAC81B54DACE6B0D41876DE5317D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 48KB
SHA256 f35a4f569a8d6e9a53c7abbb2fdca981cdaaf4108e2934925648d90000b72a42
MD5 29f0806ef1eab44a9cac51d6178104b2
SHA1 da9a041647bf896631ff9a3a1470aec96da1eeb0
SHA512 02d7f20c525765b0a77f7738b19fedba3472edd6c259dff60db5beb1f82ebbef1c72f48fa68ede5aaf452b953f8d1b959494e48c37cde60ada7cef9e322eec56
SSDEEP 24:TLL4/arHRH34kQrq+i7ZYZY5J+Qnj3k0rJXAeL3mkAD6W6Ivrr6Uw/sufL:To/IHRH34kWqB1kQnjhHmr6ITmUuL
TLSH
T14C23896EDA2CB9A1FEE40B3DD7D1D4127B36AA0EC2E4D9F1099B406746C540405EB63F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a15f9de-6f98-43ef-902b-99703c27d712.tmp

Path C:\Users\Admin\AppData\Local\Temp\5a15f9de-6f98-43ef-902b-99703c27d712.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 1KB
SHA256 0b46dcbd6a7c8cb4cd53c5059430a1087fb719fefad57cf77ec3a21a789bab3b
MD5 a65935e8f107bc4a793fb91146678dd0
SHA1 e1beb17094f8b8ef5ef2dd8d78145488b9df38c5
SHA512 6017346856602bf1a6f05e539ee102b75ad7b155f7f909685b7ec7586ef1af7e07403c47af7202195c67b0a0f730e6b60fea4cdead158294e93636986bedc032
TLSH
T1C321D3A53526237F5A830BD8A0264C843A60E045033F6B5CEE4A4074FD5CED2671E38D
MD5 SHA1 SHA512 TLSH

Submit Download

e61901df-73f7-4ca1-9239-e9caeae358a4.tmp

Path C:\Users\Admin\AppData\Local\Temp\e61901df-73f7-4ca1-9239-e9caeae358a4.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1448_2044840811\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1448_965452652\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads