hxxps://github[.]com/automationbyexperts/apis-scraping-eshop-greece/raw/76efcb3449ff1ca8ba3f2644d67d81064b1bc07a/groups/global-marketplaces[.]md

Analysis

user interaction
yes
max time kernel
148s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/10/2026, 15:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/automationbyexperts/apis-scraping-eshop-greece/raw/76efcb3449ff1ca8ba3f2644d67d81064b1bc07a/groups/global-marketplaces.md
Sample261020-sfe2tsbs21

Score

6^/10

discovery

Malware Config

Signatures

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
26	raw.githubusercontent.com
24	raw.githubusercontent.com
25	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
3696	msedge.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5072	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{8F3AC19B-91EB-44CC-8471-CEB651B38E69}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe
3696	msedge.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 3696 wrote to memory of 4536	3696	msedge.exe	83
PID 3696 wrote to memory of 1456	3696	msedge.exe	85
PID 3696 wrote to memory of 5072	3696	msedge.exe	84
PID 3696 wrote to memory of 1456	3696	msedge.exe	85
PID 3696 wrote to memory of 1456	3696	msedge.exe	85
PID 3696 wrote to memory of 4804	3696	msedge.exe	87
PID 3696 wrote to memory of 4804	3696	msedge.exe	87
PID 3696 wrote to memory of 3496	3696	msedge.exe	89
PID 3696 wrote to memory of 3496	3696	msedge.exe	89
PID 3696 wrote to memory of 3496	3696	msedge.exe	89
PID 3696 wrote to memory of 4960	3696	msedge.exe	88
PID 3696 wrote to memory of 4960	3696	msedge.exe	88
PID 3696 wrote to memory of 4960	3696	msedge.exe	88
PID 3696 wrote to memory of 2900	3696	msedge.exe	90
PID 3696 wrote to memory of 2900	3696	msedge.exe	90
PID 3696 wrote to memory of 2900	3696	msedge.exe	90
PID 3696 wrote to memory of 1124	3696	msedge.exe	91
PID 3696 wrote to memory of 1124	3696	msedge.exe	91
PID 3696 wrote to memory of 1124	3696	msedge.exe	91
PID 3696 wrote to memory of 4968	3696	msedge.exe	95
PID 3696 wrote to memory of 4968	3696	msedge.exe	95
PID 3696 wrote to memory of 4968	3696	msedge.exe	95
PID 3696 wrote to memory of 1584	3696	msedge.exe	96
PID 3696 wrote to memory of 3768	3696	msedge.exe	97
PID 3696 wrote to memory of 1584	3696	msedge.exe	96
PID 3696 wrote to memory of 3768	3696	msedge.exe	97
PID 3696 wrote to memory of 3988	3696	msedge.exe	99
PID 3696 wrote to memory of 556	3696	msedge.exe	107
PID 3696 wrote to memory of 556	3696	msedge.exe	107
PID 3696 wrote to memory of 688	3696	msedge.exe	109
PID 3696 wrote to memory of 1952	3696	msedge.exe	110
PID 3696 wrote to memory of 928	3696	msedge.exe	111
PID 3696 wrote to memory of 5056	3696	msedge.exe	113
PID 3696 wrote to memory of 5056	3696	msedge.exe	113
PID 3696 wrote to memory of 2608	3696	msedge.exe	114
PID 3696 wrote to memory of 2608	3696	msedge.exe	114
PID 3696 wrote to memory of 2592	3696	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://github.com/automationbyexperts/apis-scraping-eshop-greece/raw/76efcb3449ff1ca8ba3f2644d67d81064b1bc07a/groups/global-marketplaces.md
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff8597c188,0x7fff8597c194,0x7fff8597c1a0
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,4015569839366883846,4806352417222648162,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - System Time Discovery
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,1772857685245656437,14267882655481057043,262144 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:2
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,12168604836159375192,9149504672205360889,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,5273577038485551462,2558717307052635567,2097152 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,7168183482940163391,1082164824036923682,2097152 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,2473404084907010425,5914451440676822892,2097152 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4204,i,14405339883146766913,10215797750486200341,2097152 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=2696 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4988,i,10291599886783861524,7739093342784964647,2097152 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,10620304999731192015,2935092168030629347,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,11211807671271848809,5041146334456161736,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16749730388820453530,10306544866444224672,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,16749730388820453530,10306544866444224672,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,14627562321233126206,17488364877349579528,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,12362906825442639944,13143884717092994651,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,595147234782715765,10049388136887612184,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,15094525467341552518,12043629044133287705,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,7688122539479091398,5167029481057480801,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,12943324560034793279,10944498236550028382,524288 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3600,i,1295448687469396670,11482286492080572431,262144 --field-trial-handle=1964,i,4714065059046643234,2053494204551110558,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2c3abc11-b2c2-4ca8-af66-596dfc69de2e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2c3abc11-b2c2-4ca8-af66-596dfc69de2e.tmp
Size 8KB
SHA256 203a893bc8d3789b9f6ad221be3f123791756a363994bfc8647bf261732b38df
MD5 c1b917eb2485b39c6a54356383400d4a
SHA1 a6381c21155caff6b4999562dea2f12a3dc23c2c
SHA512 99bcbd2e72362c31cf7a2a2c29d1f1c1e25f8ee2b8691b9d60a9c4cd136ce38158129f7171ac0e5e548858f5b870af59b154c3dc75bb3068610c5d51c253442a
SSDEEP 192:GON26iDqQmiUy/VKq5u88PI2mKWJOuZ/qzfU6:GON26DGKq5u8iI23uxwfU6
TLSH
T193122B3668787C6B6DA2A851F58736174EA9422BEB897FC4D5DC562C00FF2DC130BA13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4183cbe4-e451-40c5-8908-40a535737854.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4183cbe4-e451-40c5-8908-40a535737854.tmp
Size 18KB
SHA256 97a91ff502f27bb3010ee650f75df701a7dcd9bb9e770ea642d36cb710a98ad1
MD5 2903e254e665c6e1eefdf686c94ab9b6
SHA1 42da4d8098669b625f1f7bbaada9318649aad763
SHA512 2831a089e2f1e238e6e9bed28d4a8a1eccbbcc7a9dece7abff6626414b410a9494c2e4424410b0d65775ea9cbb94ed2433281f6773a10158cc749260e24e0e1c
SSDEEP 384:sQkUSv0sNcUJ8CYRlup5u8iI23uZqwfkIIly:s09JckIikkL8
TLSH
T134827C362C786C2B9DA79511F28B36078EB4811BE7C96F94D5CCA72C00DA2DD2307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44176866-2d67-4135-a965-ee79abf66d39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44176866-2d67-4135-a965-ee79abf66d39.tmp
Size 18KB
SHA256 4e2a9fd3c06c097b13f8b28cfef682d1e3bdf74474a62d6ea78e169bb04687f0
MD5 9863d157de983cda789e62a2c2d0d96d
SHA1 35eefb6b1badbc928d2934390c0b7abae4ac6e53
SHA512 467c4a7b19f55a6e4ab9314c76d28c8b1d811df4ef43152840a9e8f9bc77621db601e8970d081710fd3c312854e9f7e8979308c0e68f883cb2f5dfcfd7cff48a
SSDEEP 384:wQkUSv0sNcUQ8CYRlup5u8iI23uZqwfkIIly:Y0iJckIikkL8
TLSH
T17A826C362C786C2799A7A551F28B36078EB4811BE7C96F94D5CCA72C00DA2D92307E17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

24e7b0c8-1aaf-4dd8-b834-7fa122ba7834.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\24e7b0c8-1aaf-4dd8-b834-7fa122ba7834.tmp
Size 10KB
SHA256 acd3d2de0b9f34ae10635ede95f62e1e04eab985d96243b447b1e389b32359f1
MD5 2b9bd74bea8041c6c099e16b4f97bd9a
SHA1 00c61a75f6b43585506899f5b99e24b3f578421a
SHA512 a097eec297f7cd1829cf131a5bf5b03a8de108f2b684483f294d2c67f9c5520f1f58e85f96b648992efd0c0ece350e46f08cd939e22466cba83c61cbf90dd639
SSDEEP 192:sxZdRMno/fwsbVphIdpz5HW6+WN69ddYa8wG+7Ig55J:sxZdso/fwsRpKNHbudu+Z
TLSH
T13322D9526E286A7B8CCBD20DFA55BF53D6F9503261951E48E6FCC61C05E7ACE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

29c18012-1e3d-45f3-a3a9-c3c6f2848dfb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\29c18012-1e3d-45f3-a3a9-c3c6f2848dfb.tmp
Size 10KB
SHA256 4cdc4db7855b80ae4a64f05da14de668085aa43897a902d77ed1728468fc44e4
MD5 83b1f9f46a52ceab34821e798071ebf9
SHA1 b051f6dcf130a20a2030669bdbe770248af161bc
SHA512 43baff6f95efd6f49891ddf6709549e4bbd38406430a31ef6eb9e047341416b1954f97426be365e6710fe456f3e798a2ec969a60102989a635cae1406440672a
SSDEEP 192:sxZdRMno/fwsbVphIdpV5HW6+WN6ZhZYa+LG+7Ig55J:sxZdso/fwsRpKbHbWZH+Z
TLSH
T18F22D8526E28697B8CCBD20DFA55BF53E6F9503261951E48E6FCC61C04E76CE221780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2dc3894a-7aa0-4a14-9205-890baf55f1e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2dc3894a-7aa0-4a14-9205-890baf55f1e5.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4a834aa4-1160-412e-965b-6c78db590579.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4a834aa4-1160-412e-965b-6c78db590579.tmp
Size 27KB
SHA256 a5a6f5e54d96c085438b938745004b9d2657d21fc26773edca7d60f512ddad29
MD5 d121f6b475c53405bd002abace399b61
SHA1 c9cdffd44fa4fb792703f808548aa39387544b0d
SHA512 14fb91e03bc3a77bfd3c3634afb8f5a9c0b5312e784b983936426b8eb1f2325094b793258f52d8aa6e85adf2a848d7977d1837f237610d6926dd66a74fa3ef55
SSDEEP 768:dmyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3Aro0Z8J:dmyQRbrWvvlpZu1jaXKLf33L0Z8J
TLSH
T1F5C2FA3B640CCB7E4FD01E9DDC6A6F976EA802C766588D4047FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6dd02653-22f3-4c93-898e-d6aa99f3f5bc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6dd02653-22f3-4c93-898e-d6aa99f3f5bc.tmp
Size 9KB
SHA256 3778a618c1700a5d4f2e9787caf595b5dd5e486d2fabf9788aee439e463943f5
MD5 15f08e1684a3786969aefd3393a152a1
SHA1 6ce6546b6e2c70a7e1e780c2b689b877bf5a42d4
SHA512 be32b3b5a8738781eeb75192259dc47055aa990f4bd3ed690d58cd96aff600609f56f24fd04275729b97a472e820952cf11c8e3063142699a66b93c5827609e3
SSDEEP 192:sxZdRMWo/fwsddphIdpV5HW6+WN6HX/YamRG+7IgrJ:sxZdpo/fwsHpKbHbO/z+9
TLSH
T13C22B8526E28A97B8CCBD20DFA65BF53D5F95031A1D51E48E6FC861C04E6ADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 38d237b921f7b9191c059f852e7b6eec4751743aeafe2b264da72d3391664d84
MD5 7886293b9e3b4ec3c85262c4cff3711c
SHA1 6f3f9bd68603454c73ec174ccce8029bdff9782c
SHA512 71b604299024c208f99f955af47cba673da090e1578318e7542832760ab868c05ccb368368b4d9456b2fadafe5cdf9177378f2edec0a69364bb69ba10efacf70
TLSH
T15BE026E504CAC32EE20C68D701BC730DD3F1361A92C0698E1B04C58DF206EC8AB82F90
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 385597c74dcc832ea4503ccddd64aad7f75ffee5c54d0c479f66be38f6d79ba2
MD5 c351fbec09c6cba8dc923657ee936284
SHA1 a7924b8c50f2e8ddd836ee3c3906bb3574e3a164
SHA512 e6b69b6497cfc45577793a9e6b3631f4fcc3bcfab59fc9da2da46fca1f13f41a0b1e0df23fe08a03019d3deffb1ada6ff0d3c8326803281c06a867dca08fe33c
TLSH
T1CF614D8458520C11FBAC91BCB3CF75CB32B45BB191A30E114FEAD8A5AB36F1B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 52e57288d892513844eb614f04911ad418992b78a2aa2ba61ea0756979ab1925
MD5 6d30151179eb3f9843b2903be773e5ce
SHA1 526508dac18e0f0e9d4bf298106736edca19c153
SHA512 0a69ac6fd93ca12153c141b96f021bef129065503b42b77db2c5cc6c43f4918ca79f08d40ca2db49f8da4f96025ec9aef83c469ecab1947ac6a9816c3b92ede2
TLSH
T1D0614D8459424C11FBAC917CB3CF75CB32B85BB191A30E114FDAD8A6AB36F1B60140EC
MD5 SHA1 SHA512 TLSH

Submit Download

00b2ccf0-7a01-4513-8342-30708062325a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\00b2ccf0-7a01-4513-8342-30708062325a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

0eaeaebc-8126-46fa-8629-a2a9ac21ed9f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0eaeaebc-8126-46fa-8629-a2a9ac21ed9f.tmp
Size 1KB
SHA256 322b80e4bb27cc618d3f27a889b505307d7cbf583b21535a150567ffced7bf79
MD5 a723cf004182f971f84516ea7f30abc2
SHA1 cd0fd83a49b44b927d106edcf6b42fccb3a0c917
SHA512 f9cda0f385fd1450e758a200a01f3e4754626f1993ace7dcac74c785223209852d56f4184a2952ddcf1b8fdf83b348018243b25666eb64f866b2de12b266ef06
TLSH
T10121ABF387E1856E8E015AF05A28AE1BCF2C0505832C7C6985D4BF17C3E3472E001A5F
MD5 SHA1 SHA512 TLSH

Submit Download

68b9ed95-4600-48a2-aec4-f0ae181f24ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\68b9ed95-4600-48a2-aec4-f0ae181f24ea.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

b21b2804-b391-4b00-b8c6-e297322f1c38.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b21b2804-b391-4b00-b8c6-e297322f1c38.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

c1fec2a7-1c97-4301-bbbb-8cb64ba04836.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1fec2a7-1c97-4301-bbbb-8cb64ba04836.tmp
Size 10KB
SHA256 305c3e18ced52488b3dc28c97dc258ac2e4c28fee62d79656879f7f0f53ee047
MD5 66a9f34fe7476ffef13bc222d9f59e1f
SHA1 49aa3d2c801e09c5472d72b10a6471e995d42c25
SHA512 0103610d9ecc351c1a20fe4418d60d18671a3a647078c954f1d62c9bc672e1dc921fe479bffdb0bae164c45604bbef5d36ba22aa0bfd99eac14c65ba97aadbb4
SSDEEP 192:sxZdRMno/fwsbdphIdpV5HW6+WN62yXYajRG+7Ig5bJ:sxZdso/fwsppKbHb2XA+n
TLSH
T12E22C7526E28A57B8CCBD20DFA65BF53D5F95031A1951E48E6FC861C04E66DE2207C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

885316fb-18d7-4cd2-bbdb-5cea6d5608ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\885316fb-18d7-4cd2-bbdb-5cea6d5608ff.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

2ccd1fc5-f4c7-4f9f-a570-db95e4013e8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2ccd1fc5-f4c7-4f9f-a570-db95e4013e8a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f4771081-dcaf-4bb1-af17-b1d52e750f3a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f4771081-dcaf-4bb1-af17-b1d52e750f3a.tmp
Size 26KB
SHA256 d9219d32ab9370ef5938fe614e109e7e5b52b4110eb380e7438235af97238584
MD5 6a828104b4f49c1d4b8422b2c8596173
SHA1 740e572e3283ab74ea8ab2f216c180a232cca65b
SHA512 7d16a9cc7ea2c5585426c95bebe2fe9cad701f3d50e7f3b2a8d929858b8b5cf76705a48add20ec4e219ffa2f5fd2e26f85f1527717943dfcbaf18359e4c3dc49
SSDEEP 384:qiFzQkUSvQzsNd8TUNTUlIlQ8CYR5up5u8iI23uiWwfkIIly:hFdMowg11ckIbkkL8
TLSH
T130C218F218E7983AD9AE4703A77E2D078E7CC157F5856A94B388951CCC9A1FFD306902
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f840a193-3084-41c5-97cc-16daef57df29.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f840a193-3084-41c5-97cc-16daef57df29.tmp
Size 8KB
SHA256 da8d373d5a7f77117f6967dc77414693b172a443e8c4f4572943c0ff9fb344b3
MD5 1970f0a6fd8f309f2be88880e3f94bf1
SHA1 ddd951f2753e2e44063aab8be1f862da47399418
SHA512 4e9aa77c883a94b94bc008e139e310c08453e235fd9702a9a77599f62bb418a99ac2887302a10177c1db44893988a83ef549ab610fcb64215948b4b78a9c22f2
SSDEEP 96:PqONkjQsjpfwDISp5ih/cIPURHl8h4otop5CmDrBfPGxvw45RxmJm78lFLxT+XkX:SONj6iDCQmiUylVHq5u88PIUSqgHiU6
TLSH
T13F02FA396C787CABAEF3AD05B5873B175FA5112FE6952F84C9E85A2C00D729C1307923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0022133672b780f15a311d272ec4468b7a754e5e9cc0cf241af40d7c92fabe64
MD5 6e710209c8933aa668690f0a8871093e
SHA1 90ea1cb5284743e4c07ad5921069527714086757
SHA512 bb2cee7c6c4c796656e86466b8cab11120e8db1b55ec30666f8a43af46c90b768796a73d8c44a519553b49bb04d3e8ee3db894fbd4d78e5f59fbcccc579dca71
TLSH
T178412D98BAF91118B3776E1AAFF7A86D487EB9632E06D45D10010E4F4A62B41CCB1737
MD5 SHA1 SHA512 TLSH

Submit Download