hxxps://tinyurl[.]com/4h6xdzns

Analysis

user interaction
yes
max time kernel
299s
max time network
283s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 17:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://tinyurl.com/4h6xdzns
Sample261027-v4szpseb59

Score

8^/10

discovery installer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
107	2980	msedge.exe

Executes dropped EXE 2 IoCs

pid	Process
5996	zecurit_agent_3.30.exe
1676	zecurit_agent_3.30.tmp

Loads dropped DLL 1 IoCs

pid	Process
4456	msedge.exe

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2001461782\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_338194902\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_1591048054\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\crs.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2001461782\crl-set	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\ct_config.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_338194902\well_known_domains.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_1591048054\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\kp_pinslist.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	zecurit_agent_3.30.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	zecurit_agent_3.30.tmp

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2980	msedge.exe
2404	msedge.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/files/0x000b00000002393c-268.dat	innosetup
behavioral1/memory/5996-270-0x0000000000400000-0x00000000004D8000-memory.dmp	innosetup
behavioral1/memory/5996-301-0x0000000000400000-0x00000000004D8000-memory.dmp	innosetup

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{B6233845-B3CF-44CA-9AC2-E7BFAE41279D}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-681733028-2344970462-962213935-1000\{A4B88DFD-3A4C-47C5-8132-9E6658D923BF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4456	msedge.exe
4456	msedge.exe
532	msedge.exe
532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of FindShellTrayWindow 55 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe
4892	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4892 wrote to memory of 2144	4892	msedge.exe	84
PID 4892 wrote to memory of 2980	4892	msedge.exe	85
PID 4892 wrote to memory of 1948	4892	msedge.exe	86
PID 4892 wrote to memory of 1948	4892	msedge.exe	86
PID 4892 wrote to memory of 1948	4892	msedge.exe	86
PID 4892 wrote to memory of 2532	4892	msedge.exe	87
PID 4892 wrote to memory of 2532	4892	msedge.exe	87
PID 4892 wrote to memory of 2088	4892	msedge.exe	88
PID 4892 wrote to memory of 1736	4892	msedge.exe	89
PID 4892 wrote to memory of 2088	4892	msedge.exe	88
PID 4892 wrote to memory of 2088	4892	msedge.exe	88
PID 4892 wrote to memory of 1736	4892	msedge.exe	89
PID 4892 wrote to memory of 1736	4892	msedge.exe	89
PID 4892 wrote to memory of 704	4892	msedge.exe	93
PID 4892 wrote to memory of 704	4892	msedge.exe	93
PID 4892 wrote to memory of 704	4892	msedge.exe	93
PID 4892 wrote to memory of 788	4892	msedge.exe	94
PID 4892 wrote to memory of 636	4892	msedge.exe	95
PID 4892 wrote to memory of 788	4892	msedge.exe	94
PID 4892 wrote to memory of 636	4892	msedge.exe	95
PID 4892 wrote to memory of 536	4892	msedge.exe	97
PID 4892 wrote to memory of 4632	4892	msedge.exe	111
PID 4892 wrote to memory of 5272	4892	msedge.exe	112
PID 4892 wrote to memory of 4660	4892	msedge.exe	113
PID 4892 wrote to memory of 4436	4892	msedge.exe	115
PID 4892 wrote to memory of 4436	4892	msedge.exe	115
PID 4892 wrote to memory of 4436	4892	msedge.exe	115
PID 4892 wrote to memory of 5732	4892	msedge.exe	116
PID 4892 wrote to memory of 3084	4892	msedge.exe	117
PID 4892 wrote to memory of 5732	4892	msedge.exe	116
PID 4892 wrote to memory of 5732	4892	msedge.exe	116
PID 4892 wrote to memory of 3084	4892	msedge.exe	117
PID 4892 wrote to memory of 3328	4892	msedge.exe	118
PID 4892 wrote to memory of 3328	4892	msedge.exe	118
PID 4892 wrote to memory of 5268	4892	msedge.exe	119
PID 4892 wrote to memory of 5996	4892	msedge.exe	120
PID 5996 wrote to memory of 1676	5996	zecurit_agent_3.30.exe	122
PID 4892 wrote to memory of 4456	4892	msedge.exe	123
PID 4456 wrote to memory of 5796	4456	msedge.exe	124
PID 4456 wrote to memory of 2404	4456	msedge.exe	126
PID 4456 wrote to memory of 1220	4456	msedge.exe	127
PID 4456 wrote to memory of 1220	4456	msedge.exe	127
PID 4456 wrote to memory of 1220	4456	msedge.exe	127
PID 4456 wrote to memory of 6112	4456	msedge.exe	128
PID 4456 wrote to memory of 6112	4456	msedge.exe	128
PID 4456 wrote to memory of 4776	4456	msedge.exe	131
PID 4456 wrote to memory of 5828	4456	msedge.exe	132
PID 4456 wrote to memory of 5828	4456	msedge.exe	132
PID 4456 wrote to memory of 1704	4456	msedge.exe	133
PID 4456 wrote to memory of 1704	4456	msedge.exe	133
PID 4456 wrote to memory of 3016	4456	msedge.exe	134
PID 4456 wrote to memory of 3016	4456	msedge.exe	134
PID 4456 wrote to memory of 3372	4456	msedge.exe	135
PID 4456 wrote to memory of 3372	4456	msedge.exe	135
PID 4456 wrote to memory of 1740	4456	msedge.exe	136
PID 4456 wrote to memory of 1740	4456	msedge.exe	136
PID 4456 wrote to memory of 3764	4456	msedge.exe	137
PID 4456 wrote to memory of 3764	4456	msedge.exe	137
PID 4456 wrote to memory of 3324	4456	msedge.exe	138
PID 4456 wrote to memory of 3324	4456	msedge.exe	138
PID 4456 wrote to memory of 5720	4456	msedge.exe	140
PID 4456 wrote to memory of 4764	4456	msedge.exe	141
PID 4456 wrote to memory of 212	4456	msedge.exe	142
PID 4456 wrote to memory of 2536	4456	msedge.exe	145

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://tinyurl.com/4h6xdzns
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x240,0x244,0x248,0x23c,0x2f4,0x7ffb6536c188,0x7ffb6536c194,0x7ffb6536c1a0
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,12224732082622642193,16688537865268749082,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16814083888326259806,10402830165730864644,262144 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,17344009166633110998,14331087586597921260,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3384,i,15326535862915226182,17790733943952457972,2097152 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,4162268593888493557,2157117131088875622,2097152 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4948,i,16188888715591744676,7667695777347640515,2097152 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3744,i,16543333256862862090,13366260536767271506,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,12255256181768915894,16662007889090477420,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,11910661576275426538,11373566541378700455,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:2588
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,11910661576275426538,11373566541378700455,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,10314422412465914235,1617725412380647188,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=124,i,15460462226312146825,13006774431240690264,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,15496366460693241929,8021328928893986221,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5244,i,17604034029192581348,2662951721795700914,2097152 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5008,i,1252254415960994826,13499162505291294493,2097152 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:5732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,7557028800770905031,15283055694046062228,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,1421602872457714809,5583663124164488924,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:8
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,18263014767758695011,5905119619248289883,524288 --field-trial-handle=2164,i,18435192481326399226,3039331628226579011,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:8
  2⤵
  PID:5268
- C:\Users\Admin\Downloads\zecurit_agent_3.30.exe
  "C:\Users\Admin\Downloads\zecurit_agent_3.30.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:5996
- - C:\Users\Admin\AppData\Local\Temp\is-J8NS0.tmp\zecurit_agent_3.30.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-J8NS0.tmp\zecurit_agent_3.30.tmp" /SL5="$501E6,21492574,832512,C:\Users\Admin\Downloads\zecurit_agent_3.30.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Loads dropped DLL
  - Drops file in Program Files directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffb6536c188,0x7ffb6536c194,0x7ffb6536c1a0
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,5828103117007153090,11850355459540827330,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,11462937335394834344,15963773879251409536,262144 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
    3⤵
    PID:1220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2276,i,14010930996707788943,17234696489004617178,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
    3⤵
    PID:6112
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,8502243796093830923,9684516473583552260,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
    3⤵
    PID:968
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,8502243796093830923,9684516473583552260,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
    3⤵
    PID:4776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4712,i,6988490395124253334,14467126467575848824,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8
    3⤵
    PID:5828
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4724,i,5121569547401679995,11762091994183899219,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
    3⤵
    PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4696,i,11931692968167198840,537522351656963617,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:8
    3⤵
    PID:3016
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,13224491417285187103,12949941467136265573,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4872 /prefetch:8
    3⤵
    PID:3372
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4700,i,8604585731792742555,13235417898504416519,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:8
    3⤵
    PID:1740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4768,i,7634939959287586158,14303059909370388177,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
    3⤵
    PID:3764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,452507408490063433,13525752928903589976,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
    3⤵
    PID:3324
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5004,i,5219244716212166613,5963241615693762067,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:8
    3⤵
    PID:5720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,14933677765474014696,15180828792044788779,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5236 /prefetch:8
    3⤵
    PID:4764
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,2052196528995922256,15142693651868097816,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
    3⤵
    PID:212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,12129245691047184037,16113664727919493616,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
    3⤵
    PID:2536
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,1235328568242638491,4295478620014534721,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
    3⤵
    PID:1796
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,13011320225940690542,8676409714037021020,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
    3⤵
    PID:380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5448,i,11337251272803819849,18184529199638011055,262144 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:532
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,4933050187001126697,432426063568716296,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
    3⤵
    PID:1280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,1573514888946443020,9697179508715557852,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:8
    3⤵
    PID:1904
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4136,i,2047423184290468421,589193062983023602,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:8
    3⤵
    PID:5716
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,345070584335184750,5307477853996178682,524288 --field-trial-handle=2336,i,17790023998853414474,5187957339858556035,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:8
    3⤵
    PID:1548

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:808

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4676

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

data.txt

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_1591048054\data.txt
Size 152KB
SHA256 bf2c0a94df6f6a32ea1072e61ed3767c23fb8b3e864b0f6144f65c4b8e477338
MD5 6dd40551f20e2c6ad5dc991e60a7d4cb
SHA1 1147d32c228d4def80fb6415d1f58c1edad29055
SHA512 0d654ba49f9c53349b90cd2ce15424477b9c06ae3ae7bcfa09f61e12607f94750cc065d85458e985632f7c316e79d3b9ff279248fa1e6e4181f16e37ab31023c
SSDEEP 3072:GPAgDcCHaLHl65aynyosxb3+BLvf5yTewIjNq/eq:6X1aI5aZoKzMD4Ajy
TLSH
T19FE3F2608EC45F99CFE4292C90BF1F1A63E18BCD811A698EDB63FD066FA7A0415271D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2001461782\crl-set
Size 13KB
SHA256 b85327be29f5d0a5be4a47da5bf5062f5115bda5e9827db40ac4776d829ccd18
MD5 5111ab39b220749a299b5bb7cd25c730
SHA1 970c9013ee629ded1b5d2a058cd147950c3544ab
SHA512 37caae776f5d9365367e12a6ca13e07761f09b3cf6d1f9ea9523af89e6f2579afdd148d3942822358a49ac597a544c30bdf070aee051d69d8a0adab6f6af708a
SSDEEP 384:oeYPnEDMU2kk0yu7uCnglcJUoCzL4pv2W9cBTgE:ojPEoMk67R1UoCwV2W0cE
TLSH
T16152AF4FDDC4A62AF03911AE982262A412794A8552554B731B6C3A64BCFB28D4E38C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crs.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\crs.pb
Size 284KB
SHA256 340643d368df6700a082071385780ba1d8212f35696137b0a44dd8538fa25ee1
MD5 280a97fbbf2e4b70813f616b487143d5
SHA1 804cd67da601cc1a9c248ee59ecb3585e7a0a625
SHA512 47beb2b1f2bd640d24e7793c313c38b42e3e394be9a4eb88c94ac261c5131a1585b39a2431e39326c9197aea29198fc0f60e1c737d354d71cc0f7e0a57c5cf68
SSDEEP 6144:KKqggR3NpUvYpVW+J2aKH66k8G1nT+uuBw1hhd0piFlXGq9V9t:KWsNpUvC2pIYTsTGG7
TLSH
T1C554CF960F383D12BFD2DEE466CCE93B3D79B6E06A6928162111C4F159927E07D8C42F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ct_config.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\ct_config.pb
Size 24KB
SHA256 a7371e9e40f287ebfd8c444633ff1eef0cc3050b015f761dd16ed5ae8fa1f35f
MD5 84a749aff1727eb9f4c907b1fb1ab051
SHA1 117b3ada2b80e5e03c560fe4b8eef5e8e6a7d760
SHA512 dfc2c3c565cfd5194be7029184db9a5cf5ee50b3a510da52e509e7e630ec963107ff57d65324aac9983f67158b6cacf8c6d03113cae79dbb37b2a413b57627d3
SSDEEP 768:8oIO1NNHA5uAbuOCri7GrZ7gl3u6ksYCjMPI:c+OuAbXGjhsYCQQ
TLSH
T142B2A7BF61159F001753D50896F52BB6E133A3D6C8F3697DB1E28008F1872E961E867B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kp_pinslist.pb

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_2145680936\kp_pinslist.pb
Size 10KB
SHA256 71798e7f16d50ccfe2428fbc868f81949f592fbf7b8a64db4753e3fbba8a0d57
MD5 25b685289453d58201e61d13670b7105
SHA1 e3305c5defd136f91236ef6f06cc1536bceb4f38
SHA512 9fb8df9033e7ffb5a47b7a54b8f497a68a839976894a682d21d9d7e52ee8bd3bbc048ac2fb7a53b69d9ca807b42d1feeb17ad1e5eddacd27b46e72dc149dbeaa
SSDEEP 96:nxleRkDB0rBnnoxGwMAy5z5tBT6c5MacFwn2Xh6g/gNn:3/DCrBnYQ5jlMacFwn2c9x
TLSH
T1A722F1B37904F99390E7E0BE1041F49AE937436540ADF98A528C4A7635F1F0729BB4EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

well_known_domains.dll

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_338194902\well_known_domains.dll
Size 86KB
SHA256 f63a806e2b89ed1db25687026abff5df4675a82a13882cdb2a47d1b08d2c996e
MD5 94e3e395b95eed4fe8857e0258d62491
SHA1 0e9bb0173cb2df4be5eea77cef5a09bb5b3116b3
SHA512 b680ece7a8b72a6f78a1643ee52a606fe7a094fe058bac041c25b775dd472834a1df349d45594a11fe6eb4c41d083bdb9809e944d9ff254d795f04e177ac19d7
SSDEEP 1536:HJxEzwtlOEMkVXvopF0BYDfBny/nXi7IruMPzEVWHxgeBz4:HA2DMggpuusPXBuEuaxgEc
TLSH
T17583F14A7AAC149BE9EB8674E2645E17BB72775B071893EF1342D0040DF73C1AE35A38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

deny_etld1_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_etld1_domains.list
Size 7KB
SHA256 1c999530d7fed6e4346d8cfb3933a044055544eea970efc00b114505b9cd3a86
MD5 f3249a6b4b36c4907803ec372e4d2b14
SHA1 c8ef9da8682dc8bba70ffebee0ab4d47fcd89136
SHA512 4b7860cf50fb58c32f136e578d284f9a66dc48c9335e2e45de323f8b1429ff70115032d5c7d0555f46db2ab349f8bfd8b9e24e60d9a867055518a5f4cd7ec360
SSDEEP 192:E9KyU8bqzeC/m4XqLWPgETdT/n+DEDYZHNnd:EQy8eC/m4pzpmDZZH5d
TLSH
T19FE1B0D537C7E2D2C03580B32203ABDEAA51BD40A78A3FE5FF461AC15F55AC7511E118
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deny_full_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_371280122\deny_full_domains.list
Size 12KB
SHA256 19e871f69e774c847717469957dd18f342712e702d2c54c5efb8542907bcbabd
MD5 85a2a44606d0d937cb7c3cb97549d1dc
SHA1 27081c556bfa37eef2ac2b0bfafecf90dfa8662d
SHA512 3f564a6b0b71ff54e3cf0e7addd91fb63a2e0d477cacaf73409fcd4c29cfa2076e76d0ca0e330c4fd0fba6cdaec8f118401bb2ce0f83af9e334cd603adb61d24
SSDEEP 192:3zjGRPX/DE6OGcrMHNK17dYuybxV3SOZTAnbtIBzkJkW9ELtW74zPJ1vRbmZM0ED:PAPYmhKh8RvOkWYtW74zBI1F71WqEgOR
TLSH
T16D42D04EF5E8A884C70E0AE50B8C759EDE0A514087A22BD53FB57B5F6988CB9FB11601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\_metadata\verified_contents.json
Size 1KB
SHA256 c9e76a313bb06d9d761611d7cb8c2ab8de59eb9959b77458138630dacebaeb0e
MD5 243afa1f565d5789d05d9762162cfa32
SHA1 7c7b6757be9b6ae391a59b940ddfb646cf6ce732
SHA512 671b53dd21e4566df6fb4ef811fb95382447f57a82d497de029ce1528aaaa47f26277615f6ca91ffe4834598b2a0b5b78ec2f2dabed2ef704581cbb990ad67a2
TLSH
T11F3119B8380E324F90A7E30425BB9D33534570BE13E0A517B1C26A4E5598A40B2732FA
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4456_474906228\keys.json
Size 3KB
SHA256 b0724d5592e6441a840c6622d7ad51caad2564a3746e563ce1f1bbde30944b2b
MD5 a86e3ddeb60db5984686f5bd89a95646
SHA1 e5f417a8f70c34b293ee20bb9f54a423a07982ec
SHA512 f3df95b51940a12ffd2d58648c302fbd649dc3097e0961a86da65e324690488d1b3d80c6267a6a0685f220a89c279ba54cb56fc02f19860e99ffcd6448cf0db5
TLSH
T19971D6BF14A40082CF3BD16A8F0735A78FB23C0623C67AC3965FE94A04425AC276F475
MD5 SHA1 SHA512 TLSH

Submit Download

093ddb5d-d576-4961-8045-48b23bb61d5a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\093ddb5d-d576-4961-8045-48b23bb61d5a.tmp
Size 25KB
SHA256 b195eecb490f73f2e76d2c4d61c38c7a95c5bbe90d0310e69da6080194d1a7f1
MD5 f9849c076b1ab51326c24dc0c3b80e18
SHA1 b23fa4c40c4af012a79a8110058b3c83d5d13f1e
SHA512 d7c4c8986377516c6ecb079b78096fc94f5648d4fca871ffccc9a716e4e790dff58a0a1643fe7bf218517fffab219db9bd7c683488b4961e9ded37253e122e3d
SSDEEP 384:npiFiZcI63sNY8TUNTUlIm25mg5nn4zf8BeX1vDzIofWE7O6R2FeobgL/7IzpoZ:AFQ63FwgS0JBeX1bzIofb7TRkm
TLSH
T144C24B72EC98DABBECFB8F99A74A7A07DEF00163859C59C0DAD85E1D008759D0707C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cc50b5a-d98e-4832-8de2-2f2f9da7fdc8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3cc50b5a-d98e-4832-8de2-2f2f9da7fdc8.tmp
Size 33KB
SHA256 e66d3025d3e1c51768e176c8559d885b57b8566525467c0b336e62776a349174
MD5 791d2876f5a54719fd525af182c71276
SHA1 727504d898d6e6267f59af7dd697c857ff9d64ea
SHA512 00800ec8638226a5dba149d5aa30f9e07791dac344a9f67da2cf890a480bbcfacf3ddef042f71f8a90cd0928187f7d94545e25cb30673666e9eea951afe2bc07
SSDEEP 768:2FobdwgRMhlsBeX1bzIo5fKtKWCIkgaTZc1HtL7:vbGLzIoktKXIk1cNf
TLSH
T196F2C3F194D789B7D89E8B87A33D6E4299BCC163B4885988F3D45C2CCC861BFD706815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3ceeebd5-c5a0-41e5-aba9-fb13faa4f29a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3ceeebd5-c5a0-41e5-aba9-fb13faa4f29a.tmp
Size 36KB
SHA256 4ffcc02bc9afd0f9c348a15979be3f9f8fdef30edd00f9fe539e856866d1006f
MD5 420ad05294795733932f6c2e9db24378
SHA1 e51c31a3a51f8b9e7ecc34ec234141b397dba9fb
SHA512 c6d1387116b25568c42ff967c55edf79e859c1912e4de62bb1ed63f0d9ab589fa601f99ca3bdb1e2ee802573e7b622ec71845587de9b1534d85401c8d2a7f784
SSDEEP 768:jFobUwgR3hGsBeX1bzIoZ41Sm99aAuvaTZc1H3Lf:GbgczIocSAuycXL
TLSH
T12CF27EE194D78DB6D99D8BC3632DAD429ABCC173B4484988B7E46C2CEC4A1BFC706815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4647c158-da14-4325-ae40-825baaef91cd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4647c158-da14-4325-ae40-825baaef91cd.tmp
Size 26KB
SHA256 930126baace80ce1cfda44bef6dce362c579ed1d3a67b573e5416dc518d0e7eb
MD5 c0509d87cacd365ea3e377e5f221a73c
SHA1 4ada0b24ed6babc6664eab52195bed347dd55acd
SHA512 64b70e1cd1249ae5253ddb55c6e0c50e4dfe98c2bcc037f83113b24bf557dc99f4699a8e143976832c66b0472555f22783fbede9ae664a96a4299bc7e0c0fdc9
SSDEEP 384:nWAiFiZcI63sNV8TUNTUlIm25mgOEhheYQ4zf8BeX1vDzIoJocl7O6R2FeobgL/Z:SFQ63kwgSuhelBeX1bzIodl7TRkm
TLSH
T17DC24B72E898CEBBEDEB8FD5A74A7A07DEF04153868C9AD0D9D85D1D008759D030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

485375a3-ca18-412f-8b0d-a9dc1d006f2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\485375a3-ca18-412f-8b0d-a9dc1d006f2d.tmp
Size 26KB
SHA256 d23348cfa0e256d3b0d4db20af707631b6c85407ae796850e6981867608e9071
MD5 cd3adc0c2d2ccacd64f1f430c7f72b13
SHA1 114739867843888eb2f4d65ffaf46f1212745382
SHA512 92babad1c03fbaf724ac8a8dae541de2799334cf143232b751b9ca21da418a729e6649e08f5dd2c412cfd4a68c9d7c2f9f56efc9e26a3fb765d641151214def6
SSDEEP 768:uFds3Uwg9oh6sBeX1bzIoolvaTZc1H3Lf:8s3lwzIouycXL
TLSH
T10BC24B32E898DEBBEDEB8F95B70A3643DEE04163C5985AD4D9C95D5C008B2DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e13a957-f4a5-4695-8069-9555459bd1f7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6e13a957-f4a5-4695-8069-9555459bd1f7.tmp
Size 26KB
SHA256 2a2ed94751367dc7699307541e07b630e66665d0d5cb72e1f244634df1b8dcae
MD5 4fe86bdfa0f5c5f7d6df0eb05a7da69c
SHA1 cacc4af228cfe3ae4bf6fb98a0d644d6f5f23b7e
SHA512 3e9b8062d1d3b9aa8f4faf42d0428d3038360fcbee9a511bf2db45aa6f3d3bba1969d85dbfb01d26567a4c3abfa5cf6f0d573778c52eb748a00001e79ceab46a
SSDEEP 768:hFds3Uwg9Uh6sBeX1bzIoolvaTZc1H3Lf:9s3BwzIouycXL
TLSH
T171C24B32E898DEBBEDEB8F95B70A3643DEE04163C5985AD4D9C95D5C008B2DD130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2026.10.20\manifest.json
Size 118B
SHA256 cc33e26f3b2efe862336389207db045cc7a916940213b9d33d845c82c12c8712
MD5 acb0c12cc7e5345764763e37bcebbec8
SHA1 4147b2615955c51a6054c807c2397e4d7d10ee03
SHA512 6777da8af66a77c28049eaf1b49ba7cdfaa08a8f381c27dad4af0e980e8d5a7ea0df0c3f1fd0cbc0cbe93a83a07d130ae24dc4057471de830fac60036b1c2f3a
TLSH
T10EB09222DC80D832697693A84E2246D0F238234B2568AA493630048C0B2E2F182A2721
MD5 SHA1 SHA512 TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 452a5479b9a2e03612576c30d30e6f51f51274cd30ef576ea1e71d20c657376f
MD5 cfab81b800edabacbf6cb61aa78d5258
SHA1 2730d4da1be7238d701dc84eb708a064b8d1cf27
SHA512 ec188b0ee4d3daabc26799b34ee471bee988bdd7ceb011ed7df3d4cf26f98932bbbb4b70dc2b7fd4df9a3981b3ce22f4b5be4a0db97514d526e521575efb2ec6
SSDEEP 12:biUXhV0xosU8xCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:bFRqxosU8xWMk8xVZ4YWI30otWn
TLSH
T14F724986B34494EFC883597189BD17903374F6EE5F02839B6A267A0E2E271C44F44220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db759c3c3934bf56069e934969b7b09f586fed452182c151bd01633b9b27bf87
MD5 ab67867c211ab688848725ec145740f0
SHA1 c091eed57aaf62fb4b4c293d73ad6ac09823e67a
SHA512 36ec910e186d3dbb24e30337fbca8d6f6bcd7a8f248a4d5f5379e227776ea65d887c40363ac37f303049490eb20265c1934114c84ce3526c2d0868d9793068a6
TLSH
T177D02B4899C83A64E956243A22185281B0448D550A07244041A303840C413B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 28b62a3db7a5d2dc7d0616b81259ec388417e0c112ade2395c9934bffeca26c6
MD5 e41e3ae3661d9f8a37283ddbc07dd67d
SHA1 bbe9d4921f3283582d624215ab8cd50831de7e40
SHA512 f5639aa82cfcdd064e05545bb0809d1eaaed3d06bbd7545f75d6c8b57af8446fd7d30e46bcd87c8e74f4062ec8265eb16a2b26492761e618166d8a61c75f2bbf
TLSH
T157D080157D573EFDD6AE7176155C9580B540CF634717155007170D184D5029258D4ED9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b7c7b629cf980554ba201945f9dbcd1c64e77cc796fc6d8aedbe4749bf0d2698
MD5 844568391c8d79f46705230953f1d7f9
SHA1 a9cd387c1c5dddc3c8fa77739776f3408ec661d4
SHA512 85a2814e7f88919b1be438203c2053dccaf55dcefa377da5cfa8fa7daf780315b818c6b4ce3d02d6cc49b8673ba077bf7b9fd475c54c978185fc230f70cd9b53
TLSH
T13CD02B449DC43A64E942243A22185281B14489550A07244041E303940C813B200840D1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 204cee7e98049e1bbb0de1ac996e4f959e4712a4654a218b3aa0a24faf7d77bc
MD5 50db28f1814446e9718bf5ab8173c3fa
SHA1 a45a5c9e5bd00ad80333c8574b9a4454aea44b74
SHA512 051fa80aa07f8cee19ca89ece4987033bd10badb6f6057b1ee863e8040901cc6dc281a0182ff7bacc12cbf5d8ff973a16681d2564fde4ea434faaa0b6d6d90e8
TLSH
T1AFD08029769B3D1DDF8F6173364896C0F500CF574607597016170E14494037559945E9
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1bee9600bd5a33bc8f0668c55e5de638af2900d2c5b64b0b6a076944d9d64cb1
MD5 dccd83af196089fa1701326df524d8f0
SHA1 13f464d146d477458e5cbfb269a644033ae23e4a
SHA512 3c03334f587184595882b502100116cbc4a277280eff870b6b7fa3504e1b35e2d10391e179ea984fedd6d9e4c2b85b75e89e8dc8d55fe7529b3a34a2442689b8
TLSH
T1F2D0802576973E1DDF8F6173364896C0F500CF574607597016170E14594037559945E9
MD5 SHA1 SHA512 TLSH

Submit Download

16e77a2f-4fe8-4fb1-9898-9c310c1fc124.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\16e77a2f-4fe8-4fb1-9898-9c310c1fc124.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

225c4c99-0870-42b7-a644-0d5fe7f63a1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\225c4c99-0870-42b7-a644-0d5fe7f63a1d.tmp
Size 12KB
SHA256 3d7d94b8e11adb8410000e48cc481a2b2e64f7f02528272a5aa5c1fa4728f606
MD5 2f630c85ee1f5491c3b5f2dce255ea10
SHA1 a693b88a724b6462a78e7aba334299183583bd5d
SHA512 23a0a0ae5aabc333740303aa6dbb8eec282f81da82d4f3813f8ba391255a170f92ef2e59699c51ed931562329624aea1d9dbab65a27e5adf5e48eac7dd9c84ec
SSDEEP 192:sxZuRB9d/fCsADQZZJaizodpTEHW6+WNixW/YbI9ttYYpIg5T8J:sxZuVd/fCsADOZwZIHbd/FJYuNg
TLSH
T17D42E715AD38A93B9CCBD209FA54BF53E3F95033A1911E48AAFC9A1C05E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3166c58b-b803-4e38-9be2-27724dd397be.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3166c58b-b803-4e38-9be2-27724dd397be.tmp
Size 12KB
SHA256 3e3189e55052d606886acd44f71c6c0359918bf9bab7de908ccc2eb7b4fa8b29
MD5 b0d2fcbc1eacc9564bbb3336d66f7574
SHA1 e0de14487e8e68ff672c692f7c83f3803f964648
SHA512 ebbcfddb8332c81274401e4558ada27cae5504d8de36761fe75a1ac45b5511e4012947794b6466e55d648380a3a1543f0f647a42eb60e5a8d4fae317527dddb4
SSDEEP 192:sxZuRBkd/fCsAEQZZlizodpTxHW6+WNixW/YbIYttYYpIg5T8J:sxZusd/fCsAEOZlZ1Hbd/FWYuNg
TLSH
T1E342E715AD28A93B9CCBD619FA54BF53E3F95033A0901E48AAFC9A1C05E76DD230741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66cbf9bb-d73a-4785-8029-3abf8116163c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\66cbf9bb-d73a-4785-8029-3abf8116163c.tmp
Size 27KB
SHA256 f230a4ab4e764530740da76557d07216341c8768c7e1efb0b2e77ac27dc0b62c
MD5 8abbcdfa7caeebcbbcd0d5105dc97b2e
SHA1 1e4dad667b45cbc987006d84369b77755c5a1f80
SHA512 a15376caaba7314be4cd64998452f0a51d18c456c02b9982c79ea9ac4e177a4abacc972d1377c7dfa3c866c68dc8676c7d2cf246bc17f9a82357457cebc4b37f
SSDEEP 768:0RyktrnWvDBlt8F1+UoAYDCx9Tuqh0VfUC9xbog/OVmWLlMC7fnroGfk:0RyktrnWvDBltu1jaLWLywf0Gc
TLSH
T1BBC2F93F640CCB7E5FC00E9D9C6A6F972DE802CBA6945D4047FA994C02C77EA512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 7ba49c7f0482f80d8bb6f445bb4d161b6c243c228455968d5284e57bb2129bf2
MD5 534e37e6cac884b0c12c56fefb5814a8
SHA1 730381169ededb51ba5abf93f5a38004e75f68c0
SHA512 46bffaaf91c1c1d3f9538e303b8e30db28438edf7099ff6aecdf5ba7c447169e78b0b1662d82dad23187b47384844c7cb5415049d78b966b925ee253f02c355a
SSDEEP 192:uTewF+xifmykDgXj/B1i2ML2wFSEP7QXldMSEjG6FeSuMXY/iLD:uTewgifdtML2w8E8XHMSCG6FeQXkif
TLSH
T121133A3DB6A05E55EFCB957C47ABCF722770C838E0D028879B36F1A62B153521E2E019
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 591744b845eeeb2be4e14a7a9c5cfbb0ad45e6e67bb864e08b54e06eec654404
MD5 500fd1d0c9a682d4cdea6dd1ebca4603
SHA1 6aa8aa241c7ce06417e5b4d710d3ce22efc4c9fd
SHA512 8962f16326780eff54daa350e0a35ae185f9d8dd064cd155ea103f8bee51e0ad5a1c62c80361a763ba4f4fd317286439cfa7f243400feda147233ad67f6799ed
SSDEEP 1536:taazHsL/+bL/mAUO5w21JtouR6L/07L/kL/LV1/YCQAoYa+:tvML/IL/13V6L/CL/kL/7/n
TLSH
T15C4460F71911A41BDBA842F9D3033E3EC177456E6CD1F8A9E6788C812925F31B6BCA44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
Size 1.0MB
SHA256 dd05cdc27f3dd74fc52250518c335e65ad6ffce53b75224ddde43c2569dec225
MD5 fe668d9a2f2f9114c5527c10bef1c514
SHA1 a0d60574ad62bafbcc91a0ba458b7fcd4d924bf7
SHA512 cd4134df1ec8bd126f4376ccc59396c5c7c80fc6992c55f3599dda80c3744a0dd4db3e26a32687a376cdd3293579708035534b592369b7e1cea5379aec2ae1ef
SSDEEP 3072:QW3nbev51hUHKt3wAtGfouoy9iOgonMDDbTmjUC/bY:hev51hX3HtU59iGnMDHTmj7M
TLSH
T1E1253AEECB682C82DF6B8774B0E0D9077E702182B65DD0D39944C5D897C2B8576E92BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 642eb051b8f33eb61a0d3cf00f0b064da55fb7d9b8f43d0c4caa2f6afcfedb2d
MD5 26155afa5ddc39cac7626f97130960fe
SHA1 04b4836143ace8859f1f3187e38efa002ce041ef
SHA512 c031e75dfec4ca791869c06335cd4b62613958d2b53fd9a677152e53c7b65e46aec32a87f07939501d37ec507d81c61b87b741b836cae12db47b9b52ac1c8520
SSDEEP 24576:6GwjDjmIyGsTQeql+ybDK10DKXJoR8+H9B:9wTmZnEJm10DEJ2
TLSH
T19B167CEDCA7858C3CD639A30B4F0E9477C7413C3F995D1D68898C184026BBC5BBAA769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 c643ad8cac2ff8bee671b5d32455e021bf834b115e34451751f0e1a6fe1e46d2
MD5 618817b5a50812bdb30536f2b646de6a
SHA1 9d385d43c3d697743bb134f069e8b917e69e4eda
SHA512 99ee8c21a5f72e09171689820998e69bcd6bc5c637c0a4580158dd0ea781054a6db226da299fc59e48dee533e6928d9c50a7a369f5b802ba1cdf0b3549d9e5dc
TLSH
T12D512F4C5662DD64FB98827D87DC02C73ABCBBF051836F6206E8E4B97B6B36750851C4
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 a1791b148e97b0c7c70c88aaa1bfb64725b5f8fa72080f1709af946382effb7e
MD5 f9f4681ce6e73b997f30c42a4024fffb
SHA1 dff74242fffc12ddc932f3a4a0d84d2b49fb8c94
SHA512 a0b56481bc13f0ac13b782988b2ab9203a13fa489aff21e84e2aaad14b442b0c2e2632dfb8079e6ee8a32186e533bf81b8bdc4c238b9ce236fe1025614dc3747
SSDEEP 3:MsEllllkEthXllkl2zE/lDJYKlt:/M/xT02zCWq
TLSH
T15844040C7FD00C07C50031704053D3503770D4100F13D74334511C735CD57400C00011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3f21a2e2-5e20-4bc3-8ba1-c1256ec5722a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3f21a2e2-5e20-4bc3-8ba1-c1256ec5722a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 16619e68f262d33dccd46a6ca3ae181b45e442e7e0ee635282ad83b0515be16f
MD5 8478fa32621df0ebe9217d5f779a8b18
SHA1 7d4af4831af882f6f89ae750542545e23799c84a
SHA512 e43c93cc3319e4b24d25ce9f9fcfb1cda517091e26ed103582bfc3c64b2576abe7c4026b16bd740ad25b4c68539e8af7cf2cd65d0dfbe7a5500b7353de0f8548
TLSH
T1BDE0D8F496CAC22E551C34C305787749C3813862D6A1EF0B1700CDC17B07145B645986
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 456B
SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
MD5 f23d2df21a39aa8d814cade6c37856c8
SHA1 233e65707015a53f83a0d53db03a4af8fab21ea6
SHA512 a7b50b8cafba80f6baca44b260f8379852c4176f3dd57168812f3b4b811d2ff340f09f8ce625cc2adecab2851cc33725cb729548a3da98b041387c7952077918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 322B
SHA256 4b69ce11d2480d99e87533db1468a0464c597a0dc27f39cfda51eef44fd80eef
MD5 ab90505242c34cf8fb7d8bf89199ac52
SHA1 b0c9438d1d19fa10b433695098343ec7ee276274
SHA512 319c749338463de54df92a02ee6050dc5119b9e91d4ba0a5353dd57c68b253d10a2a1fd4c9b688637ebefc96f8f38d1afa9237c6ab01624da73aa60fa6f544c4
TLSH
T1CCE0865408C9C22B909E789346AE730CC7E23456B789BA171B0ACDC27207A56A2E6A84
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dasherSettingSchema.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
Size 854B
SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
MD5 4ec1df2da46182103d2ffc3b92d20ca5
SHA1 fb9d1ba3710cf31a87165317c6edc110e98994ce
SHA512 939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d
TLSH
T1B1014C25C354799B04C7627ABCA95001E630818B027665707DDE4D7C6F2E8A700BF37E
MD5 SHA1 SHA512 TLSH

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 24KB
SHA256 b4fa183c3a2ff6509dcf74487f762770bf98fa8f99c517a204027e6a8b68578e
MD5 b0d970bb624810d38b4e0a1ae1888412
SHA1 b358c4052314b3ddd6728b10ad627a11b9a1d61b
SHA512 b7b3defface7e5dce64588e068bcf9aa2a6393966ce66eaf39531419657b810afcb1c3813824a7c813c79af9259cf8a5766bd716df17b382ce4b21938d6df6a0
SSDEEP 96:UBCxCQ9wqTgo9MYwqTg26RKS7f16Y0AaK0:GaddTt9TdTgdUSTU7a0
TLSH
T19BB20A936E307807DB911E78339A983A8D3B927CFFA2DC54352840562DF859A60365BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 e2941e3bbacdbd471e031bbe12f92d1fd085b197555c72692e9d225bd662ed26
MD5 123ba90e70895ad0d879c7848e359e85
SHA1 813d469a2de52d52f0487b7c3d97714511b2a32e
SHA512 0591dbb61c937bf5d7047f39c8c0fbc4d941e3e72eb7d63b1e24e84e20a3986f9c4265c5b4d43a33e6177ffc0c912ec43e8273807c150d5618894062fd0f85ff
SSDEEP 192:HEJEzf+G83uy3Ct7XBBKmR+YCo/BH7DXspU3i3:HEJ+/83uICtTBBGYCo/B7DXspU3i3
TLSH
T12A14635F1F703716CD7D417628E648A35C7DF03FCB526A8AA86104A0CEE2652B02C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
Size 133B
SHA256 3c9b04c37907ce34d683996e5ef4106d0357c0130cbdd298188a160a6032e1c4
MD5 16fd67d91540483c7c1d029d3aa39ae6
SHA1 ec308c605b5b7accdc12201ee426dd1d00524924
SHA512 c56efdd14350241d20f1700930cca786c2db8e6195e03b32c6b17a178cf9f27e6d33dbadb38c68ec05ae26960dbf59311a5826d04ebea3fcf1e19d60bc660e36
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 95780d8e318c1399044a819e6fb92f09bb00a7b1f69359a43e3bedb3054cb42f
MD5 045c4003d496d2b403a46eb0a6be631c
SHA1 0da59e21db930d0bdcfed7e6b77e7d04e57e74f7
SHA512 475fdf30a624a057eaeaaec28f1afe6456468785dd58d4aeae224f277cc5f686605c40f804eefb99a9b659291ec67c1a51e63bdf36137b78714c82194228d9d9
TLSH
T130E0DFA154CDC32B624E208B02AD7B08C7A23416E7847B06AF05D981F20B208F2A2AC2
MD5 SHA1 SHA512 TLSH

Submit Download

10f2ffa7-d0cc-4414-a8b2-e7c793924985.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10f2ffa7-d0cc-4414-a8b2-e7c793924985.tmp
Size 3KB
SHA256 d2645eaa17aadd483bebcb869c8dfb486b72970b5ffd6ab01135361eb73e06fe
MD5 d7840aa95b3c11c6c006340c11e729a6
SHA1 1f575c893b4408e5b8354a0fafac3a9cff4cf84a
SHA512 50088a020fbdf85a0d49a0037eb3f13ea462eb05247fd0849ee115d477647c4ba2f06cb68eb067d58203e70c2319ea4aa02f207025b3ab53ae19af1bc0c0acec
TLSH
T1F1819EF3D3E4876EE95155F0AA28AE2BCF1D0519432C3C29CDD5AF5BA3D34B1E10168A
MD5 SHA1 SHA512 TLSH

Submit Download

36a89853-622c-4cbc-b80d-8e5ac8e78596.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36a89853-622c-4cbc-b80d-8e5ac8e78596.tmp
Size 3KB
SHA256 6c61678afb5382c497031a53ce1944a81e38507a0d9554d9bdc471ccfc99459e
MD5 87e71fb2abea49d3945e6836651e672e
SHA1 1158469eefe8d1bda2cfccbf47db9cfaeab69687
SHA512 53a57b24913d7b2e48a3ec8a2ce89a466a8e409b554b92264048d1aaeac9a70ac0cfdf2a010db961629cd5b9723ed0594e89e425fc812273219294f324b9c503
TLSH
T1FE819EF3D3E4876EE95155F0AA28AE2BCF1D0519432C3C29CDD5AF5BA3D34B1E10168A
MD5 SHA1 SHA512 TLSH

Submit Download

7d0ea7d4-e201-4ab6-8772-d44836b4d54f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7d0ea7d4-e201-4ab6-8772-d44836b4d54f.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

90471d3f-8bd9-459b-a84a-8bf650a7af82.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\90471d3f-8bd9-459b-a84a-8bf650a7af82.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 859B
SHA256 561e39c6344efc51554d383326365b7e743413eec1b94a192c92babf73a9e104
MD5 42719717c88c71664e5bb9cddaa0c560
SHA1 3eb279d9ba6a4ef4b9b38ed0ffcf3201bbeb9992
SHA512 a57407d704a134bbac5f0d7aded429857bce4892467e7a062827f8046d607c4215f48652a5f7d9ac5a7ce7196bfb0d8193d15c869aa9d3f01430ed491bd0d04e
TLSH
T101114CE650BEB4BB11794BB61E40FC497F75B8311152A0E5DE5343ACB0D24F75B21435
MD5 SHA1 SHA512 TLSH

Submit Download

bc80d7b4-f42d-4878-9743-b41dcff00fee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc80d7b4-f42d-4878-9743-b41dcff00fee.tmp
Size 4KB
SHA256 7cb170dd63c9d4eb411e3c553b405e7099d652a6c6b264a4e0b907954a3273b3
MD5 271ffeb5428808354dd58c8d624494c2
SHA1 85c12f12b79c7aecd0704b5ffb4d109cd40803c5
SHA512 973c408f0e883910a3371ccb756207eed44ff8765e57d684df1f508f54a7daf3a405ba3787e8fd3e60a8eb0d934793b6bcc1761224d4efd9b6d9e721ba105b4d
SSDEEP 48:YALlgyDPOBc6FNAO1R1s1pC8qsCzEsbOB4sTYzsDQgXZYEsfcpIcysz/sYRsQC7S:D1uZ6O3m7yz/uTY2TpYbcpIcBN/GwG+l
TLSH
T1DF919CF3C3E8876DD95155F0AA28BE2BCE1D0919432C3C1ACDD5AF5BA3E2471E14168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 5e91781a04e5e6bf2ed5ed66e74ed77711a4d0cdc69f5105fb337cf55607587b
MD5 09071b755cd265c15a24d50c07df1a6c
SHA1 332b93f75581bf44d70b85ed86c1ee57192b5f68
SHA512 3d6daad225e03a6ee6b4c1625ae69e8dbba83d5196a0c1c8e37beca4b8c409d8856fe8a3bf8391d40aa4855c6022aedbc76216178705114a47c446c9194681a3
TLSH
T12EE0265005C8C23E609F204706A9B708C3E97427E3C4BE066F00CE4062C7544B593A90
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
Size 100B
SHA256 8a0071621b17b94463b37f5eae130c5b792d8407f31ff35da2f28c3a5ad95e24
MD5 933deced3942587d4139e0ca5c3bdb37
SHA1 014b756ad4c4531779746b062cb2a820c3a3ccf0
SHA512 5016e75c92be07aa882c4c4cc42eb0b266707be2d5151761a0082bf980ddd527cced8afd836f960d74cbd9971721bdad20c2cf23fd6ac658c25f3e7de9a8fa5d
TLSH
T1F9B012047B109007D84A1E3214755B882240B04144442203CD009F100E0436C3DC50C5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 61f15527e010468dbc07355528cbde8ccd3ca0dbeffa07b735e33590c281b041
MD5 680bda094bf5f6afc5dd89ea811b74b8
SHA1 8ff68f5bfec1a0c9eff6e04be0bb84e6c9b7b892
SHA512 c28e4300830fa88a665c9b9c13f47ffdb79639083cdce40920f84ceca2d7bc503f9a3138ec7cb95389c2d0368f3c95952874766ef5c6162b07b4cb28f953052d
TLSH
T1EFE0486015C9C32F618E30974679F34CC6E77416E7C5AB257B08D6C1B30B5947293D41
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 317984e3e40de0b87075cd19be4826740949a6ad856c6c9203c29e6979791035
MD5 bb6d3bc3f42c9794f1f5de77520b97e0
SHA1 12a47d1389ccca29f1c648a657263bfd155f6e1c
SHA512 eb8c6758662b77fe8765b5940f322fa462d6058d8a6b4ee70553514672604c7eaaaf557071f6ce8d7354542a8ad38c2276e800560434cc42a2fbe4e4104b1d5a
TLSH
T114E086F045C9C33E918F70D7C6A9BB0CC7F57816E7C47B5A97088841F207244B2A6E80
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 149f3ece18f4b600f961723b28bb1c4b28dddee2f51316e345fc5bb868095c3c
MD5 912d4a4b7f4b7a969ecf093e96c40071
SHA1 72337bf11e3cffe95eff222dbbdd12a82db73e72
SHA512 45f5ca6197f07ce86eac5ce996e6068b94c1217e5145cead5a37e88bdc59438dd5d0ce30eba3e1f2055d712b7530226b99603e1c5273194199adad73e0cc4dc5
SSDEEP 192:Ojhff4AZWCAmGdiXW6M4hg/YwP6X5vo7FPD1rhP4DFhvXil7e:OtfFvpopPxrB4Rhfixe
TLSH
T183B2241571BB021138FE690C81B5971E464232B33258EB2B7FBD14A69E6BF085DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

WebAssistDatabase

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebAssistDatabase
Size 14KB
SHA256 15bcb6bfc9aa1a215629ea4570b05083ab4974b9c532083a6a3e8ac08b4e760a
MD5 eaa3da73b25650b89c12a9e94c7884a0
SHA1 eba282728a59f3ee2231cb80c3ffa9c1b5422241
SHA512 dbdc8c6f889fea30620ee260b539d14970160c897e66364b9f32d52c914aa8110471d89a6258992d3df8dce4cd8a6d954ff73bab5c9d0d006fd59bd28ac8724a
SSDEEP 24:LLTGxhK3thdkSI5QjUsEGcGBXp22iSBgZMF+WNjzryFpGMwGt:DEK3tjkSI5IUltGhp22iSBgZMLIpGMwW
TLSH
T16152BC9FB9742213DCEB87705ED005E17E36507E8FC2E602E99540552BB85A1B32E6CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b066b52d-3342-442a-8d43-2237eea0a34e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b066b52d-3342-442a-8d43-2237eea0a34e.tmp
Size 13KB
SHA256 dac20b599ab21630a6d3ed8df4d55a1425f70ba7d1b63a2818cec69830fe16f5
MD5 922d2654cadfc58b4e626ed03b217cec
SHA1 b1d7f58652beca7b18f2fcff107cf72509224e8d
SHA512 940c4245910acaa5e0ad19a8854138aee5859098ea201591c17037a81c0dd866b2acd5ed8565ea0d8a28dd3558bcb070fb57b337aea991fbcb446961fc11113b
SSDEEP 192:sxZuRS9d/fCsFWpV3DQZZJaizodpTEHW6+WNVG21XY7IEIwY9PIgbT8J:sxZuSd/fCsFWv3DOZwZIHb/XJoY9vg
TLSH
T1A952D615AD34A97B9CCBD21DFA59BF53E3F95033A0911E44AAFC8A1C05EB6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b8d73d36-a713-41fa-a63f-7b4a69f707f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b8d73d36-a713-41fa-a63f-7b4a69f707f2.tmp
Size 414B
SHA256 76fc7acd72af53a444fee2d71bc1b7a6e31a99d394435f5f4cd887f843e547fc
MD5 4c939f8a692152a6f94da5ccd74766b7
SHA1 54b8d72bced64f3ecac1c0f4b8c8fd960d04ad43
SHA512 4341daa498708136bd862b8fad78800556e33dbe2c565a3600791faeadf1a0e474b7adb2124cb23bbab552194246434a18d053c890f4d8583fdb2c5b96ae1ede
TLSH
T1CFE02BE5C959AC3B19FC8B1850540646EA41136B2A90888B773D910D8FB1636568B86C
MD5 SHA1 SHA512 TLSH

Submit Download

c49a020b-a2c1-402d-bf60-14071a0f50c0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c49a020b-a2c1-402d-bf60-14071a0f50c0.tmp
Size 13KB
SHA256 82cddbe950bfe785e97c2e3c26210f3a88a62c288d06838a8fb6e17114d1d5c5
MD5 ed3d75b2e9d13c6ee0434331921fa208
SHA1 5b16d99099aab5761f36435f299a60aca7afed4a
SHA512 baf05c2fdc2cd8c0882852a7173a563c903407258cd5bc8c29ff73506b81485e69c29c0b019ffc4aaea7e49aaed84926bafe83462f624378d709f45c71a9fd09
SSDEEP 384:sxZuSd/fCsHWv3VnB4/ZIHb/XJoYI+Avg:smSd/fNY3VBUGHbfJoeR
TLSH
T1C052D615AD34A93B8CCBD219BB55BF53E3F95032A1815E48A6FC8A2C15E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c89e2742-2a5d-4e16-90cd-9330a99ce7b6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c89e2742-2a5d-4e16-90cd-9330a99ce7b6.tmp
Size 12KB
SHA256 1bc79985a9a3ddbffd2a08671ad6d46ca99b47957704dc25bffc95887189c67b
MD5 9949e3af1ad22353a4297390a66f1750
SHA1 1056c89d60be17d13b6db0686be1a2e04a996795
SHA512 1915273a558ac1f45f6d87f77f99dae85d9eed88dd1290ebcbd158cd94b5232519ab3c726a6427b97c8531062a748ac105c31cc53fa809eefcc7dcf497f1e82b
SSDEEP 192:sxZuRBkd/fCs8EQZZlizodpTxHW6+WNixW/YbIYttYYpIgj8J:sxZusd/fCs8EOZlZ1Hbd/FWYujg
TLSH
T16742E715AD28A93B9CCBD609FA14BF53E3F95033A0941E48AAFC9A1C05E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d42731d2-6c79-4604-9dce-b7ebae73f395.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d42731d2-6c79-4604-9dce-b7ebae73f395.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f957922a-9618-43d9-b2d5-f42f9c82a5db.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f957922a-9618-43d9-b2d5-f42f9c82a5db.tmp
Size 12KB
SHA256 08498485218442e16ad91977a5903ec53c84506d3e3ed0a678d9775e7e8f56cb
MD5 aa2bde47ec0dd7d9b8103c3f115011e2
SHA1 44042d66a3bccdff599fe12419ca8e4cc8bbd36e
SHA512 fcb2a0bcc9c6255a17b7f9dd5d959f526060e0ad683e79adbc2cd12c3ea7de0dca9630284e2318a8edc1773d9813d1b56ae4f8df0ebf525069e0c0836328e0f9
SSDEEP 192:sxZuRBkd/fCsADQZZlizodpTxHW6+WNixW/YbI9ttYYpIg5T8J:sxZusd/fCsADOZlZ1Hbd/FJYuNg
TLSH
T1A642E715AD38A93B9CCBD609FA54BF53E3F95033A0901E48AAFC9A1C05E76DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 16KB
SHA256 8c44df3b45519a97c43c0474bd3bebb86c72b5153a7db61cbc646b741fd5ee2a
MD5 07908216b735e8497f036bfe682c73c9
SHA1 f12b51359ba6387046a4cb858785f4114b27e74b
SHA512 0c0c4c62f913493478544c1a84fb6a59d23f23898c2bd91f53b3042930968e22c429e5749ff24df1dfd040c212ff2f45aeffa5ccbf199af73fc2fdb6b9617a87
SSDEEP 192:42ODTAs7lrNUQ2s5WPIBDbVQdlIIIqb2MIMoX1YcYfqLqqxYrq/Cmrq/Cp:aDsshR2swsVQdlIIIqb2MIMolBbuYEA
TLSH
T1D672967A27492B33D25E5FB706798F9417D5C84287E2620CB260648E5CF3B7786C52F2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 c9ffb31482178b57306b7541a08649f90443a4d99f0f240888a7388aad319cff
MD5 69f78240c71661b3e1eea25e1dcdec73
SHA1 fe94553fa4706e0630fc2778ca6bf601aa281956
SHA512 bce759823cbbc702d8e59a96395015c2fe5885b586967e1ce08b7ed4dfbfa96b83ed2fbc61ff3097ad4fc3155111568134e9b7fcb0c0fcd2a8f48cd3768da594
TLSH
T187E07D90A8C8C32FB05D708B11BDFF08C3C23813FBC02A0E9F09C444A20B508F286692
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 e95270795338859cb7dac08e5d81accc1814a9aa45f45d6b848b6285d8fc4ccf
MD5 17cbf99bbc6be452e6b3274030e04cf1
SHA1 535118a6dae1c18e1b0a6c262c489c29bfded53a
SHA512 6562ed025d0bfdfcef1c8e28dc7d53fbf879faeb9fb12335e8b6239ea39a3082ad609668beddd71c0d5fd2ddf13e473e932c61278bc6fd73994cb6c753046c62
TLSH
T1AD21BF56F320C149E14E863DA06BA7351378E8529FFCEC0F45B964356E72A001E8F6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 d479a223ebc4379e2582e920d745f4f3571bbd64ccec270646dd028eebc5bf34
MD5 f52a51bd30b6a69d86f2005b5bc74b2f
SHA1 ad0a0e2cffe51396b7cd8fe81aebf03974b6aa82
SHA512 0b1f367fc49b9dfc2c6afa3b6f35e0684d50ad64b68dadd209a9cf1f9a7aeb9280f7c497362b4c2a18b1160de822b76d90392942b7079be571b07522ff69dca0
TLSH
T1EAE0DF90A8C8C32F905D308701BDE748C3D23C92FB802F4E1F01CD44AA47541B38A582
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.26\manifest.json
Size 53B
SHA256 e1cd8395b2a987ed86c356bfae0952ae09f0cb012030690d6e23615698478f77
MD5 231f4c6814bd04e1dff159c333e99a8f
SHA1 e7a5e431643eb7e17b88cd2bc6d76be5be95edf2
SHA512 10edf632be82534001690da65ece25b5c0882a44afd68b54ba078676f06cc19183c50e64b771f36b1d5a52ce2e885dc34ca4f4c049eb517770ee33c03ae06d21
TLSH
T1A29002600814921716C14E506570B882A391661955950D1D04455558029586CE0502A9
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 dfdeb81bb51c401ecd51bc32330d413baf09b77f00141692ce45af5aa28ab75c
MD5 8276dd5270eeeb7dd0b2b6b88b53c44f
SHA1 0a1d29d4f81055fb67a6a11dd063a343990ae6b7
SHA512 f867d6ff615804dcbcb85ffb4ab1afdd434ed4f49fbe51ec566a6894067ff816eab4744bc5980227eb183d8bcdfff0045c0f4b775c5c8819539a613b84a02e86
SSDEEP 3:MsEllllkEthXllkl2zEdxll/:/M/xT02za
TLSH
T1FB4404047FD005C5C510107040D1C3501770DC310531574774710C33FCD55710D11300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 27246d14228102138c3e4bc7b713251658494ff0814270997d02971fcbdc4367
MD5 c36777b23eb2421cb0e45b6f2160cc31
SHA1 611ed5e724966b49b343a56f5aca4017552eb016
SHA512 a7c334b6c869674df0779df297683056cf31a7867782f24c130b89a86fda5aba8a4fe39cb5f92960c03d22597816b606f8b53111e30e85908d99045250d59172
SSDEEP 768:jFobUwgRMhGsBeX1bzIoZ41Sm99aAuvaTZc1H3Lf:GbLczIocSAuycXL
TLSH
T1D2F27EE194D78DB6D89D8BC3632DAD4299BCC173B4884988B7E46C2CEC4B1BFC706815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\72.0.0.0\manifest.json
Size 102B
SHA256 0ed889bea99f74fede865222f4cacca4277c63023db98efa666d42ba1f7f9502
MD5 329ad25b265a82c711c72c02a553a353
SHA1 a9a666d4182caad82edd399fdab141473670c5a7
SHA512 b81005847e76dc513b255b36704dec0ae84c922d23dc152cc42bb3eec9e18cb083e601bb90562b3f3c9b2ac540e801866f59277b9c43c0b97fd3e90b688f26c5
TLSH
T178B01220EC10B4B3000403AC0C6CC3C063372F032C4079180DE59F84E80D9DBE071E29
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 291e29bee0db6110693e5bfb85e7b980bb5f1b72d5dc98b4fa8ec04318a98b1d
MD5 ff6d8c9d4143730aebc875f6b8663e4a
SHA1 d9619a92cda978a814b29d09a176e0ba719db63b
SHA512 97ffc176a7a95be0a36bcb542dad8e8687629ade55ba67ef4f6b387166b74787dfadc50ee35e30112f377f960f0f67fdd9fe9d758066d3a0ab5f7fbd18d1997f
SSDEEP 3:MsEllllkEthXllkl2zEPSE3t:/M/xT02zwd
TLSH
T10D4404047FD04505C5001070C055C7543770D43305115F4734510D3F7CDD5700C01010
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.10.12.1\manifest.json
Size 80B
SHA256 abe933f0db95b1a75786da21de82feb5270ffa7ae072270923da2437710d93ba
MD5 3790d9257ba14f8be2ba08acf259a57f
SHA1 c54ab2e79d0ac9dc27425c7450e01ad593f02d60
SHA512 9568fef732369f06aafd8270638a38531a26f6f40a1c7c65fb7254eed36807789756e1c6efabaec86017b3decead2773de9ef5814650dbb334e6000ebd44a467
TLSH
T1A8A012605811E13310C403700260438243E01C112015240405461140218823713A3129
MD5 SHA1 SHA512 TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Web Notifications Deny List\2.0.0.158\manifest.json
Size 177B
SHA256 976e13362933c4e9d37530c32a043728f47136ff030f249ade8210d4d1300df6
MD5 27f9a23b87cd0575e13bfd00ea13e3e1
SHA1 998b5c16a3c10772059819448dca88be1af7b84a
SHA512 3a1517e7d3f68d944fa540d52885c2e16d679358c8683997a407720cd6b4b194829017d07b451e58a78879e68cef66ac9e5a1cca3582034a70699709c6ad7f88
TLSH
T144C012DFDC509DB115EB4332156D43C4D733CF0B1546450935F766082E25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.3\manifest.json
Size 141B
SHA256 fe8c5046a79693a9b7f32bfc3ed7c8fdf84c5d186f5326a527ac508345a44009
MD5 3a5a48cc06d7f5cf2ec6e467e34915dd
SHA1 b6c3679e8961f0af7b5a56704992d5561ebaf6c1
SHA512 ae2de2b1827831eaeae6c9d00d081aa7be570fb050368eabc6b549469b14d7409b55e3726d4ac8ceb6cf75e48b3a88604345cb56a53f0686dd84cf8cb262125a
TLSH
T130C04C5585005D71509D87781D6C97054B12CF5618946509DDC68309EC1DCCB64B234F
MD5 SHA1 SHA512 TLSH

Submit Download

ac8cf036-8c17-4d86-99de-043a2a8727c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ac8cf036-8c17-4d86-99de-043a2a8727c5.tmp
Size 32KB
SHA256 3d283faea16daf9a0c97319956950b85a3ee8771eb79709681e17145d1ec97d1
MD5 644e0e355e967ccaa5e6a60d8fe4661c
SHA1 6eb21efddd8b5ee942af4083d092040ad5d95d24
SHA512 5e30115710ed9dcc25b4b2c173f6811e34821750229e99ea682d507a89ad4c1b3e293e46e141d99fefb9637a7937158bff45bbf293cb10106f592a3ca8c3f21f
SSDEEP 768:jFIp3UwgRIhpsBeX1bzIoZlvaTZc1H3Lf:up3dPzIo/ycXL
TLSH
T139E2C4F198D79977D9AE8B93A33D2D029AFCC153B5885A80B7C94C1CCC861BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0bee24e9-8151-4f11-a9a4-843a203072dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\0bee24e9-8151-4f11-a9a4-843a203072dd.tmp
Size 2KB
SHA256 3a5738a0f31b11373c980bf92d3f87b9bd34ff22c9e4724e8caf991d96f62f63
MD5 d5fc2aa59aba04b4526c962f32d5997b
SHA1 c3fe3a3fb06b3b1cab9d01acf1814a231823fbb4
SHA512 c5dcac389c3cf84995fb4896b11a22469dfffd7f6bace76f2a6c30965965bd27383995568ea748ebb31d9b8a61b2dd514412fb14e31cbdc56418f325912cf78e
TLSH
T1914145D0483D1AD1D1BD0DBFB08B26EC90E89222B0E0343D2898ED988A7E51D754093F
MD5 SHA1 SHA512 TLSH

Submit Download

44eff174-8e00-4d81-935c-81af28793933.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\44eff174-8e00-4d81-935c-81af28793933.tmp
Size 2KB
SHA256 0683e9e0a3daf6897799fac98796902a2f428abc73976a13774703e65d7e9923
MD5 4b56c3547a1dc9d460b22ea02a39f86c
SHA1 e3ad1a88b5695b0c881d73ea50de9c395a91e6dc
SHA512 231b8f1c37106c1c86476fc2ee71913de0f246b5eb7a225b14820703abc7e283996f8e31e2b1d49d4ae4cc76bc4a6f6d14d85f3824853faa7b18578698f08fce
TLSH
T147412EA0583C1AD1D0BD0DAFB09B35EC90EC8322B4A4343D3898EDAC8A7A50E714083F
MD5 SHA1 SHA512 TLSH

Submit Download

7b639616-1412-49bc-86a0-eb0036900979.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\7b639616-1412-49bc-86a0-eb0036900979.tmp
Size 2KB
SHA256 0554d75256e0cd464e6e7dffb52da9465c75dcce3a9da4648a023c8a7ddb8f24
MD5 8fa02bb883c44e3dd3b986350f7e4de5
SHA1 96f9d6e37d2c2721a7a56b1d51c87522c5f2c126
SHA512 2ee4b5409ff9ebbc6068f407da97edcd86f5150207abd19bc69c59ecbd53cef1a0f56ec947796b4762ea432e5fe6923687dded79f2a17e83de6c1eb833244ca0
TLSH
T12A4130D0483D6AE5D1BD0DBEB08B29EC90E8D322B4A434393899EDAC4A7F51D714193F
MD5 SHA1 SHA512 TLSH

Submit Download

92f47751-2cd1-46d1-8ddd-f8e7555acc22.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\92f47751-2cd1-46d1-8ddd-f8e7555acc22.tmp
Size 2KB
SHA256 db2ac5acaafd1830426177aa4f61709293e80b6deb8731eaa2eaa4ee376b8649
MD5 cdc1d5ab805605c572c7406e50a88306
SHA1 791c01d3ba731a710be4e98ae87d8d1aefbcfdc8
SHA512 6d1549ed64d59615b976744643c51aceb7faf49800435154960cbc2d8543883d939b8f33acb5ec9715cff333cc22baeedf1755f55a537c5e1b9cb768a72d4ba4
TLSH
T1D24130A04C3D5AE5D1BD0DBFB08B26EC94E8D322B4A434393899EDAC4A7E51D714083F
MD5 SHA1 SHA512 TLSH

Submit Download

bb99eba6-10f0-4783-82aa-7875987b747c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\bb99eba6-10f0-4783-82aa-7875987b747c.tmp
Size 2KB
SHA256 87842fdbc44d35b7182232f04ea0e26971d9f99c3ce74fbed5961077662d99c0
MD5 b3ae1c59f19b157309138d6dea981e4c
SHA1 bd435d1a15767abbda41c89e1eb81c6bad3a2f5c
SHA512 4011458ab550b298b3e34d37e06b9ea2848f72d0de9826109019aad03765355f08e7e020284888fc984374154e059f5386e1f8cb7ec455f831733090fc5f3654
TLSH
T1814154D04C395AE1D0BD0DBFB09B2AFC94E8D222B1E0347A2898ED984A7F51D354083F
MD5 SHA1 SHA512 TLSH

Submit Download

f7aa8858-8303-4621-9c5a-13bfbc2357ce.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\f7aa8858-8303-4621-9c5a-13bfbc2357ce.tmp
Size 2KB
SHA256 92eb32be5bdf60428bcdcc4bc162d73e44f954995fdc1f48366af0f0be9c6b65
MD5 8e74a0ff3ed1fec9d26342a7f6a02682
SHA1 ac46c0e1d99402c90c67ce830692595067c3c7b2
SHA512 79ef51894d02e974ece98d386ff7ca981e0a679bca680b11248baf5ce94c2ee43570fc9695641e19b868e2f9230ec7d85a560e209158823ce92a40fcc421fcdc
TLSH
T1AC4143D08C396AD2D1BD0DBFB05B39FC94E89222B1A0343A2898ED9C4A7F51D355093F
MD5 SHA1 SHA512 TLSH

Submit Download

f3843521-4db4-421b-890e-60e5ff7f4acc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f3843521-4db4-421b-890e-60e5ff7f4acc.tmp
Size 31KB
SHA256 67c0c634141b1a42d75d59a2065af5208c9e0aa76557210cc49d960c35adf28b
MD5 537a84e6cdf315b574dc5ee60817c412
SHA1 6aada57adcca363ecac3ecc57071bc0f3dba1987
SHA512 a511ca54b0ce0ece80b6e53bef0007c4ac037768c55d7c8c0671a0fd627675900b4b5201897dacb62866313ed1fe226c8c3cf86b0137a4c02da8f78b5a44f2b7
SSDEEP 768:jFd+3Uwg9ehpsBeX1bzIoDlvaTZc1H3Lf:7+3XPzIoRycXL
TLSH
T1F7E2C4F198D79977D99E8B93A33E2E029AFCC153B5885990B7C94C1CCC861BFD30A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 be943b029957aed3b8b678eeb2707e00a9f8eebcbee8559a818f04c7e8630733
MD5 904662d9c06fb33e3cedcca17dafa12b
SHA1 012181cfd7e06e668d49067db4eb933377adcd89
SHA512 b6ed75884e8864409ad12cf2b720cffd76b9b8b1a6e9ee0f4271f02cb4fd631f1850e17a7ac0ed452f527f0e9fc04a9cb7bd71ec471305ee6ed824fbedb232a1
TLSH
T15E41E958A6E9114CF3B76E5AABF6B86E487BBD772F06805D00110E4F0676B40C972B37
MD5 SHA1 SHA512 TLSH

Submit Download

71c39a79-beca-494d-bb65-898e1e54df16.tmp

Path C:\Users\Admin\AppData\Local\Temp\71c39a79-beca-494d-bb65-898e1e54df16.tmp
Size 158KB
SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
MD5 9c18c4721b560ec55f0d5de055144d5c
SHA1 6af37a3bda916cac276ad5879c9f61262d9ae523
SHA512 51466928eb8d3cf7b917919c98bd8168453583d2c3dc5836036d87ffd0d2c732ab8450212a880fc6de199ea569a96993ba0d250a5012160d2d72211880695f92
SSDEEP 3072:5ZwEurOxn8zXnHc2qHNYEU/rUHCVJWGdi0Ha5HnXk9TFzBsuht7yGik:5ZwPOx8D85UIHEI0HaZ09JzKStjik
TLSH
T1CFF3E13E7EDE891AD80B10BB7F16B18BD80D8E0B460AB44B769D80155B3668D1BD1CFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zecurit_agent_3.30.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-J8NS0.tmp\zecurit_agent_3.30.tmp
Size 3.1MB
SHA256 5425903e3bb145955737662e6a25a327a1e62de08d22555043fbede16df7c51b
MD5 a952552c1a25444f0b5f68784acc293c
SHA1 35d220552ab15b253ab6fc0f7eaea09d86bc1418
SHA512 b6190b82e07aa8f8920acad3265d737ad36c1894dc8229ac64ae4a556a4c658b457afbd48966105735e9dee570c902db36f0cd86cdb421c01a8db96a32c4cc0e
SSDEEP 49152:2WGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbQ333TY:6tLutqgwh4NYxtJpkxhGj333T
TLSH
T16BE53A17F28C713ED06B3A364A3385909837FA6179168C279BFC794C8F365942A3E647
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

694df7a1-b97c-46a9-bf84-a3a966b00d45.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4456_736572973\694df7a1-b97c-46a9-bf84-a3a966b00d45.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4456_736572973\CRX_INSTALL\content.js
Size 9KB
SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
MD5 3d20584f7f6c8eac79e17cca4207fb79
SHA1 3c16dcc27ae52431c8cdd92fbaab0341524d3092
SHA512 315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3zEScQZBMX:+ThBVq3npozftROQIyVfjRZGB365Ey97
TLSH
T16212B58DA568ED7D1980C952E10EA62E5D342435E6E7A303108B8D88026CFBAD955FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4456_781577462\CRX_INSTALL\_locales\en_CA\messages.json
Size 711B
SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
MD5 558659936250e03cc14b60ebf648aa09
SHA1 32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825
SHA512 1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727
TLSH
T1460197136240AF18470BF05BB9023442A0B44AC62384E0B775EC982C6656DAFB20B3B0
MD5 SHA1 SHA512 TLSH

Submit Download

zecurit_agent_3.30.exe

Path C:\Users\Admin\Downloads\zecurit_agent_3.30.exe
Size 21.3MB
SHA256 08aae00a92d9eb0ae69a1fda11426abbc3afae6e73a197e497e28c977a578964
MD5 9ed5bd8f917474f99e759f29db6382e1
SHA1 375c9c18903f6df0c2b66050f1b08ff974c8d873
SHA512 4cf6f54f49fe708b56ee571c81ef387d659ac24ae6b986cbf68fbf99ba7b5dbb24173c485998afea1b18ea12a925baca872bee968d60b2fee5f057a92a937cac
SSDEEP 393216:J5tMUZa/CKCl4vU77CmE71/6Q7LIJT9yeP0THiakHj4YOFcgcMTqo9i:rpKCloUHCmE71/6Q3XRipUTyMTu
TLSH
T1DC37333FF268A63EC5AD0B3545729620897B7B92690A4C0F67FC344CCF7A4305E3A656
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1676-300-0x0000000000400000-0x000000000071C000-memory.dmp

Download

memory/5996-270-0x0000000000400000-0x00000000004D8000-memory.dmp

Download

memory/5996-301-0x0000000000400000-0x00000000004D8000-memory.dmp

Download