398beec21ded793c13a134f46f46e06c7c72e4b77be231f3aeac4c09fcd643d4

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/05/2026, 12:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NEXTGEN.html
Size 2KB
Sample260522-pflmtsc181
SHA256 398beec21ded793c13a134f46f46e06c7c72e4b77be231f3aeac4c09fcd643d4
MD5 22dba3aed0821d74aaa3b416340f042e
SHA1 53a0843d3f606c5afef4ba180cef2043ebb53ef0
SHA512 943e77337ed523fb47c43267162098f4ceff18c63621d4dbcc62f57ac08ffa6ef4ef4fb71e1fd263cd75db03ea2c4c4e2fc8c67b575ff4f446620cdf28a81b7d
TLSH
T1B451334A57F34025686390A93BEBB3093B8A68079A0BCE593ECD5244DFCA6B495D234C
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2692	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134239259346179945"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{9ECC7CD8-3B9A-4626-BF9C-06D0EF7CA916}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2140	msedge.exe
2140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 416 wrote to memory of 3900	416	msedge.exe	89
PID 416 wrote to memory of 2692	416	msedge.exe	90
PID 416 wrote to memory of 4820	416	msedge.exe	91
PID 416 wrote to memory of 4820	416	msedge.exe	91
PID 416 wrote to memory of 4820	416	msedge.exe	91
PID 416 wrote to memory of 3084	416	msedge.exe	92
PID 416 wrote to memory of 3084	416	msedge.exe	92
PID 416 wrote to memory of 3856	416	msedge.exe	94
PID 416 wrote to memory of 3856	416	msedge.exe	94
PID 416 wrote to memory of 3856	416	msedge.exe	94
PID 416 wrote to memory of 3348	416	msedge.exe	95
PID 416 wrote to memory of 3348	416	msedge.exe	95
PID 416 wrote to memory of 3348	416	msedge.exe	95
PID 416 wrote to memory of 540	416	msedge.exe	96
PID 416 wrote to memory of 3412	416	msedge.exe	97
PID 416 wrote to memory of 540	416	msedge.exe	96
PID 416 wrote to memory of 540	416	msedge.exe	96
PID 416 wrote to memory of 3412	416	msedge.exe	97
PID 416 wrote to memory of 3412	416	msedge.exe	97
PID 416 wrote to memory of 4020	416	msedge.exe	99
PID 416 wrote to memory of 4020	416	msedge.exe	99
PID 416 wrote to memory of 3728	416	msedge.exe	102
PID 416 wrote to memory of 3728	416	msedge.exe	102
PID 416 wrote to memory of 2468	416	msedge.exe	103
PID 416 wrote to memory of 2468	416	msedge.exe	103
PID 416 wrote to memory of 2740	416	msedge.exe	105
PID 416 wrote to memory of 568	416	msedge.exe	106
PID 416 wrote to memory of 568	416	msedge.exe	106
PID 416 wrote to memory of 4668	416	msedge.exe	107
PID 416 wrote to memory of 4668	416	msedge.exe	107
PID 416 wrote to memory of 4392	416	msedge.exe	108
PID 416 wrote to memory of 4392	416	msedge.exe	108
PID 416 wrote to memory of 4764	416	msedge.exe	109
PID 416 wrote to memory of 4764	416	msedge.exe	109
PID 416 wrote to memory of 1488	416	msedge.exe	110
PID 416 wrote to memory of 1488	416	msedge.exe	110
PID 416 wrote to memory of 4556	416	msedge.exe	113
PID 416 wrote to memory of 4556	416	msedge.exe	113
PID 416 wrote to memory of 2552	416	msedge.exe	115
PID 416 wrote to memory of 2552	416	msedge.exe	115
PID 416 wrote to memory of 2552	416	msedge.exe	115
PID 416 wrote to memory of 3020	416	msedge.exe	121
PID 416 wrote to memory of 1008	416	msedge.exe	122
PID 416 wrote to memory of 2376	416	msedge.exe	123
PID 416 wrote to memory of 4124	416	msedge.exe	131
PID 416 wrote to memory of 4124	416	msedge.exe	131
PID 416 wrote to memory of 2140	416	msedge.exe	137

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\NEXTGEN.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa6ec8c188,0x7ffa6ec8c194,0x7ffa6ec8c1a0
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1948,i,10681551727491874015,9039451610519396880,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,761731495674859136,17471679631853293637,262144 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,15662066091305573934,13501400947717000203,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:8
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11895257039019678095,10423686350634307398,2097152 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,9439957690095111788,8347785307168638818,2097152 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,486287173073801903,725210077341024597,2097152 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4232,i,3989179662387338861,14672788718492727191,2097152 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,12242339650894577166,10150474173038247073,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,6586282657989902709,4592537731260058962,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5208,i,15376158035311314062,6939410794285197455,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,13414457756335605549,16898313172385638082,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5928,i,13414457756335605549,16898313172385638082,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6100,i,2189284930477867925,5148200637485358567,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,9708848364989450387,15908655265835639121,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,2701849563126483869,10800909180341645611,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,2042785935644916043,9503570301437424830,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,7277881030410618410,7879555398735173305,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,8558091546812378677,13215111175301343176,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6516,i,12488604447379784970,17639062993229394679,2097152 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4528,i,3664637265841782323,1861433930488846720,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,7347749543441716233,14274104350516161669,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,8336468173789892988,570393777467916099,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,15980746720920876359,3019968595789569689,524288 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6316,i,3837914375102015182,16594094808840402919,262144 --field-trial-handle=2264,i,9627892627256293344,12164436806393583940,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2140

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2792

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:704

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 23c58b5b25bf87044dd23c1c86260a56062c670eddc6708b2fffb6988bd2f2d8
MD5 be4b8544e6a73a23b5f08b35af9264c1
SHA1 d6d447a2691d3553453b7b4f735bb997d9d22e1e
SHA512 bb46e01586c7e7936bd99c2353a4275a8d53c17f6ecd7666d7d42de5371e36385ebd2b3551b8e914096213efb0d577f5a7b91db4c168dd347bad9e7b73ddf296
TLSH
T113612A28F5320C81E3B12370DA915A1D38F1CF88DA5B9E6143D864BCC5DA37F8576C49
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 5007f510f8217d08a3227f6ad520129cf07b49cb1aa637ed7556bf1cb7f3fe24
MD5 11dd4417654e27db01ce1316a94333a4
SHA1 0c3da8b55441ea068032788b76981292d24eb1a6
SHA512 59177aa622bedc7fe69b2933aa479783d3a10cf1ec6a4eb079174284f0846d5a1bc039e1d332e07c17380e37296b91a8dad20216df7ddb0e7abc8daf91588f60
SSDEEP 48:YALlNrOgyCPM0MuMws9cRs9H1dzs0zEs9K8s9xAfo7wEs1gmzsLCKsXBBgHEs4tS:D5OcvdEcmVHz5KhKawxsEBKHEtWFjQEl
TLSH
T1D3818DF7C2E8866D885159F077247E1ACE1E0959536C3E1EC9E4EF4B93E24B1E140A4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8fdf955785df9a26f1b2572ebbbe8e0329391ecf82f512d61602b1f7fc28f591
MD5 dc38789a64db330f5a3526f8bec7a16d
SHA1 2337970edc921c297eeceedfa8f9fb7c3233ea0d
SHA512 15b7f786b741ff87badbdd80b1ddd6111c3f00ec4a0f7335970aaddfa8c1e8c314382209ed260a132be52abeed55dbebed884523297429f3cba6d9a14a50e194
SSDEEP 192:sxZuk/fRJJyM/jK1Ml8MkZl/f5EsrtSgxWoIdpdujHW6+WNGYL1r+WIg4J:sxZuk/fzFMZl/f5EshSgMZQjHbGwRc
TLSH
T11752F915AA3899778CDBD309BA157F53D6F9147392940E44AAFCCA0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8e7e4d964dc6c4a89172876ec99768118b72c0c5cbd72c62d058e92791b2bc1f
MD5 fdf58210ad1415b8b058fe08c099d451
SHA1 6b54e583b735caba6f059345a01158c8cc6f0c7d
SHA512 df571c63b665f2fe124450e8d0d68463ade1560633373fb9a55162e09d62f5c8d49d358decd478baffce4cd50e3d9d3cf6dd7b3c3ec406d22578a4547461d7bf
SSDEEP 192:sxZuk/fRJJyM/jK1Ml8UQ/kZl/f5EsetSRx3oIdpHuWHHW6+WNGegweLar+WIg5r:sxZuk/fzFqsZl/f5Es4SRRZO4HbGerRt
TLSH
T19F62FA56AA3899778CD7D20AF555BF53D6F9147392940E44AAFCCB0C00E6AED6203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 1d1dc0c64a46d8096e655521c654da77d9fd134ab6fef597b39a3d68874c7799
MD5 fadaa2ce714d3fadfcbf54154757ea4c
SHA1 fd1aad922a6c62d157384f41a8f1dda5b7ab0ed4
SHA512 1f10da55eaff68ec7e2be505bbb47040a3645afed8857ef2848dc744a3504ed9e51357f3fd56d52be37f3a0efa87a7b2cee2e4d45b6094b8d7f94d90d97178ab
SSDEEP 768:JFs6pzFv7pLuLXx1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OV7+vhILlWwJNeV:JFs6pzFpEXx1WvxzWju1jaC+vhILIsNI
TLSH
T1BDF20C3B6C0CCB7E4F804E9CEC2A7E9A6DE8018B9698C99447FA441C03C66EF55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 92aad0504a22d78daceffd5e7965558ddb70ce5977aa3fec00361c4c72fe669a
MD5 77a6757a1d6d54f0acd3684eb5b21341
SHA1 8ecfed6ff611a3cee2a156b292ae0e5355659d87
SHA512 0c3798d0a862ad994657ec5fa6e23b122c6934c8f71f2b2845788da43555ad77ff0a45c15103dc9006362bdbc3dedd89bcf045b6ff2b52bdf02b4c7bf196380d
SSDEEP 96:KUAAKtePtYhM46SS+4iDlqY+KyLqO+2QYr+ofuVKKOAJ+IKHKS6eUKryT:iitYhM46SSPiDIYYLqOzQYr+ofdxXvM
TLSH
T1A9E1C45771BB42023C7E2A4C8794C7268E42B5633024A42B7FED01B65E67E209EFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58c3a9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58c3a9.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 670e252e2f01a4736976f383f48b32fa7f5ee9e1e73ef1c3d83604402a04c725
MD5 8b355a4a55c04cbbb096d2d96dfc1c0d
SHA1 2053f215083fe0cb9ce3174ff06688d4a33085b2
SHA512 27d0fef30bb24f744e73281b5c73d67de9e3c8b2f29242964aaf3c0bbbdaaa80e7ab09f94df6e5999b4bd1b0995f644bfce2a0b15b42575b718557af45dfa4c2
SSDEEP 384:nziF1tNnNnb92YsNC8TUNTUlIlHkdAWhH9DfYK9lOaaR33fhg2GlP7VW/:eF1jZbbrwg25iKvOaaR33f2lPJW/
TLSH
T18BD2A4F598E78976D9AE4B83A73E7D425EBCD163B4881980BBC85D0CCC871BFD206815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 183560e6c561a0a4d21cec4f31bc34e3a8b8a995633d2201b41d5bab0200f8b3
MD5 d263bfccafcd03a8f90412c4c990f20e
SHA1 c6fca127f7fa13a6785e82a8c56b36e99e28c2ed
SHA512 92023599e34509da9ee39f848a6cc9828fc8e308df44595f8479a073dc56822ca22934d51110d2a47627b9d26d88880ce65cf947e26d7c81b46c43a2cf4994dd
SSDEEP 192:qONy6O7+3hQmiUyLfGttb0cO2coGgGH26U6:qONy61YGt9lOa4W6U6
TLSH
T11C02E9356C686CB78EF2AE45F98727179FA9103BE9962F40D6E85E0C00D765C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 760d48a9308f9d32559186563280b68373a377947deb38e300c873d66aea149e
MD5 0a58b74f3a45a6b847be783338979725
SHA1 5f044d10eec3b1325ff994311d69b8588904d7e0
SHA512 6178d50f22d2aa6f0925135a7aa5091d3ff96e12728dde5a2ea23308373d402451b23415459a01fa2fac29d38ea07d568583a00c80b60898d2aa26425922806b
SSDEEP 384:n7tNnNnb9psNBUHkdAWAHa9lOaaR3cfhg2GlP7VW/:7jZbLio6vOaaR3cf2lPJW/
TLSH
T10B926C352D386CB39EB39952F91636536FB411B7D5842E81EADD9F0E00DB29C230792A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 3d6f8cd842e7b2d480c7aa6f70a0bf401a8fa331528fe4b04df36e79fbcd4380
MD5 302478335057f41d4852d1ef0535e750
SHA1 60879a8cbc5a14f929261f617c2af9a44ac5ed6c
SHA512 c84a43a05ace122aac5035673fbd4047c96bba2cd7bbd418b79455990b5a51850f04e639659c6c844d41eeac6c5fe764dba84a615f588b4ac35fe63d506deae1
SSDEEP 384:nNtNnNnb9psNBUmkdAeAHa9lOaaR3cfhg2GlP7VW/:NjZbLjw6vOaaR3cf2lPJW/
TLSH
T135926C352D386CB39EB39952F51636536FB411B7D5842E81EADD9F0E00DB29C230782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 92e7987ae8fe32b064b91b6fdebf592b852e044b60c48cb577febd46186e04b9
MD5 f6599a6bafcfc7ccf849324b2726091b
SHA1 14bd67a4ff5061dfb41d4a58e3de939b350a63bc
SHA512 33bace0925ebcaaa6f2eaaebefe3d677fdab56fef6a5594f1d4999c243736f0aaab9ac15ae7f621549c69ba1db61d3acc7aba392a9f2958f9b1d97ea28e766d2
SSDEEP 192:qON76O7+3kQmiUy4f1ttb0cO2coaR0EMcNV/5U6:qON762d1t9lOaaR3lfU6
TLSH
T1A412F935787C6CB75EF29D46F98726179FA8107BD9866E40D9E85E0C00CB69C2347C27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ffeda21f309e2366e8088d9dfd9fb12bbc7a000587cedec291044b3fb8cf44b5
MD5 e0b713127076a826de7ad38a1e486dbc
SHA1 83f2ed88b9c4ec3214e4af22c4827d58e3d97b0d
SHA512 df22d9a1b171c532c6a3e6c1d7c6f64d794df2617b0965800485203c7c401b104948a0e7e83a6d2aca5cd5e71cd13619be9fff756395dad4d4445f25925b404e
TLSH
T16F412C5C76ED1148B3B37E5A9BF6A86D443F78672E0A985D10110E4E4662A40D871733
MD5 SHA1 SHA512 TLSH

Submit Download

3fa00544-42fd-4163-a7ff-f8b5fc674b7c.tmp

Path C:\Users\Admin\AppData\Local\Temp\3fa00544-42fd-4163-a7ff-f8b5fc674b7c.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3ba46ad-73b8-40b3-9794-1268a3643eb8.tmp

Path C:\Users\Admin\AppData\Local\Temp\d3ba46ad-73b8-40b3-9794-1268a3643eb8.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir416_106704906\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

58d065cd-be06-4c71-869c-e0a2314b44e6.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir416_1156658517\58d065cd-be06-4c71-869c-e0a2314b44e6.tmp
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download