40a255fb38b44289d297326cb47c31c2b222dad8c9fe3eee5dca756bc0dce387

Analysis

geolocation tags

eueuropelondonukunited-kingdom
max time kernel
900s
max time network
726s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
19/06/2026, 16:56

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
.html
Size 105KB
Sample260619-vf7syshy7n
SHA256 40a255fb38b44289d297326cb47c31c2b222dad8c9fe3eee5dca756bc0dce387
MD5 9298986218cb4621a49b3f32f2075580
SHA1 52569c931e2e6f73a9e87a54f2d58ab75647920d
SHA512 bfc5112259c88b8c02f4bf0a1cc6dbe2d4cd299d8c022ece2bcfe55e3be645d76cd1c629e11cb774b8ea4b70eb14e105664992a524a9602b44f25ff8f6df4daf
SSDEEP 1536:bvdIFUFIoWijnPeYIIcEy+p3zMPIIeFXhT9Eu7EIIelGumFseXW69Eco:bz3QW3GXFsau
TLSH
T18DB3E77171A420363563C8DA766A5F6F3650F407E80B4294BAACA1C44FDBEE2DD3369C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2732	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134263618460633718"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-889581200-2041691093-2048517887-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-889581200-2041691093-2048517887-1000\{7E6EDFD7-133B-404B-9F56-58B63C65E939}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1796	msedge.exe
1796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe
732	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 732 wrote to memory of 4772	732	msedge.exe	84
PID 732 wrote to memory of 2732	732	msedge.exe	85
PID 732 wrote to memory of 2056	732	msedge.exe	86
PID 732 wrote to memory of 2056	732	msedge.exe	86
PID 732 wrote to memory of 2056	732	msedge.exe	86
PID 732 wrote to memory of 4048	732	msedge.exe	87
PID 732 wrote to memory of 4048	732	msedge.exe	87
PID 732 wrote to memory of 3176	732	msedge.exe	88
PID 732 wrote to memory of 3176	732	msedge.exe	88
PID 732 wrote to memory of 3176	732	msedge.exe	88
PID 732 wrote to memory of 2140	732	msedge.exe	89
PID 732 wrote to memory of 2140	732	msedge.exe	89
PID 732 wrote to memory of 2140	732	msedge.exe	89
PID 732 wrote to memory of 992	732	msedge.exe	91
PID 732 wrote to memory of 992	732	msedge.exe	91
PID 732 wrote to memory of 992	732	msedge.exe	91
PID 732 wrote to memory of 2080	732	msedge.exe	92
PID 732 wrote to memory of 2080	732	msedge.exe	92
PID 732 wrote to memory of 2080	732	msedge.exe	92
PID 732 wrote to memory of 1116	732	msedge.exe	97
PID 732 wrote to memory of 1116	732	msedge.exe	97
PID 732 wrote to memory of 1192	732	msedge.exe	98
PID 732 wrote to memory of 1192	732	msedge.exe	98
PID 732 wrote to memory of 4648	732	msedge.exe	100
PID 732 wrote to memory of 2680	732	msedge.exe	120
PID 732 wrote to memory of 5100	732	msedge.exe	121
PID 732 wrote to memory of 3960	732	msedge.exe	122
PID 732 wrote to memory of 1456	732	msedge.exe	124
PID 732 wrote to memory of 1456	732	msedge.exe	124
PID 732 wrote to memory of 1796	732	msedge.exe	128
PID 732 wrote to memory of 3936	732	msedge.exe	129
PID 732 wrote to memory of 2724	732	msedge.exe	130
PID 732 wrote to memory of 3936	732	msedge.exe	129
PID 732 wrote to memory of 2724	732	msedge.exe	130
PID 732 wrote to memory of 4600	732	msedge.exe	131
PID 732 wrote to memory of 4600	732	msedge.exe	131
PID 732 wrote to memory of 2436	732	msedge.exe	132
PID 732 wrote to memory of 2436	732	msedge.exe	132
PID 732 wrote to memory of 4560	732	msedge.exe	142
PID 732 wrote to memory of 4560	732	msedge.exe	142

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd397cc188,0x7ffd397cc194,0x7ffd397cc1a0
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,5488120468453253244,9755696962974808329,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1880,i,1781485615747209352,13954610342148148207,262144 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,4032788565992497634,9741599953412903928,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,9579652419660315719,16777498756816749809,2097152 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16151787853621029942,12968894208520935518,2097152 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,14848140237143336124,5949727028126763726,2097152 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,1702139300270558499,1060811851224928347,2097152 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:2
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,17069858302834954480,8973605286644124695,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,15645656440617751232,10851311210685234315,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7339850173088812644,14028941629605914043,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,7339850173088812644,14028941629605914043,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,4922714679614800289,8652227235848178173,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,9429234225670541414,11123782919877742403,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4236,i,3540143428935774465,3421286651822070913,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,5498180694307480921,9404571346459476271,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6272,i,8944121531028270423,9870888628405237122,262144 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4920 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,3563572623785104358,5126874092683317135,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,8488920468660907641,10157902501934861570,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=3996 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,11671938639494611056,10706206037893574703,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3980,i,6515634292837851406,9195732376697598424,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4188,i,2139602706848409424,9096209064724180764,524288 --field-trial-handle=2264,i,18280579379874841214,2501381288373570874,262144 --variations-seed-version --mojo-platform-channel-handle=5804 /prefetch:8
  2⤵
  PID:4560

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5024

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 11d3c4c52f9fc9cd2b10a22b48769759f994fd6364f9a0fc145f4cd2c2a22e9d
MD5 4751cf705a737c4226029624bf43b9a8
SHA1 fd8cf726ee3f8f75b97147829de5553530caa82c
SHA512 46e3fedbf7fa14bdc2b3aad129f2879a9d24252f5d7bd9b55766bc32a6b82ea77aaf193bcdbdf4423e3b67ef84955e589b6077609344091ef72204c1d50b0dab
TLSH
T17ED09B307A58A58BD14360F1A4114B4115375557205397757521508E9E98055B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 701082e4ac35f878dc5ff6eb27989aae9d20d9b5662643e20b3acd1720b367fc
MD5 2b3686986ce1fd99f079eb226e8b0a8b
SHA1 0d2cdee36351378b91ed7f6ecdb43457fe4d7b5d
SHA512 937da61c495fd21a02bb76a63556dec83ce132f1d1830ff8d9af6212d15f1844766dd4abadd15ea61b48f8ae03b52baca44c99117714c705da840dbff8f116dd
TLSH
T182D09B303A58A98BD54360F1A4104B41153755572053D7757521508E9E99095B3CA057
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 3.0MB
SHA256 33268ff882e78bb8c168c3c474ccdb8ae4dc5d53b69d5a0189d0a851910087a6
MD5 61405f75d5a4ed957331ee2a26431f3b
SHA1 6ccc39fac8bac2dbc120738263d19763aa29cfaf
SHA512 caf2d12d7e1af6a98f3eb914112363ec5bbb4cfa9b017139f32e7e0753624054aaf5745f3e36905d41d79cac20339c81825b703e933ebd29c10c19c83c6ffc6d
SSDEEP 24576:SlEm8iG7YUJEE63tKBDk75bfQr0EZUKZEB3tKBck75TtFCo5:SlZz9UIf6nUCtFCo5
TLSH
T100E5438AC5A3BAFF02257C77A836B4DD666807D34190FD3B6EFC857E93999A84403350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 6c6718bedced44402a6b450e4fe1ad3cc85c5c6dd6b90cfe4c297c48383bc049
MD5 6799794ffba2fba04e1895c5717bb6fd
SHA1 cc5103bc4b2cfd093503c580e2dddafd67d9ba62
SHA512 29e7df5b1ed37f889950f8ce5cd8c0f68c3ace0c031f4bb1d74c4ef3eff079b02f8226600b6ce27a68de795993338065e936f39b770e28042d62a0e209e7cf45
SSDEEP 192:WjkxjYVoz00000GG88888bbb6p33WWVVVVVcLO:WjkxjYVoz00000GG88888bbb6p33WWV1
TLSH
T107E17F0782D9DBAA9F0A208A4B70625D41703B0DEFDDD94903DC8DED348DA9EA4F1696
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 7KB
SHA256 06348c76da1fff39d0df8e804ce4895afd33f21ba0c0d1483ecba6db3551c28f
MD5 31653215328a6c67df79360ccdc90330
SHA1 f0facf2a0ffde586f97e35b53be8ff6e998ad03f
SHA512 f14dd3a5dd082c7e9e565219f13b0151deef93d7290fe671cede565d621eb95ae2887cb3e5163aa9e09ababd8f107d91cded80113baa9c4275f405f60acd50ec
SSDEEP 192:Wjjr6kdddEEEDDDDDaaaaVVVVVOOOOH444Rhh:Wjjr6kdddEEEDDDDDaaaaVVVVVOOOOHe
TLSH
T1FFE17A4B82D5DE9A8F0B108A4AB0725C54713B0EEFEDD50C53DC8DDD304E99EA8E1B96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 537B
SHA256 2d640431176864fe60dd8678b07870a7a75921852dc80f32255a1c1e33ac3fd8
MD5 107279cd8e47a301df55c9fbd25da6ae
SHA1 fc1eebbc85f95db032d28f1d317cddc4c3a1ca40
SHA512 96494af7da6f1ba2746a6cf85b600553ff362ec1a9371e6c017e8edccf4aed858f1756d3f0ea7ed62c176354c6fc5c4ca70fe2233aa2e04738974f7e59fa6204
TLSH
T107F050894AC9D76ED38C614743B8D38C91B03B4FD7CAA95F170448C47001495B6E77DD
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 c1edc9908726c9039af7191ba02e748d227c3c02e509d6d9617f047aae0fee93
MD5 27072ec0eac440e93e919e061c899519
SHA1 3b8d369bc8ea42270d36176a3a50405e9877f0b3
SHA512 1ed680b2aa3fbb8e235e61cbd34932cb07652b9a0e50090e16bed0c1452398c85c73ed17234b0cc4ea04d780efe80a73feacee3cd20589d00e2c8dce97ede647
TLSH
T133C08CEABA889C5EDBD16BFE1A65B4400B8412E2D81E8F030119BE8130989F02E25030
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3d9cead08be7cb7d53f0795944528c8671507615f970a9f77ea5dcebc75fced5
MD5 b2df2f98074148693a4061d2e4ab705c
SHA1 d1fe72c520548d36831932a8ddb0913675d8e181
SHA512 f0f78b7ecf72fb18db9b7d970e3f64a7127968a093d26db7e906ae865021f76edfbacdbba8ebf1e62b9faddcfa226393ca51630eda6d7de406c7ea247c619f22
TLSH
T1F7516C2883B20881E37C1571A3E2173EF07E809A3AE7EE1646900DFD691EB36743F159
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58d954.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d954.TMP
Size 2KB
SHA256 b450fe7607ea1b9e6dc067be92e4f358a9fad82e220b83e3486939b781b283b4
MD5 5d4412c16975c477f2ec633c85a32ec5
SHA1 a058202535c8d252b5596f592f673c4ad39114a8
SHA512 1b8130de10f8c3d25c9d0a21746a1bf28c5dd0eb2164f6c5b7ceb83727531f0d0433aa946a52599e6c554a314e35d857a7716affa407ef6bc2628d855100f0a5
TLSH
T17B516C2883720881E37C1571A3E1133DF07E949A3AE7EE1646900DFD691EB36783F159
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 12d53c008cb6c8b03086c59d4d98082ec21f70229661adbb3e2edb3ec8ea3347
MD5 d931830e39be4b3ca4f6a65fcbfe2eec
SHA1 3dc3c7286aa667a548e75a3de0d264bd018c5120
SHA512 e44b0ac2261666374e18e54144873d02e6e2abb0c7145a36392e78e157b173f8592381a517642289d639270565bc375d6d53fe92d500dd7f1e0dc6e724ece704
TLSH
T1DC217DB7C3D4867D891112F0AA297E27CD1D055693683C5689F4AF4FA3E14B4E10155F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 b22f4a71188ab0059d4e97e5d4132377a61613cf47fb7585cdcd1581ffa68d03
MD5 ed0e83d6d69b11fbdb48177cee76221a
SHA1 5357de48f1242fb54617de2111faa7c36fbfa3d5
SHA512 d8084390ce9e73d23f4ebdc82895a3b1aa6338f1a977ece3e45abeef658947a78aaa267bd705a1ed486839e84525bb3f510e6a01b34bce3ec9b205b14069056a
TLSH
T1262190B783D486BED91112F0AA297E27CD1D0556522C3C56C9F4EF4FA3E24B0D101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 51098bbf2f6c13ae4169e4f382b45f306bf191578b23442e471f5afca44f6fd1
MD5 266421b431e9e468b65a5473ae48dfd4
SHA1 df7eaa3f44b09346b96b6120a9f831c5273ef7a0
SHA512 9e8a54c70a880d52e8378bb5d5a87561b1d723526c0cf00a58098deaa483350dc616354bcfec42e596c61e0f90b9f8498778aa0fbd06bd3a9526cc75083b76b8
SSDEEP 192:sxZbR7yM/jK1Ml8MkU/f5sQHlBOIdpdEHW6+WNGY9IKY7HIgrJ:sxZblMU/f5s8lx+HbGf9
TLSH
T14042E912AA349977CCDBD20DFA55BF53D6F50572A2900D44A9FCCA0C04E6EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d63f2da23d12819e488393b406aaf7836149283c1428c78e9d81cd2d6a2236a4
MD5 231462278a574d8cce099fbb09848d18
SHA1 b87df38c6d454cf8d16e3b266b20e4f1f02f116c
SHA512 473669658ca7ec35e7cec89ac79b8021abfc6ec48430d6ecfe9f16332d9ad54fd2bac6bf0da644209af1fa7781e7f48a1b630c356e765c7b566b6b83819c79e9
SSDEEP 192:sxZbR7yM/jK1Ml8UQCkU/f5sGH6BOIdpHEHW6+WNGY9IE77HIg5TJ:sxZblqBU/f5su6xkHbGaL
TLSH
T11952D812AA345977CCDBD20DFA55BF53D6F94472A2940E44A9FCCA0C04E6EED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 936b11eaabe9c8f65079230f87ad2b77bed01ee7ee5b80f74c36d91363510e79
MD5 0948c5ca98029fb32aecc8ddb79dd12f
SHA1 ce832c5027f7b9127d524345780f157c0bdfc938
SHA512 b57aa01321440cb6b9cbe52b6638a6c8a67d0ca500cc527e8ccf7451ef7fdaf312b3f4cdb3ff701d5735da633b7e336f6e39189edc014ecce01b33321353f0a5
SSDEEP 192:sxZbR7yMqZjK1Ml8UQCkU/f5sGH6BOIdpHEHW6+WNGY9IE774Ig5TJ:sxZbUqBU/f5su6xkHbGxL
TLSH
T18E52C812AA345977CCDBD21DFA55BF53D6F90472A2900E44AAFCCA0C04E6EDD221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 2f78bc9fc7891217c46b8022e78607823164175ea36e8e764bea16847779ca29
MD5 3181f61d4b133694b727d2cdf6006df9
SHA1 032167c4cd30a7646ba46442066b03eb44c2fa86
SHA512 de9cd3e5560bd37230541972925116557ec00cff3f13b56835645ac260c2928db29a350721d2b53d2e79ba2103982844507dcaa264834791ce5aa4a030a0aede
SSDEEP 768:E5cv21wWvu+Z+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVjFLlwmWN3roAg61:E5cv21wWvu+Z+u1jaeFLeRNkAF
TLSH
T18ED20A2B280CCB7E0F845E9CED2AAF8A6DD801CB57988D5447FA484C03C77EB511B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8022524-60c5-4fe5-9162-aa67fcc6eaf0\index-dir\the-real-index
Size 504B
SHA256 652d5098ee189bc5ef1d5301696c0b6d1138d1b8d8dda50054340c67e46aa199
MD5 406dc065181ed9d1d1f4bca149e93448
SHA1 3cb88e8845e609170c358bf747dc0b30aa0b53ae
SHA512 0c9791f9375526393f8b0637c280f33aabd5a30abf951bb2712bc31272a1a5cdaff457c7620740f65ccb35454b48b2443fe44256ae81f18e3ba7f592e6b86123
TLSH
T134F068255E800C2AE96006BB26F69968B27149DCA334D867582C556A6D6538831661DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d229e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8022524-60c5-4fe5-9162-aa67fcc6eaf0\index-dir\the-real-index~RFe5d229e.TMP
Size 504B
SHA256 97da47e17318162040d6f1c7c59814e44d23423e4dd3ca1da812a42d27ad6143
MD5 24cf72fa3b842cdfefe10f16983c330b
SHA1 45432602885dabe919060e6daf18772d4e7a60c3
SHA512 3a667ff21a9781345af3bdc6a2dfa9fd264b61a5d0ec21d66b58683451d5ff94a10cc79433bbac57c42040d09222bd48b95c95971d580d508d375c7441cb3680
TLSH
T1E1F0C05587C10D02E45001BF3EB6A8ADE2204C409261F6A3252DA46E6C35AC81A120CC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 f53d43a4836d79c0c064e002c96a9359582615326022051ec977d6f9dc023615
MD5 d3d03834a2a854e83a58247d5fb070fd
SHA1 deca2e35a7fe825432f7f04b4dd42763e327c1af
SHA512 56aad69223cdb6413c690a19ce5bc9dc8aacd7c45a07a0137ff83ecd4e782f040d10a3764650c4940a872bf7ae22abbcfe320d90e8b0c40ea65bfb59a04cb445
TLSH
T175E068B77DE32810E8BBC3D958B254940400389981046C8E001AA6C700F236D344ACA1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 14439bd2100e90f4824711c5109c31091b32b0ceccebf57d8a6b28a57cc01361
MD5 25f7343f5923445f53f1ec1ae10b8950
SHA1 21afa5db7f244ee1259a04c0a4d68c4908b69540
SHA512 e0817bf52ef5d433cadc94224f1a9383f00972f416b3b4ab9e4fba262bd26accffe8c16a86f4aa543fa220d65380945120bec1c0db5d388c93903e8ad21de2b3
SSDEEP 96:KaRklRnHnqlPKZThqKLfTzqHxJSrBD+1eKe0CGTeKwc8:mTJlhT
TLSH
T125915401B13B1641397E684DABA5863A4F4771B37819B4AF7BB800A15E2BE111DFF8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe597555.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe597555.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e0c6d7dbec192ad4b899ceada14ed83c3107a0ddaeda253b834b895a956b615b
MD5 d441d3415b5a5038f2d955a644317c77
SHA1 d220154b0e0de21adf8e7ea0799c3cdd9e7bfa03
SHA512 fbc07efbeff5595a65ace6f9af0f09ad748d7753f8203f260b2efbc8f3d17dbe7984ff9b831c1048910e4c7a0c1b251d05f82a7ba06986e84a289ed6840dfd00
SSDEEP 192:uDLsNnDQPUdw+YLegbQmiU1JcV4e+CGN+FdeX9oIHSJrZxdSJibGq9U8:IsNnDGUmzio8Ke+CTdIe9Jr1bxU8
TLSH
T171320835AC745C6B5AA2A644F44736139FB84177EAC93F84D6EC5F0C01DF6EC130A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ac84c9ab8bcf0eb14d62c6ee8e79b349888cae63a741828260473838faeac112
MD5 b8e1b72e9d78e2b27567ea1e94e2a34d
SHA1 d06d849e46bb8d86bd650a9e75a89afa1b6e2a4f
SHA512 1be752e1112b9194c464aa8108aa74d2d11ca640356d7a25896e549b0e1f351e3eeeed01c5060efb107a180222ae75a96288318b7ce9d1db7e53a4a1b91d236d
SSDEEP 384:GiF1tNn/s3n9S6zsN58TUNTUlIlAGUmzio8Ke+CTdIe9JrwbxITGT0ISx9/:tF1j+9tMwg32NrV9hwbxi+0Dv/
TLSH
T182A26C339D648D6F9EA29A85F50A32174FB441B7D5C27E95E6DC9E0C00DB2EC130BD19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b63143fac04d735bb30ced10d7b5527ed2376756cbde6c4adf465ce73313d56c
MD5 9f381e75f6f8ded88cbefbc489a601fa
SHA1 8b8607b2710fc11990bfda5144700bf03d3d57e9
SHA512 792d610e0297254cc9a4569cc985efda9b8a0a1a50c5c35b381e3839ba6fd1284ba256dcb6da6bfd5daca32206e703db27141ee910d3afef759bf149580c2669
SSDEEP 192:uRLsNnnQPUdw+YLegbQmiU1JcV4e+CGN+FdeX9oIHSJrZxdSJibGq9SSqJ6VHZ:isNnnGUmzio8Ke+CTdIe9Jr1bxFqJo5
TLSH
T108521936AC744C6B5AA69645F04735035FB881B7EAC92F84D6EC9F0D01DF6EC130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f5481b762ac3912984e4afc2a75472d774fa614571a91f850d3058e0e0ca5572
MD5 a26ea3fd515ee5084330ee280f6fc193
SHA1 baabd00456388ccb14bb98d5224c22878e87249f
SHA512 29de6d9dae5d69544202dc5de9e0ef5b9fb489e14f067909ae056d6f54abd68d7006b24b2b5111007e9d46b6ae448407d3db5e570aa056ba32404e4aa54df408
SSDEEP 192:JONr6v+YLNQmiUylMZh+CGN+FdeX9oEusbtiU6:JONr6vz/vZh+CTdIe6bYU6
TLSH
T15902EA35AD781CBB9FF2AE45F48776135FA81177EA952F80D9E81F0C01D765C2302826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 500a710e52d3a99faae7b629f9f404096e36be0c209895840b8c1889a485769c
MD5 5852a194ddb7b724ed7e8157535a9da8
SHA1 91c752892351fbfb27c82ed5a34746fa832d3a8f
SHA512 c313fe369bcac8a5a4f7782fa6ba29194f0d085fd58eb8d104d75aa3dfa4afe70d289e97d7a756822192df22288dc55051ad544eeeb0ab1c152f8dcfbdf7201a
SSDEEP 192:cONy6v+YLZQmiUy1MWh+CGN+FdeX9oIHSJrZxuCHbGq9U6:cONy6vz71Wh+CTdIe9JrbbxU6
TLSH
T101121A35AC785C6B5EE2A945F48735139EA85177EB8A3F80D5EC5F0C01EF6AC1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 c9efc6ffb0235d5b8bb525c660338c3438c5499a94bed6801cac25e731d480bf
MD5 9de3d459c3ddb917fb04c9fce27caeba
SHA1 0afbad01d2dca913a2c608c7af275dba23867dcc
SHA512 66ce0e75398ecb8885950bed0f16685299d640790140c5c1488bbd6b1ef45730a19a9ada523678e6f99b3c17fe8c45fae710d945e30d0f33d14cbe4904acd166
TLSH
T156411458B6E91148B3B76E4A9FFBA86D847BB8772F06C55E00110D4F0A22B00D8A1B33
MD5 SHA1 SHA512 TLSH

Submit Download