bffa5e256605e388b5fbfe8b6e34544fb20f072f5fe033083b66c6f7e867e015

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
20/06/2026, 18:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
L3/assets/load.html
Size 1KB
Sample260620-wtppzagt8r
SHA256 bffa5e256605e388b5fbfe8b6e34544fb20f072f5fe033083b66c6f7e867e015
MD5 bac3771d5a0f3513708fe223f84c5b2b
SHA1 751926fe65329ae8e8df116f780b4c7827a534ff
SHA512 98c984044ca23ab92449c425e53db907f86e5472178eaa2328417a17087705d3052ea8c1da609241100f35337e90bca795bb441e659c25fc1ff4109118b30c82
TLSH
T1902103493C835204BBAB626947FE790831679507350DCE18F8CCC3E49F95B6E912B5DD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2512	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134264527907911138"	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{0E047C27-B8A2-442D-8948-70E936B4E80E}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{2393B8DD-39AA-4603-9F2B-BC651ED86C59}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2280	msedge.exe
2280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe
3916	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 3916 wrote to memory of 3784	3916	msedge.exe	89
PID 3916 wrote to memory of 2512	3916	msedge.exe	90
PID 3916 wrote to memory of 1716	3916	msedge.exe	91
PID 3916 wrote to memory of 1716	3916	msedge.exe	91
PID 3916 wrote to memory of 1716	3916	msedge.exe	91
PID 3916 wrote to memory of 312	3916	msedge.exe	92
PID 3916 wrote to memory of 312	3916	msedge.exe	92
PID 3916 wrote to memory of 636	3916	msedge.exe	94
PID 3916 wrote to memory of 2400	3916	msedge.exe	95
PID 3916 wrote to memory of 636	3916	msedge.exe	94
PID 3916 wrote to memory of 636	3916	msedge.exe	94
PID 3916 wrote to memory of 2400	3916	msedge.exe	95
PID 3916 wrote to memory of 2400	3916	msedge.exe	95
PID 3916 wrote to memory of 3884	3916	msedge.exe	96
PID 3916 wrote to memory of 3884	3916	msedge.exe	96
PID 3916 wrote to memory of 3884	3916	msedge.exe	96
PID 3916 wrote to memory of 4800	3916	msedge.exe	97
PID 3916 wrote to memory of 4800	3916	msedge.exe	97
PID 3916 wrote to memory of 4800	3916	msedge.exe	97
PID 3916 wrote to memory of 3200	3916	msedge.exe	98
PID 3916 wrote to memory of 3200	3916	msedge.exe	98
PID 3916 wrote to memory of 3200	3916	msedge.exe	98
PID 3916 wrote to memory of 4872	3916	msedge.exe	102
PID 3916 wrote to memory of 4872	3916	msedge.exe	102
PID 3916 wrote to memory of 4872	3916	msedge.exe	102
PID 3916 wrote to memory of 4304	3916	msedge.exe	103
PID 3916 wrote to memory of 4320	3916	msedge.exe	104
PID 3916 wrote to memory of 4304	3916	msedge.exe	103
PID 3916 wrote to memory of 4320	3916	msedge.exe	104
PID 3916 wrote to memory of 4200	3916	msedge.exe	106
PID 3916 wrote to memory of 3732	3916	msedge.exe	108
PID 3916 wrote to memory of 3540	3916	msedge.exe	107
PID 3916 wrote to memory of 3732	3916	msedge.exe	108
PID 3916 wrote to memory of 656	3916	msedge.exe	109
PID 3916 wrote to memory of 656	3916	msedge.exe	109
PID 3916 wrote to memory of 656	3916	msedge.exe	109
PID 3916 wrote to memory of 2252	3916	msedge.exe	119
PID 3916 wrote to memory of 4904	3916	msedge.exe	120
PID 3916 wrote to memory of 1228	3916	msedge.exe	121
PID 3916 wrote to memory of 4128	3916	msedge.exe	123
PID 3916 wrote to memory of 4128	3916	msedge.exe	123
PID 3916 wrote to memory of 2280	3916	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\L3\assets\load.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffece17c188,0x7ffece17c194,0x7ffece17c1a0
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,15677544191499544909,11599696894608173021,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,1899862276468906335,13098666051926467397,262144 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,5370965651005024590,6249062288095287623,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,6197028557077265824,1889237233438435386,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,16597817832519597393,9775577444557460902,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4188,i,8687662673706138192,5165627991211514643,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,2227658364441557231,12538817414979955800,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5080,i,12821364202367216220,503446511349049987,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5236,i,14991369144079576621,11062587170914958716,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,14390136951706004348,775754535974494601,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,613423043792320163,2532098483543309826,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,9828966198317679891,13927956544439877297,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5788,i,9828966198317679891,13927956544439877297,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,14757172605128990900,11360461315990580569,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,15382607092203553594,10749983438708816633,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6240,i,1798070109947560793,18069282790093664016,2097152 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3688,i,101423530909183801,9501491073039423680,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:8
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,12232485527364876804,15712195524620585903,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6048,i,16368668912414255217,16696603623483553117,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,8840869530952419051,9048622516727645134,524288 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4824,i,17729350928462016487,6790721232667477698,262144 --field-trial-handle=2236,i,9522703870814783398,873394702789224937,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2280

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 2c2630944c75b48c3dd75be84a4cd6f24883d4d8ceabc946e867999c597deb4d
MD5 f4e719d208c46c3ce868f0932efc5ee6
SHA1 6aaf2651686f80748585d55fed3523f2beecd6a7
SHA512 806febcf56992099723c67ea9cb6a3cceede8f8be0820c58b2a5753b41ad21bcf5af7ddd68cb2b47b31d609f7b7981f77d93533f562c63d80b5d844e99c5c419
SSDEEP 96:+YPtko3jpzQiu83z6PrUTo5mWZ3J3StLy40HQwgJepz0uzL/1Fbr+q9YUenle5Ut:+YPj39zQiu83z6PrUTo5mWZ3J3StLy4F
TLSH
T1ABB1D95C14D2AB18CBD12730E5DE380AF7B1E26A35276DA39BCC84BCBF0675D496500E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58d992.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d992.TMP
Size 3KB
SHA256 4f9559198706aa745e5f4895c1233413ffbd426b7732b4a85afbdf0a1e8e2576
MD5 0b44fedb97f299d36d36087fe2aee080
SHA1 5f066e9148dec1e5b15c5f17c1820022cd105605
SHA512 8cc751cb129c82c9a85ddaa9b9f68918ce99ec637f5671d41423ac962064cda314db1eb67e17a4b9e2cf1c4e56825e321ea3d9210870ed0a30320634e69ac6fd
TLSH
T1AB71D81C05E26B05E7D23231E0DD7A0B3571E89A0A2BBDE59BC4C8BD5F0671D8E7100C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 7f6d793aae0f5e9e7cb7bcf4838be2768edba2bd3a57d86e4080b9a91b54b56c
MD5 f67c47acf1879fdd235e8968b0e5859e
SHA1 db4d90fa3de017aff536bf9706e732480c406fb1
SHA512 bacdc4d24bb6c6323c16219c3d27efe8b1420b6d0a916d47d9ec8452fea57b1ae8081dc9ed518dd4580e4969426ebd2fb15ba553dd7fe201b5b2d7061a1a1474
SSDEEP 192:DhSVHDRbi4ZMlJvhUj6xGtiSEQUhTFQVDlKwICpoVohy9HjZKOPE:DhSVHDRbi4ZMlJJUGxGtHEQU1FQVpKwT
TLSH
T1BBF19EF7C3F4862DE81126F46B647D1BCE6C0924472C396ACDD9AF8767E2461D280A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 94f7585fac24a30b6ed5543b084c57c9df0d06d43eda5e7ba3b0b019bf3191fa
MD5 59e018827b7dbab79b150c7aabb9e1a6
SHA1 851645b26038e34f2653ea8cedc9c5cfdd125bc5
SHA512 f7ad84e25656ce220f7a84734bacefb28465eea1b539b68af0ff1d00686973ba32d5bbe9531a3c77a4a95f01cc5d99081339b46cec117909157397460189bd22
SSDEEP 192:sxZJRnyM/jK1Ml8Mko/fbsH4zx3Idpye0gHW6+WNGYwKnvUIgrJ:sxZJpMo/fbsH4zxY1HbG99
TLSH
T17152F9126A34597BCCDBD209BA55BF53D6F50572E2900E48AAFCDA0C04E6FED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 62c61f42dd27a0b057bcb92e8fcac58c4d4d384e30abe24a5a60ec3e36d85597
MD5 990b9e33cb1750a54775de64206a14e5
SHA1 a8c741913b965935db2a84b148222fe3f839c22b
SHA512 f665bbc6bacaf3f655dfb3499c4e6e2325f949033b7cfd6e122926bd602c984a2d59031b70e848e062b114048844a4f639b2d93b7554acb1025931addabd0eaa
SSDEEP 192:sxZJRnyM/jK1Ml8UQfko/fbs7L4IEx3Idpse0gHW6+WNGYwibU86UIg57J:sxZJpqMo/fbs7L4IExYXHbGYbjH
TLSH
T1B252E9126A345977CCDBD209BA95BF53D6F50572E2900E44A9FCCA0C05E6FED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 57dbd8946874745ff9e89881b421992d867f92299fc61b3425990acaf47d3e86
MD5 f1eb04dde8242049371dc8404d57ed8f
SHA1 6b310426ed0e3bf0d12d6edc2386950ab9a63e84
SHA512 0c6bc30ebf70c22d437d2d5639455744165e57fe73ab8f117ecd23dc9b80c8cdd07267f6860502faa69f7525ddd6e8be2defae8e10336d47182d7083c50a8b30
SSDEEP 768:yn4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+d1rohHBc1aK:yn4jeXmWvmKLEu1jacPLZQdO967
TLSH
T108D20A3B284CCF7E4F845E5CEC26AE976ED802CB6A584D5047FA494C03C76EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 8b36359e9424f5a41fb154f7260304f39a16e18d15d930131ece242c51c1a487
MD5 7322a77b5189890f6e349a99460300f8
SHA1 e8b8eb97a96923969a78fd5133dc894479b91d0d
SHA512 64528ab907f0268e81ad9d738ee06d6b23fd7801ae67687208ddecf4ddede7795be790c3d71dad750cdcb51e42f90ab3eed414ef9bb6f6335706bbf906c553b3
SSDEEP 96:Kk8gKJ2C+DSKMk0ojs4sUk2WU79kO2KcTk42oGuzIunhTClBjRd/z:SzJZVK
TLSH
T15691734131B716412EBE250891E4B61A07C270B3716DA42B7FA944F6CE6BE660EFC5DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eea3a35f-dd40-4d9f-8ba8-fd893fe3a9f4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eea3a35f-dd40-4d9f-8ba8-fd893fe3a9f4.tmp
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5942ac.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5942ac.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 7a0995913753b0c766d30d702c5622efaaa384539bf91d569ab979ac5ddc9bc8
MD5 89ab2050798534c73e7ea0343afb7f6c
SHA1 93a290a60622cfd9102122ab600e63b9871ee139
SHA512 0b69abd8f5048c9aee5e61b01524e0b6bd442831ae901f610f666758a08913ed0f0274cab38e299e6fb49ec3cc8b256e009d992dc878af779a56fdd0946f843f
SSDEEP 384:utNn/s3n9SfsNCzpX2zBHT7f+w8kZyXH+2CFkAITGT0Iwx9i:uj+9U7WrbKHlUhi+0xvi
TLSH
T194928D335928EC678DE2A555F04B32274FF84167A5C57F84EAEC6F0C04CE6AC130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 8f9d60fbcc6100f79fdb9151f8b5a9fda50a182d77c790e8317d7ceff9fa9dda
MD5 5099c16c58dc98d44c46db54c95b94f8
SHA1 5d4d3ce843e63d41366955cf34438c66bc9af513
SHA512 c9569cfbf9b1128f3c60cf3b91d239631acef6abef52c2f5f610c3e3255da75f182eeb3a06f2139a26a3e3f310339655596fe0e0ee24a0538378bc078d28b121
SSDEEP 384:viF1tNn/s3n9SGzsNa8TUNTUlIl4pX2zBHm7f+w8kZyXH+2GFkAITGT0Iwx9i:6F1j+9Vjwg+DrbKHl4hi+0xvi
TLSH
T1CEC218F248D7983AD99E5B47B37E2D124EBCC167B4816A44B7D85A0CCC8A1BFC30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e2bdfa8f7e4617cf728d71a4f9ee31afafdcf6fc2780e4ec2c781fca13816f99
MD5 d43f25d218ff5a40e49716995f2763b9
SHA1 f425eb0ad287a3638f3154eb8841c01ffae71e56
SHA512 a91c60962bb44f97b4dabc2e61eaa55bccec326ec3c3259bbbf79040fb9adb7e0919ba1a5a093388eb368eb85a372395f9e868f9eef6a3ba87a11bb5ed9c0483
SSDEEP 192:EONp6hZ0QmiUyJJpc/+jV6jzorkZk5wOZvxU6:EONp6ospu+w8kZb2JU6
TLSH
T1EA02DA3568686CB78EE2AE45F48737235FE5112BEDA56F84DAEC1B1D00C769C2306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 10102d9674fdc30ebfd38288b84c0bef2352f0a4a910ec43b30e7bf3f8b2fa5f
MD5 79cb8ca8e5dabdd5e76e7ede787c97e1
SHA1 17b0e8ff808bd8547134b35bfc0ec8aeee54581f
SHA512 4694e22db88ec388233cb8caf06b01f975a7e98c5f78a0cdfb7d2414d1c9cecc86704016551d902fea236ed89b5416e2d3857130a98750f9f9300fd11512fc74
SSDEEP 192:fONL6hZKQmiUyFxJZc/+jV6jzorkZyXH+2A5cOqwq2AU6:fONL6yS3Zu+w8kZyXH+279kAU6
TLSH
T130120C36A868AC674DD1A555F09732234EF95227EEC57F84E5EC1F1C00DBAAC230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 bb31c479ef4f096a92dd7845bd4b8ef9dad4955a550fc2cfc41cf859363d9453
MD5 d65ed52dee09e51254c56325afa7de0b
SHA1 27e88f8d06779fc811bdbe0ca51a07873a207f81
SHA512 bdde51906fcf3686f23f2dc7e035d189df73a0a223dcf0ca7d0ca63f3d6630982e0c2744a0375226dcc48591e1bca6e03e99e05a7d016bf618df0da4d94e4522
SSDEEP 384:8tNn/s3n9SfsNC4pX2zBHT7f+w8kZyXH+2CFkAITGT0Iwx9i:8j+9UKWrbKHlUhi+0xvi
TLSH
T143928D335928EC678DD2A595F04B32274FF84167A6C57F84EAEC6F0C04CAAAC130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9d4f5b42-a0f4-48e0-9699-018a3c3080e3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9d4f5b42-a0f4-48e0-9699-018a3c3080e3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5e70d1eb358e43ff0e38588043915885914144f9c55595c167521def1027d92d
MD5 57028d0c72784aca50b0ec6e96c3b9f8
SHA1 6871e7e59e1a8659460d7cb051315bbed80dd679
SHA512 5326777e34c4b1996f6d0beb9ec8605b3cd060d097cb2e1ad6bed9c8b60da069e59a0ed40da0a640d015a9a2e4bb4d3b7c9b2d3f2fcc6a220a672bf47608191e
TLSH
T1FA412A58A6FA1148B3B77F5AAFF6686E547B7D672E0BE45D10010E4F0A26B40C871733
MD5 SHA1 SHA512 TLSH

Submit Download