bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Resubmissions

22/06/2026, 17:09

260622-vpdw8sey2y7

22/06/2026, 15:22

260622-sr14fady5m8

Analysis

max time kernel
598s
max time network
430s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/06/2026, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260622-sr14fady5m
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4020	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134266155964985089"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{A6D1F81A-9C32-44C8-A3FA-97B2D8C040BC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4576	msedge.exe
4576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe
4328	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 4328 wrote to memory of 2184	4328	msedge.exe	87
PID 4328 wrote to memory of 3788	4328	msedge.exe	88
PID 4328 wrote to memory of 4020	4328	msedge.exe	89
PID 4328 wrote to memory of 3788	4328	msedge.exe	88
PID 4328 wrote to memory of 3788	4328	msedge.exe	88
PID 4328 wrote to memory of 4040	4328	msedge.exe	90
PID 4328 wrote to memory of 4040	4328	msedge.exe	90
PID 4328 wrote to memory of 1132	4328	msedge.exe	92
PID 4328 wrote to memory of 1132	4328	msedge.exe	92
PID 4328 wrote to memory of 1132	4328	msedge.exe	92
PID 4328 wrote to memory of 392	4328	msedge.exe	93
PID 4328 wrote to memory of 392	4328	msedge.exe	93
PID 4328 wrote to memory of 392	4328	msedge.exe	93
PID 4328 wrote to memory of 1080	4328	msedge.exe	94
PID 4328 wrote to memory of 1080	4328	msedge.exe	94
PID 4328 wrote to memory of 1080	4328	msedge.exe	94
PID 4328 wrote to memory of 4888	4328	msedge.exe	95
PID 4328 wrote to memory of 4888	4328	msedge.exe	95
PID 4328 wrote to memory of 4888	4328	msedge.exe	95
PID 4328 wrote to memory of 4208	4328	msedge.exe	98
PID 4328 wrote to memory of 3508	4328	msedge.exe	99
PID 4328 wrote to memory of 4208	4328	msedge.exe	98
PID 4328 wrote to memory of 3508	4328	msedge.exe	99
PID 4328 wrote to memory of 1152	4328	msedge.exe	101
PID 4328 wrote to memory of 3540	4328	msedge.exe	110
PID 4328 wrote to memory of 3588	4328	msedge.exe	111
PID 4328 wrote to memory of 3944	4328	msedge.exe	112
PID 4328 wrote to memory of 4616	4328	msedge.exe	114
PID 4328 wrote to memory of 4616	4328	msedge.exe	114
PID 4328 wrote to memory of 4576	4328	msedge.exe	115
PID 4328 wrote to memory of 4124	4328	msedge.exe	116
PID 4328 wrote to memory of 4124	4328	msedge.exe	116
PID 4328 wrote to memory of 2412	4328	msedge.exe	117
PID 4328 wrote to memory of 2412	4328	msedge.exe	117
PID 4328 wrote to memory of 4628	4328	msedge.exe	118
PID 4328 wrote to memory of 4628	4328	msedge.exe	118
PID 4328 wrote to memory of 3028	4328	msedge.exe	119
PID 4328 wrote to memory of 3028	4328	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7fff026dc188,0x7fff026dc194,0x7fff026dc1a0
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1668,i,12168161255701433038,17989793366672803771,262144 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1644,i,9080874160594950261,18127645454205578776,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,1470673037550287,7232946784116995865,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,2609216569968035069,11783570772760979306,2097152 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,1140238649504252407,13311251214994531172,2097152 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,9066044892105160118,424428528558030535,2097152 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,9681347818369938323,9539763304876487379,2097152 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4608,i,11843132145525144204,765807200798588890,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,7218266581248168643,17267973550335953233,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,5352606868075085555,16358858015589827888,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,5352606868075085555,16358858015589827888,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,8180292759629602358,15598642554273867775,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:8
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,15543572754819830404,13082236654657488149,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4516 /prefetch:8
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,9504908234920939956,3615965852244762031,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,503121775799447476,13985764839441444055,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5532,i,17242574818913950205,10095213107271152249,262144 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,14967651685714631898,10275671355950601219,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:8
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,9386822247330475109,7063929548861123667,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,10161407964579367280,11243116300443110946,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3820,i,11887065158863416073,12290033221742526796,524288 --field-trial-handle=2276,i,9081517181797261017,3343375390274615161,262144 --variations-seed-version --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:3028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3664

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 917106a47795c961bc8db95d06cdbc6712b08b0d37d0f56fbdb73c26c73e1fcd
MD5 1063e904d4b87f605a018cd993127084
SHA1 3fa9a30659782b485e1ae3219995ba78dfb132f4
SHA512 d6710f4eebc22b5fe43f1c5e11b3425c3694b3dc9f73ade195fd4f11ce6a6063ba134775a6e1b8a6d69ed4fae67a64f368806ffac335771a4f8b01586264743d
TLSH
T1AAE0D8ECD68AF376710894CA8C6C72DDA6A0611BE5CDD8FEBA04B284198350263A44D2
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 01828dcb6ac9be781fb44b86d53af026feff2e741d6154d9b8b5c3b1ea476f91
MD5 53a430d58c192d38aa5d134ef8471227
SHA1 d4f1b0217517c111e8775b54efe276ee88cd25f1
SHA512 3733a85c27ffe5e57aaf72135cdce2642e6559e419a3e2e7d0da0e2cf5224c81a858c1c38bce48d9ffe77b911d5ab31c49ec041b2ce2ca468ba984581170d7a8
TLSH
T1F17127340572C3B1E7EA02B29DD72FCD34724CF9F51B6E933890D8B6A6A8F14464514B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5843da.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5843da.TMP
Size 3KB
SHA256 647d3c52edc1fdae98880f959b9d6e12604e3ec301fe8f36035d3609fd6c0bc3
MD5 b4d35e5601a92234c7dbfdabcd33c64d
SHA1 983da526a67c9ffeaab49a8766a606be0169bf1a
SHA512 878bdbee84ac9d855e16211d676bdc990429510ea0e1d7f231d928381e4d2a551f28b599f1f44ac654037fb55d598cdb22c214845038760093afc84cd978a013
TLSH
T1D77127350972C3B0E7AA02B1ADD72FCD34B24CF9F51B6E933890D8B6A6A8F14464514B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 815B
SHA256 1f705e7d72c0ab953e82d122d3e749d953dac14472886813cbff1e18f8d42892
MD5 37f3c4a15006556a8469b6f5b9a32e2c
SHA1 5559af3b4130ebc8eaea251cf62bc588aaba43a3
SHA512 db91c565aa289c9371583cee0c0c4b5d57f68b68d33c599dda562e48769015c92e5813c4caadd5f74af0ac1585d75fe294709930e9f9029cc39355390ecb3ca4
TLSH
T1D00189B3C7D985AE890117F06A24AE27CE2D0A0583287C19C9E4EF6B83E2475E50146F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 832B
SHA256 ef5ed8f3051ba9c096b02922bfcbe1bbe18431adcce41d85fb82048d8a6b8d44
MD5 51419005525ccea7f4d9ba792b8d472e
SHA1 e2ca35599a2d69da1a7114a05bd26c3ce18bb540
SHA512 8b19e7c92dbee746745beb085c7e9e942d45082e5d85e71258ffe95313798dba470889e73c2007d8ed511e39316f890aa7e4040adb93090a4909dff57316d33f
TLSH
T13B01ABF3C7E582AEC91116F06A28FE2BCE2D090142187C1985D4EF6BC3E2075E10295B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 323f9505f45e2b5bcbac456c136aadd58e424aa4e94f84fac63ad7ab01ac193c
MD5 feb15d68144f99a6d141428817ff8699
SHA1 d07c2fc8022d3b9e3f4943b9e524f4ce6231607d
SHA512 fee0f2ace8d76c6410094a20d714023968b73ab1e8c75cf7c0d51b0bb91b1a545ede7bc6ddf545ba36f082a7bd51586d0f129b8fe8945aae073e95d63b16ae1e
SSDEEP 192:sxZYbR7yM/jK1Ml8MkVm/fjs3YmMIdpdvHW6+WNGYCk/DH+IgrJ:sxZYblMVm/fjs3YmVFHbGWW9
TLSH
T10742EA516A349977CCCBD209FA417F53D6F91473A2940E48AAFCDA1C04E6AED2217C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d54d58f5b9bc6eddc18297ace5457fa767c875ba30e706579cda2cf293c09886
MD5 47445e46e1ae5723b77be2c2a3cde849
SHA1 6cb259e0950593d576c9fb5d76029845ef08247e
SHA512 40f804b270bc209f7be4cc9a95226b96d8f4625cf951a5055b4fe82c8f5bce4a1f6ac1e485f959b665610c4440c745de8f433f2945499d151f6ee676d47d97bf
SSDEEP 192:sxZYbR7yM/jK1Ml8UQlkVm/fjswaQmMIdpHvHW6+WNGYCScEH+Ig5CJ:sxZYblquVm/fjswaQmVPHbGKWE
TLSH
T1CE52E8566A349977CCDBD209F9417F53D6F90473A2940E48AAFCCA1C00E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b86e94c9fa100e51d14ea1b1749380ccaf1b5c7b37f7b5cdc228cfcd51c7f7b1
MD5 4d418e9c6d2c44045c0c6db0ff34dd41
SHA1 c78b70a2eaf784ac684d12d66b13ff4203a96d84
SHA512 037e7585e96ea04b15878f190e9a4ad9ff5ef211929affb29d5b6edadcb324f6e6a3f9cb33899665788e0ff4282a827364f6ab16caeb48b7ab7a8e5088255c5d
SSDEEP 192:sxZYbR7yMqZjK1Ml8UQlkVm/fjswaQmMIdpHvHW6+WNGYCScEHnIg5CJ:sxZYbUquVm/fjswaQmVPHbGKHE
TLSH
T1B552D8566A349977CCDBD209FA457F53D6F90473A2900E48AAFCDA1C04E6ADD2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 53d4611c0d1ec3a6c5bcc642528d0b57fb58f649e7303683f58c0615eb4a91dc
MD5 ea71a7e4bfd52b737eca0834ed225905
SHA1 6c1f398a31b0fc9777010aa0495d4ecf46c015a2
SHA512 ce2ce02c6972f1ef593bf461df98bcf05b19d02f54e22c6a3f2427caf8d11c5f27860ac321e2ae01f997e25fe448b58672356c1b667e1911596fc15ca1a45365
SSDEEP 768:/I8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVoro4:/I8bqn+WvSCt6u1jaCZLbWVT4
TLSH
T16FD20A3B280CCB7E4F845E5DEC26AF962DD801CB6B988D4447FA894C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
Size 1KB
SHA256 6605dff8ea88066cd22837bfad54135ebbb5b42aa2dda61e4e0ec2b0dd25a255
MD5 a2da9db245b25e6d58fe7c219d762b2a
SHA1 83014e7f1f4a57c60161799bd13b66544a8f4b52
SHA512 8fb6b58b09b5b94937564c43c12e1a299bed4daeba635cd3acba634b7f0c5af1b3d3f701773546142321628b35c2d7d972de604038050892363153a32df4f39f
TLSH
T12B2194494EE08D1FF95844771573B4E473708EDC9711E763287C22721E2234E2A4B2DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c916a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5c916a.TMP
Size 1KB
SHA256 46f32636710450e997deb23a34e15e8e845c723c050389c71629ae8fa8cc3094
MD5 9869a093ccb775bae14d0c278cbca5a1
SHA1 bf70de874afb2be5d6ffd26c6d79293ea629550f
SHA512 0807387657dcc44085c74f32ffa2f2971f9c11452379c8922906dbac675008a1d23e5d4e05f301a55bc3d1bfa10ecdbca5d62a3d3f992cfe2fabee269841234e
TLSH
T17D21449586E28E0BFD84517B1A93B4F4B3308C009322F3D3693C26798D35B8E1A4B0C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 c479b5a8d1a3eaecd43c09f83a5a69d1c50dae74e7a1f9fdeb0518fe4da245de
MD5 52b80fe8bf0d7e807e0a4ae78d94dccc
SHA1 bc2253fae13b20eb950b5f6a110831ee05df21ce
SHA512 6ade163316deccb204f2e04554f90c3b09100656907f781200fd26ed7978522b4a65fa5a80265c191e7b3b48f3136b29b5026595794ca79580fb9e39caec23e7
TLSH
T10AE020FA2DE72860BCBBE3F5247048E0425A7998CD46BC9F1069B1D750F33613856C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 828a222051d813a9deaf8291c62b96f8de66a9692134e94c91a9a7198ca6dda3
MD5 30bb247d4c1efaac785d26e2288421d5
SHA1 4e301f03165c6bb79b8dc2f346d5bae86a44d348
SHA512 bc9cb93a59cb9c451685bbf5d435af474669c6bd5c007d586850aad99c99a9dd2680667672f135c5f4f48f723a390daaa7e4aa51811f8f134bf9fad7580b92ee
SSDEEP 96:KwZ2KCwiWliKuEcIVMo+WW+omzluI+K2LuC+qAIbyYfz:MhJzhz
TLSH
T148916401307E13012C7D3D089595C92A8E8275633869ACBF776851A65F6BE216EFC9CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d31c453799f8a5ad96b43d2b7da4dd5735e1411adcafa358d31950c1f16f4759
MD5 ca1fe76ce6abde3fcf7ad16ec5e5af45
SHA1 210a4acf3d64f054eaa04eb173f2bfde8be05cc5
SHA512 63bde3062dff44bc03f0a04009bae1815d58d6034fbb880f901d790df5a9b76081f31714fb04264d4654d3a3291df9edff078c5ced36dd8a5f4f31c61581eb37
SSDEEP 96:EqONkEQsjpf1bxX5ih/cIPURHl8h4otop5EnDgBfPgvE5BzatIRdy+jCOmhsR1Ry:vONw6Db6QmiUyAEHBa+jcOmiRqRgkbU6
TLSH
T12D02D73568786CBB9EA26E48F88B37275FD4103BDA966F44D6D85F0C00D769C234783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8aea2c443a666772905da67bdf5764290495432508e2ec4728207e11143bc95c
MD5 13050d750734b5faeca57394dea97b04
SHA1 279dd9c90a445d9988b9b0b00c39a635c7c3f210
SHA512 c2520ec40f43f89aade6e5313610aef72ef3c7c7cc2bfa337d8feea44f8a94cc17d6c047ede6321013732b4df282630cb61eb060185dd6811ed50b1798947e46
SSDEEP 192:HONq6DbPQmiUyvEGBa+jcOmiR67+2WNzSqiU6:HONq6p5GBa+wOS7+2ayU6
TLSH
T11912093669689C775DA26544F48736175EE81027DB8A7B91D6DC1F0C00EF69C234FC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 fed7d98e79b44e643821d2b472dcddfd45c12fe6e5a64470b5dfb8a5fc7b3afe
MD5 e5ed2681798e015c5ced8c53ea3041b5
SHA1 9801984e4907bd7fc6d592ef606761ef46984100
SHA512 ca140a9a373b75d6602de8a4fcaf021daa3236cce1003ca233cef9cc8f0865ce99ddd6c9c61790b2198631df3b3ce2d3d5006d2401acf5389c975e3d947d284f
SSDEEP 384:qbtNn/s3n9SazsN3jsYx63aEa+wOS7+2/y82MbdbJ2x9N:qbj+9xCaRa1OS7l/yixkvN
TLSH
T1E8928C7229689C375DA39548F44B360B5FB8906B92CA3F14D6DCAF0D05DB6AC138BC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 333d1341d39f00c3b2ae89969ee031e139648f24adb9f1276463fd708059cada
MD5 d08f447ebc2a66682454c3d2e99e3f8b
SHA1 2053a2e5a95fc049ed4cb6d4ca952a12d8497696
SHA512 d055e34889e22fa6d2b3ad080b01d29fd13b5aea939b0e5e648638b9bc22988b28b3e1c51288029ca01af5a6ce0469bf31d4b155ee5a173cf31b0654a66b260b
SSDEEP 384:mtNn/s3n9SfsN34sYx63aEa+wOS7+2gy82MbdbJ2x9N:mj+9UTaRa1OS7lgyixkvN
TLSH
T1A8928C7229689C375DA39548F44B3A0B5FB8906B92CA3F54D5DCAF1D05DB6AC038FC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 169fb3c62a7ccf6c61b14df0e8994aa4ab629969ccf092d84b9c3b24dfc5649d
MD5 22bb84effa1a0d9aff6046d469cd6b9e
SHA1 dd66a53b604801a6585aa2de433b259424e4293b
SHA512 2a972f1808069e9cf7372100b3fc5ef85d93d2e2008e1baa2dc1b13f597a9fdf6fad27214523b6415450e4eb9fdb114eaefae8d09d5689b2609072ab5455c4f3
SSDEEP 384:ytNn/s3n9SfsN3jsYx63aEa+wOS7+2gy82MbdbJ2x9N:yj+9UCaRa1OS7lgyixkvN
TLSH
T141928C7229689C375DA39548F44B360B5FB8906B92CA2F14D6DCAF1D05DB6AC138FC0A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eb90a0f5-86c0-4554-8f6a-91471d92f00e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eb90a0f5-86c0-4554-8f6a-91471d92f00e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9975ae70c86f43d7532320c34dd5837d450f1adb7661f457a81eba5b135719b4
MD5 5a4988ce39e8293ed27ce12abda5f0b8
SHA1 a1fa690f0638242dc0a4f7544e3fce5b384747c1
SHA512 fc187263b9839f3d6d09dc048e7399a79f645d153030d6ee1e961e2d9dd8e864ced4b079b76c5f1800148f768f57f0bd4ea7f469b897ae8f24f6687acadff93e
TLSH
T165412B58AAE91108B3B76F5A9BF6B86E487BB9772E0AD59D00110D4F0677B40CC71733
MD5 SHA1 SHA512 TLSH

Submit Download