hxxps://sg2[.]srcintcdn[.]com/assets/images/logo-2lines_with_icon-v2[.]svg

Analysis

user interaction
yes
max time kernel
388s
max time network
382s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/06/2026, 17:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://sg2.srcintcdn.com/assets/images/logo-2lines_with_icon-v2.svg
Sample260623-vqlcpsev3p

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2116	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134267083102824222"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{A8992699-CD77-4DC4-9844-BD53BC8D25A9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4748	msedge.exe
4748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 5004 wrote to memory of 3056	5004	msedge.exe	89
PID 5004 wrote to memory of 2116	5004	msedge.exe	90
PID 5004 wrote to memory of 3472	5004	msedge.exe	91
PID 5004 wrote to memory of 3472	5004	msedge.exe	91
PID 5004 wrote to memory of 3472	5004	msedge.exe	91
PID 5004 wrote to memory of 636	5004	msedge.exe	92
PID 5004 wrote to memory of 636	5004	msedge.exe	92
PID 5004 wrote to memory of 3964	5004	msedge.exe	93
PID 5004 wrote to memory of 3964	5004	msedge.exe	93
PID 5004 wrote to memory of 2000	5004	msedge.exe	94
PID 5004 wrote to memory of 3964	5004	msedge.exe	93
PID 5004 wrote to memory of 2000	5004	msedge.exe	94
PID 5004 wrote to memory of 2000	5004	msedge.exe	94
PID 5004 wrote to memory of 2932	5004	msedge.exe	96
PID 5004 wrote to memory of 2932	5004	msedge.exe	96
PID 5004 wrote to memory of 2932	5004	msedge.exe	96
PID 5004 wrote to memory of 3980	5004	msedge.exe	97
PID 5004 wrote to memory of 3980	5004	msedge.exe	97
PID 5004 wrote to memory of 3980	5004	msedge.exe	97
PID 5004 wrote to memory of 4648	5004	msedge.exe	104
PID 5004 wrote to memory of 2348	5004	msedge.exe	105
PID 5004 wrote to memory of 4648	5004	msedge.exe	104
PID 5004 wrote to memory of 2348	5004	msedge.exe	105
PID 5004 wrote to memory of 4024	5004	msedge.exe	107
PID 5004 wrote to memory of 4224	5004	msedge.exe	114
PID 5004 wrote to memory of 3176	5004	msedge.exe	115
PID 5004 wrote to memory of 3984	5004	msedge.exe	116
PID 5004 wrote to memory of 628	5004	msedge.exe	118
PID 5004 wrote to memory of 628	5004	msedge.exe	118
PID 5004 wrote to memory of 4748	5004	msedge.exe	119
PID 5004 wrote to memory of 2568	5004	msedge.exe	120
PID 5004 wrote to memory of 2568	5004	msedge.exe	120
PID 5004 wrote to memory of 4592	5004	msedge.exe	121
PID 5004 wrote to memory of 4592	5004	msedge.exe	121
PID 5004 wrote to memory of 1996	5004	msedge.exe	122
PID 5004 wrote to memory of 1996	5004	msedge.exe	122
PID 5004 wrote to memory of 1488	5004	msedge.exe	123
PID 5004 wrote to memory of 1488	5004	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://sg2.srcintcdn.com/assets/images/logo-2lines_with_icon-v2.svg
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc32c5c188,0x7ffc32c5c194,0x7ffc32c5c1a0
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,8338057458573198902,17272405239523875742,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,16767037630914510531,14541662416717884490,262144 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,16192213930370720057,9058290378280480732,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,229649234353168626,15497421696436173537,2097152 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,15755152736153970248,6365878405006957841,2097152 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,11465922739377827261,5076461081000566959,2097152 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,12909402065126645447,10732355279756858596,2097152 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,10530056676259200350,4332622820779399159,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,14176058373084902673,17804949995931340474,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6938282160142986095,17654998842026537303,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,6938282160142986095,17654998842026537303,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,16224790513085343751,18308973159473599139,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4380,i,5683493089932697066,17242317213732079629,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:8
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4372,i,17171609698831050003,17708215475407872827,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,13957591211545355134,15429231462963188115,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6340,i,423483227985344179,5842996102395659643,262144 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3872,i,17118559120687183382,5467028920949969126,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,8260328880969744121,11368414648892248562,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,10296770962475290803,11044892135936588501,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,13515055663530670182,16022252913253564479,524288 --field-trial-handle=2248,i,17906186189902316484,12551073895927340455,262144 --variations-seed-version --mojo-platform-channel-handle=1296 /prefetch:8
  2⤵
  PID:1488

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3404

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
TLSH
T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 7b7e10c1988db0fbc2a3dee5ffd08930849bda73cfbbbec8cfe78c7f4b548379
MD5 03d8b5723f0fe5e20380d558498f8f27
SHA1 b5f40c4ea949ece1cda95f8b7b979ad44ba8d1b3
SHA512 76ab91078a14c578cc93456bc3169a09a5f6e591ed66d304e62e960c3f6c8c395d2557a8ed5bdbb1734cedac6c5961b2b46edb0ac0896d5024f3d573764fdbd5
TLSH
T1A2E0208549CCD36EDDC47447416C574CD29C364EE6CF6A1F1F1CC44878455907795550
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5f0ab52cace2668886be7010fbb4e746466bc5c40a0578ed6eba63bea936e28c
MD5 05511b6681af61ce04a6d549fbba3905
SHA1 47b10ce23c0aed2c770b1c9bf7b7e49aa4f790d0
SHA512 3a443db4288f5852274de1faa53632052fd2eb805335f2a0a5e981ad5a2e9e77d7b03cf748cde852caf4c1989253b556eae2e9646ee0176ccc1f2a1d01bd4662
TLSH
T1AC61C63825237590DFC002307FD24174F47C86D8F56FAE791D1399733A08721728A6C9
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 1e06920fe8c38aa868ca92cb48d77c438d35f308f381ad4f27e2c8dde91d2e25
MD5 7ca04d02334942842c8ced5c59cac219
SHA1 d92f39c43afebc6f1985d9ad9eba931701a93c75
SHA512 2070f456e2a8457bb7e80983966be491094cdd225f79ff99809d78423775fb86bffcef315bbd5947e3ff24071ed2f67769b19176f1e4c8498aaba99a5925e3f9
TLSH
T1C321ADF383E589AECA1156F0AE187E2BCE1D0545432C3D6689E4FF1B93E3475E00195B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 dc9bbb251ac987ab1e5685431e56954eacd89515ccc9db5cab9f4fa010a13ba0
MD5 c06eea782d24eae192a4297472650760
SHA1 ccc9742e8fd92a56b117ddd6a8189195f4cda91a
SHA512 aee1d8a0e863a3608b489d60d7d1d7e4c24bacf0d912c098d9253bbbabc9fa67cb2e6607214bc7849a4d486b4f57401ed568f4c4226d8b1616bb78a9bce1738d
TLSH
T13221D0F383E585AED91156F0AA18BE2BCE2D0541431C3C6989E0FF5BD3E3471E002A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c0259cc79645cede6753910052a67d20c3b600ab328e0245b0cc34f6dccdabc6
MD5 3de9a083d656ba0b14fcd02b39876739
SHA1 3dcdee9d1ef86ca5e46a3fdbdbbf01df860ad807
SHA512 6247c3c33f471c680612e1324f0acb37ea9a549f73093a2f391beb602ddb9bdb65593e55b0a41d3795300939764e0c8f01fe9c0c2467070dde88cd736f61ad93
SSDEEP 192:sxZDRyyM/jK1Ml8Mkz/fDsbAL8pIdpGFHW6+WNT0S/YCsSpIVIgrJ:sxZDEMz/fDs0Ai6Hb1/pO9
TLSH
T18B52D9126A389977CCCBD21DF955BF53D6F91972A2940D44A9FCCA0C04E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6fc986875e3be626f1e3bb284cf129dadae8ceb7045dce7fd67b0c4b42789ef0
MD5 62104122db724032f9faf032bf2063ab
SHA1 21f2d81da2a6529c8393bc0c10955036adc14568
SHA512 1d4c6b10d9a9c38fc644d30ceb17ef0a1bdc00c670adf00d3d8bd7e6f7f9a9b905fe6f7a59b1e7cef9688718395b78941b1dfd67166eca755bfa14f4f4bcee2b
SSDEEP 192:sxZDRyyM/jK1Ml8UQikz/fDsoALfpIdpYFHW6+WNT0S/YC5PmIVIg58J:sxZDEqhz/fDszDi8Hb1/IO6
TLSH
T1B652E9126A389977CCDBD21DF951BF53D6F51872A2900E44A9FCCA0C05E6AED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 8921e031a02701863841195f84fbb8084d7261fb0eedd6dec039b50e61c21e5b
MD5 6ab088957bbc993157a3a4db505cc7bc
SHA1 c2ff39ec138624a7ebfcee9a416103794c022dcd
SHA512 c924a20e6be476cd1f9f2c84c7da70d4b0b2c8fa8966f1551d95fc89009f6edfab80ec63a0c08cd3146664394d5979b95439db9d5b799acc8fabeb8b157c5503
SSDEEP 192:sxZDRyyMqZjK1Ml8UQikz/fDsoALfpIdpYFHW6+WNT0S/YC5PmIVIg58J:sxZDpqhz/fDszDi8Hb1/I+6
TLSH
T1FA52E9126A389977CCDBD219F5557F53D6F91972A2900E44A9FCCA0C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c1319b482e57be6f5ed86c3d7a38ddccb9e2beced629a9570ef707f734e5a373
MD5 f7c12c68b246ceef40eb8fc14f81e71e
SHA1 77391e20865fe222626c29faa8a830e91f952f06
SHA512 87b0325c68b451ca25ee604db562fd95db904ccad97269aeed41fa3a010825223bad48f2ea19baa42e827e0fdbe0d1e8a99e45e465c1c03df93b191df4ccf262
SSDEEP 768:jg8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVwroL:jg8bqn+WvSCt6u1jaCZLbWVbL
TLSH
T17AD20A3B280CCB7E4F845E5DEC266F962DD801CB6B988D4447FA894C03C76EA512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\temp-index
Size 624B
SHA256 aaa7c022f17013db892b7b99101e56a81ad6c451eebdd5af6e323c372944b5d1
MD5 57ec0f35ab4a63771adb3435966b163a
SHA1 b79614f990afc90b49cc99b77c96e24a09102165
SHA512 466d856093f1ae97df666646db028b614bb511e29111bf8539c0d3f5c029a0d53cc6725cd7b5b4deb766d6198581824aaacfa6d5ac3e61d57a160d400bc0a041
TLSH
T1AEF023569FE15926DE660DB324F810F473B1CEEC7325C553502C7A2B3C3634864162CD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cd0f4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5cd0f4.TMP
Size 624B
SHA256 7e6db274568e21c3827d0a146dc0b94ff58b86a25c06267036f667ddc16f6345
MD5 e200571e239c6cc5dd5237656a28b806
SHA1 61e5d6ce906c4b43c310a62449c2314006f6fa45
SHA512 582a194443fa69a91bb0946f4a746dab13d1416671cf2c6c734a5ea65312eb8f3aff2712299db25d4a4c5764c80b23194fa8c0ddefd88eed376d9d2e27093d5d
TLSH
T16BF0239687924953DD1409B214E800F4B331CE107237F8935069692E2C363C856130C9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 ebed3950f4bffd1437d3f1568158fb9eefc6a0bc3b955bd8d8788324d4161b8c
MD5 978b58615ca93d832af551a4eb7bdc1f
SHA1 d3e92c59319d484bbc3b0f83603f22166241dc64
SHA512 ee94789ecc0b6c729d9fabef5093161a03a629b300fc273b6605f5133ebd358b6d5572de60c6c90b7e2503d1618ebd03c7b52a442ae1834b42ac2b6dbe3e1df5
TLSH
T11AE0C0FB2DE72860BC7BE3F5247008E0025A7D88CD86BC9F0069A1D710F33623856C61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 ae395e38faed067f3d47e41590e46a4271518da2711569ba357bfd630032f916
MD5 a1eb91d841786274f5830f644e75b272
SHA1 67f97f260231ed5b0e989b4777a4f5e5002bbd5b
SHA512 bb1963878745533030b9e0e262576896a5b4581e73d86dc7d6d69a56e6137cfb4854271f1c9a0bf64c24d08accb6fab21debe64cdd43321811c9acf59f24e42e
SSDEEP 48:K0TQ3D5FRkhFmPIm7kKfBX5jsnTRtZkpt6PI6bkK/BH5kLz08aRz5yxoIvKx2Etg:KEIgKJB0QKp+ayoAKx2eJ+KU
TLSH
T116910506747E5202287D3448FAA696764F9531933068F4BF3FB910A60E27E615DFC8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe592726.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe592726.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 82468126da7880c2b2250200cd2de849e1b3203ba96133c21d3e44f072316946
MD5 cc31a21a34bd815e91878f62dc279e7e
SHA1 1034cf1bcd5756392fcff9e303c3b4a55fedf0db
SHA512 c4d64923192c5b5cc40c42800a1501d35e0a40e083383ad4df677544b4a0b9778d46f1889ef86c46f8fda68c0d0c36df3cebeda6b465009a03b09ab352dc123b
SSDEEP 384:JtNn/s3n9SfsNUSfdGa1MEa+NOjiaZ2ITGT0ICgx9b:Jj+9UyXaIOjiaZ2i+0Yvb
TLSH
T196927D3269389C674DA29199F40B361B5FF844ABD2C63F95D6DD6F0C04DE2AC130AD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b72cf8806e10dd871e9cbc9440d1dbaf844aca832243b349c73f3eea5a4f38fd
MD5 b86153b09e2cdaa4cf6a22adadbe5d22
SHA1 0ec0f1e1b4abd9d2bc269399c5eed6d7fd9d782a
SHA512 58af3423e23e0aa18b18a7b9af2e8a9efe026c6a10fb46f7e320d0512ebf68d2528a15656283a496e5fa752dda1c003aa3027de00bda9e21ca6e96f31cfa196b
SSDEEP 384:3tNn/s3n9SfsNUhfdGa1MEa+NOjiaZ2ITGT0ICgx9b:3j+9UlXaIOjiaZ2i+0Yvb
TLSH
T178928D3269389C270DA29199F40B361B5FF844ABD2C63F85D6DC6F0C04DE2AC130BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 cfc8edc1b94f9bd8ce31880beb929ec64fead928e68ed53fa7695da747073027
MD5 59683c6dbe38aa8bd8438388d1f896c6
SHA1 1a9c81a3d50005b0c2b4014f0c69c561f0a983c6
SHA512 f9806f4433fc01e369b71eee6ef985724a93799e269453577de177b854ab5dbde2d5f2007971de23422eb11ed96307c1fce3735a971269151f60b31e1e8daada
SSDEEP 384:1iF1tNn/s3n9SYzsNc8TUNTUlIlhfdGabMEa+NOjZaZ2ITGT0ICgx9b:8F1j+9PxwghXaIOjZaZ2i+0Yvb
TLSH
T1AFC219F218DB8836DDAD4757B73E2E074EBCC0A7B5816951B3885A0CCC961BFD30A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d26868d9ce3f5910afe89840e7182287b50f0183951ebbea6cb48a0206ee5354
MD5 a0ce9fc742861748b35b45700af89c29
SHA1 8a486391d6760aa5f82bfbeaea0290bfed287c6f
SHA512 01b21ae18880bff3f5b4585c081363389472991d1bceca94ebcc35e06a7b45b77a870e2c4d9d4bd3f2a0e7fae7a73ed5e05859c151fe5e3195f81b0032bb974e
SSDEEP 192:tONd6DbfQmiUyjccBa+jROmDRk8NzaZHqFU6:tONd6pvcBa+NOj8aZ2U6
TLSH
T1CA120A36797C5C775DA26594F48736179EE84127EA8ABB90D2CC1F0C01EF69C230AC3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 02a49506d2355217e4dd63b49e6e06753a1e971ed345f331b39040c287695ceb
MD5 0ff175ebdc175d82d4a2981d1c05ed03
SHA1 8ee76b17a7bfd8b1e20053863e9de06942b3a9e8
SHA512 42490190333e1acc0635dc816f76918abfaf88c919e6bb0bde3674ed1fa154ce8a1cbc7ed0b222df75d1fdac2edd19293c04e46fe5958c551d07610d01c9d919
SSDEEP 192:vON76Db6QmiUyMcHBa+jROmDRuRgaZsSU6:vON76u+HBa+NOoaZ3U6
TLSH
T10802E835697C6CBB9EA26E48F88737276FD4107BDA966B44D6D81F0C00D764C234783A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f5748ca3d5abddf8f4ce004b05c9e2ae001b7a3fc4d37a9d79421edae7800553
MD5 6b87813482555433bb8e6e6ba41e57e4
SHA1 f7d75fa6c741edf414ada40148fac17f368ba144
SHA512 71c5d1f5a353d323bb20caf960f158313eb5ee17de92b3d6b5acf9db5e89ed92c35ee12dba165ff0398aecf4391c2871ff3513c5c44c0428e0c4f7bfd498e1e6
TLSH
T1B2412758AAEA1148B3B76E16ABF6786E887A7A773E06D45D00010D4F0A73B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download