66d82a4a8a9718e8a0e730ea2338d9bc375866c264813d4198280bb5e7c625bf

Analysis

max time kernel
148s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260617-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/06/2026, 12:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2KB
Sample260627-pen2kabs6k
SHA256 66d82a4a8a9718e8a0e730ea2338d9bc375866c264813d4198280bb5e7c625bf
MD5 21836cea6718803575eabe216493a997
SHA1 8b0ae6a4c9f822bbbf24fec0da22561781883996
SHA512 7d9317f02bd789c45a347e5eaaa4ae57fb4d039fee9807d479ce4fc19b7369fae6691c2d51c75b75acbdbf4c1fe0dd778aa9ebdfaf1a7018de8a3fd2bc9954ac
TLSH
T13F4178BD3BD051AE6BB15EDF393D0A26E196FC7B2B4984179315BCA43500C378A527B0
MD5 SHA1 SHA512 TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
788	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134270361525246601"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3226024100-3888324339-2736661264-1000\{8C6F8710-308B-4723-AC75-45F758909C10}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 4076	4612	msedge.exe	89
PID 4612 wrote to memory of 788	4612	msedge.exe	90
PID 4612 wrote to memory of 2676	4612	msedge.exe	91
PID 4612 wrote to memory of 2676	4612	msedge.exe	91
PID 4612 wrote to memory of 2676	4612	msedge.exe	91
PID 4612 wrote to memory of 3408	4612	msedge.exe	92
PID 4612 wrote to memory of 3408	4612	msedge.exe	92
PID 4612 wrote to memory of 4864	4612	msedge.exe	93
PID 4612 wrote to memory of 5324	4612	msedge.exe	94
PID 4612 wrote to memory of 4864	4612	msedge.exe	93
PID 4612 wrote to memory of 4864	4612	msedge.exe	93
PID 4612 wrote to memory of 5324	4612	msedge.exe	94
PID 4612 wrote to memory of 5324	4612	msedge.exe	94
PID 4612 wrote to memory of 5496	4612	msedge.exe	95
PID 4612 wrote to memory of 5496	4612	msedge.exe	95
PID 4612 wrote to memory of 5496	4612	msedge.exe	95
PID 4612 wrote to memory of 4456	4612	msedge.exe	96
PID 4612 wrote to memory of 4456	4612	msedge.exe	96
PID 4612 wrote to memory of 4456	4612	msedge.exe	96
PID 4612 wrote to memory of 3016	4612	msedge.exe	98
PID 4612 wrote to memory of 3016	4612	msedge.exe	98
PID 4612 wrote to memory of 3016	4612	msedge.exe	98
PID 4612 wrote to memory of 1976	4612	msedge.exe	100
PID 4612 wrote to memory of 1976	4612	msedge.exe	100
PID 4612 wrote to memory of 1976	4612	msedge.exe	100
PID 4612 wrote to memory of 4756	4612	msedge.exe	101
PID 4612 wrote to memory of 4756	4612	msedge.exe	101
PID 4612 wrote to memory of 4756	4612	msedge.exe	101
PID 4612 wrote to memory of 1552	4612	msedge.exe	102
PID 4612 wrote to memory of 5108	4612	msedge.exe	103
PID 4612 wrote to memory of 1552	4612	msedge.exe	102
PID 4612 wrote to memory of 5108	4612	msedge.exe	103
PID 4612 wrote to memory of 2052	4612	msedge.exe	105
PID 4612 wrote to memory of 4924	4612	msedge.exe	108
PID 4612 wrote to memory of 4924	4612	msedge.exe	108
PID 4612 wrote to memory of 4924	4612	msedge.exe	108
PID 4612 wrote to memory of 2232	4612	msedge.exe	110
PID 4612 wrote to memory of 3028	4612	msedge.exe	111
PID 4612 wrote to memory of 2876	4612	msedge.exe	112
PID 4612 wrote to memory of 2180	4612	msedge.exe	113
PID 4612 wrote to memory of 2180	4612	msedge.exe	113
PID 4612 wrote to memory of 2180	4612	msedge.exe	113
PID 4612 wrote to memory of 2496	4612	msedge.exe	114
PID 4612 wrote to memory of 2496	4612	msedge.exe	114
PID 4612 wrote to memory of 940	4612	msedge.exe	116
PID 4612 wrote to memory of 940	4612	msedge.exe	116
PID 4612 wrote to memory of 940	4612	msedge.exe	116
PID 4612 wrote to memory of 4860	4612	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2b8,0x7ffba678c188,0x7ffba678c194,0x7ffba678c1a0
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,5321804232763595951,4270759904418208471,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:11
  2⤵
  - System Time Discovery
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,14242311147378163390,18273441221594425529,262144 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,2552103511324949179,9718971373580173660,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:13
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,12933709333784052967,3140052562234418907,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,2138092832319671000,11384945359851924058,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,11498115337049415153,7633192370804817487,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,5261897492488725679,10167736253113284225,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:9
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3688,i,8208291823045647349,4700818338211996894,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5168,i,6839004757827955832,13602830114607535443,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:1
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4484,i,2223377193990654837,16876234929251166199,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3844,i,585254560752320070,9111877532947393950,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:14
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3856,i,7596094626437780641,640218864806321381,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,9671885930908304504,6917467600208894534,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,9671885930908304504,6917467600208894534,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=6088 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5304,i,2689960773295559091,1199314305935453515,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,3625606256545849102,716085277550191703,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:14
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,17495275756071858641,14406535347646036862,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:14
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5064,i,266354614139820527,6645119422592984329,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:14
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5648,i,18241390477267148057,2119849301388965267,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5784,i,14133226094677771907,2393428098104692843,524288 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6376,i,13188234421477118178,9254241783151843966,2097152 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5828,i,1061960272934674444,9769892886746251911,262144 --field-trial-handle=2192,i,9750761925235021852,14305893060255445218,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 25e3094666b1652de0c19f09d2c5a36315ff1f2b6bf4618230987e4527d887d6
MD5 6c5c69ea7db1f14597429c11acb086da
SHA1 20d287e42d0eef2300c162f279f6c1a5bef2e00b
SHA512 4670a8f1b1ff14ef0094b5f0e97add9f3a5efcd9cbac0df76bfa0fcb59e20e8d2587834ddc7e3c72278d6925836d06584fd79fb3286a9e087f9322e2b6f4b220
TLSH
T11BD080753F467511D54514F0B414926153378C5339C2D50A7135C01EAD604D0E3C55F7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ca5d57edbd599d2f326c973f9ea78899a33bc93603d04f5c5fc3060bb6069335
MD5 b40813b6d7a845a0e75e73df45573d20
SHA1 065e9256016c1ff5d12e5f09a43522ff134705ed
SHA512 04620591f96093c5be9d4fb65f9b83ca4d994ab596d5bba483af6363751c3afe0d9d550d0a079f304e51196ff781189761c77ec1ccc9ade982cc5d24efdfac3e
TLSH
T197D080713F567511D54514F4B414926153378C5335C2D50A7135C01EAD604D0E3C55E7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 f52bff15a20a667faa4b6a95072b85072a817e6594f33438b7c3be17052cfcc2
MD5 146a41be0f7f608493b2f551af383849
SHA1 49376f630d058a6dde72faf0823438f8685d8072
SHA512 12e187f92c44a4cb62099be63b7dd2aa9a8832ab7d4395f4e5a5ee9e9f6096eeac3237caa7b923a90df78b5d34f8e07882e216a6df37f8198060a4f12f5ac409
TLSH
T102610B5F23713D62E7A00D7516D9B09633B0C8193DDB6EE079A0E036DF8A7419352C50
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5969fb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5969fb.TMP
Size 3KB
SHA256 b9032e3d338e061f209d2c582cb58400eb2a2ad44756b56221c8a8d5f9f0d15c
MD5 840b25ebf9af84a3d63a6f266480c859
SHA1 b2c8d65b8e68acea622c0774568c5dc3bb1600fa
SHA512 17a2054490eac09c0a7a3ae3755c4d70137c04b94485123f26abff274b3054fd302e2f839d80285d964e9c13ebc27549a963197d42e0aa55b080f8128ec6e4ff
TLSH
T13E611A5F23713D62E7B00D7516E9B09633B0C91A3DDBAEE0B9A0E036EF8A7459352C50
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bf9bc71cfa31221c3ec336e86d847e64c32e0597984112d40b0e55282cb30134
MD5 90fddf37065802b7032c593a0cd73745
SHA1 9c40bfabe7d7b20e17fcdd2fc9fac4d39ac300f2
SHA512 b32080d6fafa11434706e99f05d20fce3617c580cc72796fb66c4a887d30c7d46021da825029ec5c544c404118af1dadeb0c692a5f88745f81eea5f77616fde0
TLSH
T1B54187F3C6E8852DC91156F0AF146E1BCE1D0914832C3D5AC9E4AF1B93E24B1E10094F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 f69525bd021ee26623e57919e4a2b0f98e7abba129445c0c801be4ede28a0aa8
MD5 c1b919223774494ccff2884a71ddab05
SHA1 a889a8bcaf0d2283dcd00a6ea375fae777ecac5f
SHA512 8e23af5b660730d5b4ab4dde529c731e3a712e50284eb001f508901f6c8a8ee3491a23882e804fb0d8fa0802eb29ce4360b568e5a6852a351c374eff6fe88f7f
SSDEEP 192:sxRjRVyM/jK1Ml8wF3/f7sUqPh4NkU/btzoA8p4AD/g6+WNIYZjIGkIgIJ:sxRjBb3/f7sUq27cf/5I5s
TLSH
T12C52E906AA249977CCDBD219FA557F53D6F81473E2944E44AAFCCA0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 855bf2d3998a1d0e1e0efac8b50283bf3bdcae277c388248853232c5dfefe9bb
MD5 232b50378b20c255db7a2ddaee027f8a
SHA1 29d40f3d34de906976cc93b592237c471d10dee7
SHA512 c60edc34f5ef9e2878a463612d05513e7b59555071e2688444c362529fdec86810c1ee3bdf4ab5393cca30b38c027e6a002219446733e1682e131785f352d953
SSDEEP 192:sxRoRVyM/jK1Ml8wF3/f7sGqPh4NkU/btzoA8p4AD/g6+WNIYZjIGkIgDsJ:sxRoBb3/f7sGq27cf/5I5s
TLSH
T1A952E806AA249977CCDBD219FA517F53D6F81473E2944E44AAFCCA0C00E7AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1fb5d19d1cd5bd03e8e8a6e7ab1ea243dcbda43460a388cfa0f92ce3d27e62ee
MD5 b259593d6f93a9131417aa20984aef9b
SHA1 3b4113b32e72157e2200cb7d740e489a0804db28
SHA512 001b0ba9401d981dd7f07f22595f39a1b00168c89f692d10e13f536fb52621749c3193f52c91146eedc76bf60b172efb70e90d14634d84ca56c7b6665f2de17d
SSDEEP 192:sxRoRVyM/jK1Ml8UQqF3/f7sGqPhhNkU/btzoA8peAD/g6+WNIYZCIGkIgDOJ:sxRoBqQ3/f7sGqP7c9/5IkW
TLSH
T1FC62E816AA289977CCDBD219FA517F53D6F85473E2944E44AAFCCA0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 575d90fa679c902d27ed96016f2fbbc5ba33b0e6e0b438793b42ae8235ce8e31
MD5 7fdea2df8eacf0a736aaa346438f558d
SHA1 d857372e2d1175090574b1ee53c76f306ac04df5
SHA512 6bffa388017cd76d1bb162660db2ddb5d2dc22e8117809ad697e4ac3b2adc288f93ac8623f5b732b3f441521c97db5f3bd7a27455b946467f76cb7f9b813936d
SSDEEP 768:eOEt7IWgKgf168F1+UoAYDCx9Tuqh0VfUC9xbog/OV3EkTqQqro7ov8niUo:eOEt7IWgKgf16u1jaZ/QB88lo
TLSH
T1B8C20B2B240CC77E4F844E6DAC2A7E976DD801CB9B988D5447EE890C03C77EB521A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c61b26e366ab91521f56208350de50d0443d7b7e153ecd2c5ab49711c096656b
MD5 9425250c79e8d850da1940c3e8319798
SHA1 f57f79c6d9734ddc61573bbeebab2679ec09acc8
SHA512 d21394ab65b638010980fb10713460abf817ef6fe16844cf4431645278cb4362b3ecd0c72a6e8c924ca963cc636891f72d75dbbb4bf26a4efd826e83aaf3bd89
SSDEEP 48:KgqfcIqsMhhoB8IqQhKfInqhjyxkpQsiyNbItKk8QQIIfKxuMPyI:KYneKwIumbSKk8DIIKxuGf
TLSH
T18E91CC1172BA230038BE7A099254A52F964230B6355AE43B3FBD71E71B67E105FFC9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

3485fe89-05b9-49e0-9705-81707063e332.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3485fe89-05b9-49e0-9705-81707063e332.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e33576e18cd88fe44c3fcb682fe050099c5c639a1c4233ca9485b83afbc2df6c
MD5 6ea5c04ebc4663759a5bf4f2673f98b9
SHA1 8d49d4303b44885e570279a1ecac7c26c6194fc7
SHA512 d24a1f38fdcc71cf872182ba8f019658000f290d5d11ef7c7a98580c73e0b5969a95ea4bc87faa1c2be92203bbd05a3c85ae7573924c6b12b44890a3e73371c4
SSDEEP 768:Sj+9N3DegPfcOvfvfL0V5R4HTytYYqgHvPwcPzn12bfK:h9N3NfrfvfWWTwJxByK
TLSH
T1D1F2AE32ECA89D671DE2C6C57607375BBEE48223D3C51A60D9DC5F0D0ADBA9E130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 3a6ebba09b61c6ebebff4f0e5140735b8e354be124a90b30ff5ba78c8e2bf090
MD5 3aeddb7a0440cb605e1709d51d092364
SHA1 43a9e8121da1ea9446e7c544ae7a21def795e2ab
SHA512 e0c29b1ffa4418038508ef04d3e47534b5dd309890dfbf130d1afc3fbfdbea2b4426b4aa162a8f561731d3ee236ebe487b096175966247035efc242b28b6bdc7
SSDEEP 768:ijaeqD4MlshiLdMmL3AMgPfcOvfvfL0V5R4HTytYYqgHvPwcPiEwT8:iqcjhIdMc34frfvfWWTwJxfz
TLSH
T11503BF76ECA89CA74CB2C6C1B603379B6EF44257C3C52AA4DDC85A0D06DB6CE134781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 7bdd365da48f033f656a3e14c7deac7eda238a42fb51f61a44999a4397739226
MD5 65a4a8ec76ecd372b6b8b7dac6118b28
SHA1 15849aee9067a2a6a65dab683f628ed74204bee3
SHA512 c579d385084d0974c19aa2487c23ce3cd2e027a3f2a7bc1281c62005dce7c1019c123679e8bbe30a23c8b530c54ec8d528d8c9b7325c6ca40da7be911bc1a407
SSDEEP 768:rF1j+9p3/wgjegPfcOvfvfLbV5R4HTytYYqgHvPwcPzn12bfK:q9p3XfrfvfjWTwJxByK
TLSH
T16903AE33DC988D6B6DE2CBC5B60A335AAEF44263C2C56660DADC5E0D05DB6CD1347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 74fe20a479333ba723df023b0b75de3f82c10334bc49ab83c33ad833defcd44e
MD5 cac163f80ef7d317a9398afebe7fc52c
SHA1 5dce38437f0fcc8bddc5506f44f4f99bb1d7947f
SHA512 fe2faa1a86cb0229a60a2bf9b9eded9210e273d9b5db40f507567f0265f7a75d9b5e7bf7875667f175f8d94b43ec55878c521a0d5fdf1d7f11f22d42abc2b455
SSDEEP 768:Nj+9N3eegPfcOvfvfL0V5R4HTytYYqgHvPwcPzn12bfK:o9N3WfrfvfWWTwJxByK
TLSH
T15BF2AE32ECA89D671DE2C6C57606375BBEE48223D3C51A60D9DC5F0D0ADB69E130781A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 0756a12e08bf12f845a201ff1588bc9bcd4332d6d97eb148608ec3a1eac73833
MD5 9aa43846d94ca5217973c3a9fb75897b
SHA1 e96f18eaf0eb97ab353d7d8a8f82395f7fc1d9df
SHA512 ae284ca18390f2bb4b988b346a2a460480bd1ac2b0937e8bc0754c77497b8cf6c144c14c8d1251c16ef152318949a55f3806ca3521e5e7c8a6719d4c226c81f8
SSDEEP 768:EjaeqD4MlshiLdMma3qDPfcOvfMV5R4HTytYYqgHvPgvyjWtxjTo:EqcjhIdMh3SfrfyWTwJqyj2y
TLSH
T1DC03CF76ECB858B74CB2D685720277A77EB44263C3C52A64D9DC5A0D019B6CF130781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4bd37630-ef78-464c-b97f-e09b147ef4a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\4bd37630-ef78-464c-b97f-e09b147ef4a4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download