53b1d45700fa095f98201dbbe145fcb41b4c9a80611cc72450b317fb8760ddd5

Analysis

user interaction
yes
max time kernel
328s
max time network
317s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/07/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
lhkgjituyordbncxsq.html
Size 108B
Sample260701-bcdk6adw2x
SHA256 53b1d45700fa095f98201dbbe145fcb41b4c9a80611cc72450b317fb8760ddd5
MD5 268572fcbdac9e81969a2d1c3672d796
SHA1 618bd2c7963f8d65ad74a2a7fcdd19a2de9a40d0
SHA512 5994e7d27cd442a73fdbb6557a9dbd5faa9e8d25d356c8fc1b7dfbfaaf429ec946df185641fe619f63ba898b6e5e60237feaf0f5fbac8447f6e81177cd7723d5
TLSH
T17AB012CA0C15C20417C144125EF3B50C35B710FE4518E000F2945D106B787CF0AB7B85
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1612	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134273411896297932"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{2084B7FD-D567-4DB7-8D9F-20DCF73463DD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 4612	2352	msedge.exe	85
PID 2352 wrote to memory of 1612	2352	msedge.exe	86
PID 2352 wrote to memory of 404	2352	msedge.exe	87
PID 2352 wrote to memory of 404	2352	msedge.exe	87
PID 2352 wrote to memory of 404	2352	msedge.exe	87
PID 2352 wrote to memory of 2348	2352	msedge.exe	88
PID 2352 wrote to memory of 2348	2352	msedge.exe	88
PID 2352 wrote to memory of 1796	2352	msedge.exe	90
PID 2352 wrote to memory of 452	2352	msedge.exe	91
PID 2352 wrote to memory of 1796	2352	msedge.exe	90
PID 2352 wrote to memory of 1796	2352	msedge.exe	90
PID 2352 wrote to memory of 452	2352	msedge.exe	91
PID 2352 wrote to memory of 452	2352	msedge.exe	91
PID 2352 wrote to memory of 4968	2352	msedge.exe	92
PID 2352 wrote to memory of 2160	2352	msedge.exe	93
PID 2352 wrote to memory of 4968	2352	msedge.exe	92
PID 2352 wrote to memory of 4968	2352	msedge.exe	92
PID 2352 wrote to memory of 2160	2352	msedge.exe	93
PID 2352 wrote to memory of 2160	2352	msedge.exe	93
PID 2352 wrote to memory of 4960	2352	msedge.exe	94
PID 2352 wrote to memory of 4960	2352	msedge.exe	94
PID 2352 wrote to memory of 4960	2352	msedge.exe	94
PID 2352 wrote to memory of 4460	2352	msedge.exe	101
PID 2352 wrote to memory of 1728	2352	msedge.exe	102
PID 2352 wrote to memory of 4460	2352	msedge.exe	101
PID 2352 wrote to memory of 1728	2352	msedge.exe	102
PID 2352 wrote to memory of 3928	2352	msedge.exe	105
PID 2352 wrote to memory of 4468	2352	msedge.exe	115
PID 2352 wrote to memory of 4384	2352	msedge.exe	116
PID 2352 wrote to memory of 384	2352	msedge.exe	117
PID 2352 wrote to memory of 4108	2352	msedge.exe	120
PID 2352 wrote to memory of 4108	2352	msedge.exe	120
PID 2352 wrote to memory of 1948	2352	msedge.exe	121
PID 2352 wrote to memory of 2468	2352	msedge.exe	122
PID 2352 wrote to memory of 1296	2352	msedge.exe	123
PID 2352 wrote to memory of 2468	2352	msedge.exe	122
PID 2352 wrote to memory of 1296	2352	msedge.exe	123
PID 2352 wrote to memory of 4548	2352	msedge.exe	124
PID 2352 wrote to memory of 4548	2352	msedge.exe	124
PID 2352 wrote to memory of 4592	2352	msedge.exe	127
PID 2352 wrote to memory of 4592	2352	msedge.exe	127

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\lhkgjituyordbncxsq.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff81128c188,0x7ff81128c194,0x7ff81128c1a0
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,8748041997088325106,2740819601859257505,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1640,i,3974698187345667618,4858087649160152678,262144 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,2879531720958571756,2005324276357666797,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,2561270908061463146,1034040984612622705,2097152 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,7636246810335376283,14711634546321263741,2097152 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,8683830826465271016,9735886222050235061,2097152 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,7292858021194070256,7907723925615638045,2097152 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5072,i,1300592600633848822,3103947848924571519,2097152 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,5512867657669024826,6643825828522324023,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=3804 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,9373470680883659602,12447179868823726878,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,867005579583398852,11173584501770976167,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,867005579583398852,11173584501770976167,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,7062044413328850081,5739021249269641163,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,12674882454361613871,7160720199382766707,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,8739816950549029843,10484018094277159520,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,15475824830497674982,5864361538126906637,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5868,i,7558723623793099567,9269864272287937679,262144 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2776,i,14841714009483778398,17336621683497646180,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=1312 /prefetch:8
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3160,i,8232597597187144899,8397044655459982860,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,3551951640276166643,13039792347140259335,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3216,i,8917558152105873650,11942623852637332619,524288 --field-trial-handle=2252,i,2193972625828438979,8077250695482416130,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2256

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
MD5 827e00d89fccbbde703c679b5c7ff536
SHA1 6d9e235782beb4e6b38fd4db2946f9bfc725110c
SHA512 1d18100db386f25678d8dabb492ab6e15d08e2c5a7d7e6c76bc253df648e2b5438cbc4fcb5a4033a1e14afbda93b271225eb5f545f12663d6bc35ca51239fcc3
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7X:fwUQC5VwBIiElEd2K57P7X
TLSH
T148B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 985615735501db34ed05fe3eeb53456a8cc632e9565ee4947f540488fbe5cca9
MD5 59239501e9799d158c0e36657bc242dc
SHA1 30e7210ca57387df90e283617ea6e9a42d34d381
SHA512 b2286589d4028e9a102b98ffe3b2480a8dfec4e181c92d457949f6dc5ebd3b27cdf192fbca07e255156749e1ddf4045fd1d5ae67933e5731f191d8eef0810fdc
TLSH
T19BE020D457C8C27F9140A887819C934DD2D037EBD2CC7906174C88983001080AB956FC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 c441794f13e5568c1c91adf73a397060b39c0548bd1e135a2b29d8c1fea2f3c5
MD5 9c7eb64d4dd4278e76d75226cd2ef7b2
SHA1 762c5a4010ea0751a7161caabca5a92a6af18625
SHA512 5bfd1149f0042ac745a4f53ca2ebbbc3914480d6e773c4efb6f837516e88a0cfdfac923db8237ad81339575cf38417a93652af2cdc0b63bbe363525b70c53819
TLSH
T172E0D8971382CDE4638396C7E65EE294C8D5752B9E4C94DD3B08E0DC744800D8B8C1FA
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 b3ebdc8c1115f4fe3cb77d2e33828e750fed87369fd989e2c5e3b92588e3c945
MD5 0215981cc3a3f8fca90c45c64e0563d0
SHA1 3f2f811b7b6aa2498897b22f53bdd2aebaa7b7b9
SHA512 65a327bc7da5c3ed2f8c80dc4e294fdef13b68ca99abc1da125ce4883a03379404e9e8df258d457e0961de1f73f765fbcac4889c00eac1038b8aa6d33a0bea42
TLSH
T15A7160F431111B7DF3300271ABEE02217538BAD9F4477FAA1064A876590DBED7C2842B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe586685.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe586685.TMP
Size 3KB
SHA256 3aac9422da92b5c1ca231a4662d8d917ec73337dc1ff5cf760e0083b73a0443c
MD5 828a4335beb1b77e6f20451616bfb8b1
SHA1 9b01cefd0caeb085b737f2b93022b39caad99a8a
SHA512 f1a1311d8e39a5d685317e53902bd47e49f5a94d7dddcdd5c03f5f3c22b7d287ff55cfe266af13fea6d32011087a6c5939d7b1e2e0335e87144bfab289a3df88
TLSH
T1267160F431111B7DF3300271ABEE0225B938BAD9F4477FAA1064A836590DBED7C2802B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 1f0bff1dca36fc4105293f8af2e062cd05bcdd35822026f556b8386005b03c8e
MD5 449ed78c1d7eed29cad985bfdd450fdb
SHA1 34d40092d6e997909db6b6b6feed1a185bb4215b
SHA512 c2f7018b87d84616f004a05517700cb9265634b702cc38c5677c0f3505698df2b782573fa29ea724948c521b098bd607267deff6f879f20440dfb9439eec40f2
TLSH
T136117DF3C7D586AE890156F06A28AE1BCE1D0506432C7D1589E4EF1B93E3075D10299F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ff0d04378c10e23de1ae21de40613916eb8788a618820b68a6636dd78a0597d1
MD5 56995835ba2001dc619128367a453d82
SHA1 d8c421d18cb349e9efbe4f56b62d7fc4786ea21e
SHA512 039d6fb18b919a2f64e854a0ec54f65c81082fd8b3f2058f8895fce2e3706a3c333d7c44ceceba3e7f5cf6ae19894803c6e5d60c6c7eca9e48eb86b94bde9009
TLSH
T17721A0F383D586AEDA1156F06A18BE1BCE1D0501432C3D568AE4EF1793E3475E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3fe5135d962e1a47163cfe1a2cea4c2b3bf52f5355af0dc5281165d90c84ff25
MD5 9babbe977fc5c3c2bc95da02b830d3e3
SHA1 f4a10e78c121653400078d578034d6c3346f3203
SHA512 11246eb4e5d977db673295797f71aa5645c78d0b0d362db81cdd76660a4908f1d1f2e1c75522fdab264f475a4d1f02a2740440a8ba25e2cc8186bb2fd5b05b89
SSDEEP 192:sxZV1tRI4yM/jK1Ml8MkYE/f4dSPsN7bYVSqVIqIdpdV0VTHgVy6+WNGYvrVkEJn:sxZtvM3/fZsN7UMz0HmGqDt9
TLSH
T11C52E7126A385977CCCBD309FA55BF53E6F5156292900E84AAFCDA0C05E7AED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f48d0cf96abdb17c6bf929cd0449833a5e95994f64262b1f8457c35aec6ed4d1
MD5 fdab31698400b06c69f2c83c0c44b78e
SHA1 e41f1293c8f531e7a0045aa967d77a560328684f
SHA512 8766556f2b1ddfce3aa66ab98c2f43fe200d1376025eacc43aa5377caf78f060dd70ada11f3016d07a488e3f18d0044d05b17d52514f50c4c9a8fe7913fc3891
SSDEEP 192:sxZV1tRI4yM/jK1Ml8UQYjkYE/f4dSPsYG7bwcVSqVIqIdpHV0VTHgVy6+WNGYvC:sxZtvqN3/fZsP7lMzeHmGsDtM
TLSH
T1D952D7166A385977CCCBD209FA55BF53E6F5147292900E84AAFCDB0C05E7ADD220B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 e4f22499f9bfb4d5a0b640db1583567e92980c215691978aa5f19466e638dd65
MD5 ffcffafcac7c5f674d39e253c19de0bb
SHA1 e0cfb5ec27b4084185cfe8a027828d4e02adf8e0
SHA512 5d6d1fa0f848044a58d295f7cc981d0672f97032af926f07f2a45a9b15001806be8562f7789b3e077f10a4516c795679a5a377e3bdaa8abcdaca84cd2f5be837
SSDEEP 192:sxZV1tRI4yMqZjK1Ml8UQYjkYE/f4dSPsYG7bwcVSqVIqIdpHV0VTHgVy6+WNGYw:sxZtyqN3/fZsP7lMzeHmGgDpM
TLSH
T16B52E8166A385977CCCBD219FA95BF53E6F4146292900E44AAFCDB0C05E7BDD220B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c296982011d0e32792374d9cddd929226b3eb660876c4bbfdc101b62e17bc821
MD5 f9bd8f57e1d3243552545946c8eda6ce
SHA1 7c9529fe9168416c7a4065d6fdb7fb9de4af78e6
SHA512 15cce4e7903bac67f249df2aa77128fca7dd6ab807e722964977a93104c58ff3d28e1ebece27b20c9cea6514791b6e5d72275fe354742e01c8745f20cff95bcd
SSDEEP 768:kWseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0ppbro6y:kWseJ3xWvhfynu1jaVcL88pov
TLSH
T19BD2FB2B280CCB7E4F844E6DEC266F966EE801CB57984D5487EA884C03C77EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index
Size 1KB
SHA256 4667fce97f3bb388aa9caa50ddb3ef8b7b150015400e17112faabf2a5e665fc0
MD5 93d6af4eb5ac9b69c02750982ffb1a4a
SHA1 1bb90772cc01ab78ce1f524b5ea4c46a6f8b8ef4
SHA512 054a951f1327aadc5bb1c11789687876a555a5bc246baadf86d3cf9159284ad364c29f68c0dbabe2b5bc3db3ff29e53d5eb1fd78f598ce2fd8630e5a4d4c37e4
TLSH
T17F31338D8E91999FD5A889B2157674E433F0D9CC1711A3534C3C763A3C263AA2A4B0DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cabd8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c41e8016-acfe-4596-96f4-a749f543712c\index-dir\the-real-index~RFe5cabd8.TMP
Size 1KB
SHA256 f49a9764151f9c0a0cda698f529306051a82d9f9201795d929ad2f23ca155dac
MD5 bd09b5d213ab7dc57c26ce38da245ed7
SHA1 38e806ee31332f4fab00ed5b656127f38f00d0e5
SHA512 ac70b859740d288d06a1a75d3bf2cfbef62790ec50d8f3a41d4f52f173a6622ec5c5ed15e968e95dd7f6d9e46d55854da56b62c4d03cb98959a2301cf0a76df1
TLSH
T17E31758F4B81590FE8D444760557B4B83375C94053227783987D63396C7579D2E5F0C8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 2a0afe4d8c1725449da95ce96386564f383f355e2c2febce4057c63b82a195db
MD5 27b4effddb1418def7731a0a40bb9e8e
SHA1 0b3d4d93d8920c7f50ea61456056fa8328beb7c1
SHA512 8a1b0f9bd8285c5e7e38670848062c4ef5b460dedd557f17247f997339d0d3e6be4fc13547417d526ddabb635f333b132c07c92d5c5e6cb1655ae9996324b68e
TLSH
T144E0C0762DD72460BEAFC3D2603080900A0A749DF941FC0E541BF6C310B231530D7C35
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 27d5616e10cb12709fbbada40cc18d52cb61e19d93169fe24084777c800d0b2d
MD5 29edb2643a93ac6ffc57b1f58b0904ab
SHA1 2520fe5dcf97af1c04ae7e34a530bcd36befa146
SHA512 c1a70efe6d2b7f7bb50448caf6b720cc7c907f3bee5463503f92cb3574b55c8a6ba22506f0ddca74fb13d16ea8249e2a901ee49213fb9530eee28597674731d2
SSDEEP 48:KYHIhKggkXyBcIHK5W8Ty95I5KSEcnlyLf1vz3z:KYH+KggmScYK5WC+5GKSEKlyLf1vz3z
TLSH
T139913306347B02023C7D254CA6A295369E4231E375ACB4AF7FF800A51E66E214EFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b80e335f-6544-418b-94d0-f89251e0594c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b80e335f-6544-418b-94d0-f89251e0594c.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 c7c0def6b3d917d6e001812a627499d15a6a9101d9f56079807e67223e6e3b20
MD5 061c3e7e04999d30f019daa9f8f51203
SHA1 8c4125e0f7b53b2b1295c0c75ed57f17383e238c
SHA512 fbf945f8b7c5955a5fda0300944c577e72cd4c564ba910596e72df9b89d866d15bcfdb4f0d15a9d9cb96231ecc27aee6a16e5848792cc8e928ce899c8fa6c34d
SSDEEP 384:9iF1tNn/s3n9S7zsNK88TUNTUlIl+kW7BGF3ldLKoJrJ3ICK:0F1j+9E2wg2g1lhJ3ICK
TLSH
T156823B335C688D3BAEA69B85F54A36039EF451AB86C16E94E6DC6F0C01DB2AC130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e0177d2cc73fa3cc7a4272bcb81a7232a41c57f9025d4660dc514230dc9d6af4
MD5 d4b2c69ea00f336a965f235ba7f3455f
SHA1 51ebcacfef4ade6834eebe0f21af9c3cc6fedcdc
SHA512 3a91bea829867634273a21d698041f17a6355f91c1932438d2537841bab4b96b423152b27992378748b7739fe51d5381fbb2308573e9bc5ff900085d9cd228f1
SSDEEP 192:lON76vMtPQmiUyVzVIThTFp+FdLXKV847iULFU/u:lON76UtR/TOdLK135U/u
TLSH
T1EB020935BC786C7B9AB3BD86F58A27175FE4216BE9D01B54EAE82F1C00D765C1303826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 ee8fe25cb3fb6ce4724ecd01c87b71da73c7b86b0c1f2988e51319ff5cad7d8f
MD5 d2d074847c950b80fe16d6165c157ae5
SHA1 cab88294590afbd220527906c76cb7aa3c2f1cb3
SHA512 af815a6ad9c42ca73cd022d523b1b1254bdf92e973ceabe801f670688e97c38b7ca039a15417a44f2b49b2bbdab966501fb788d445d5de97b17c2cf1485cda51
SSDEEP 384:ctNn/s3n9SfsNK0RkW7BGF3ldLKoJrf3ICK:cj+9UMg1lhf3ICK
TLSH
T182625C32AC385C3B99A7E285F14A3A035FF4916B97C02F94E9DD7F1C01DA6AC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 ffeb7fd61406bafaaa6c23f05b827ad96acee9bc372a0dfb2bc90911c6edd768
MD5 ea5d8cb1054f2129088f2693fbfc1ff6
SHA1 7eda68a3b5cc3a5749ad8cb4240248a4e08016ee
SHA512 498df11340016fb1508fbe6a28e44a344e6e0043db4b7f89a98bf83f88887cce73e7211112677d17b21893429f170b1083758ca97007278fc013055126951186
SSDEEP 192:fcONrSB6vMkyPQmiUyVrVIfdhTFp+FdLXKxzSJrs80IiUPqDU/u:UON+B6UBRRFOdLKoJrR3IU/u
TLSH
T111121B32AC689C2B6D93F585F48A36135EF4916BDAC46F50FADC3F1C01DB65C130A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 257917832e6c0130fab6189af04430a107d4df5b6a45e700264ea00c96a62e4a
MD5 c22a80d36cc0fb54fb908f0b2f0b340f
SHA1 fefd46a5c04cc8c3324078d2ccc8b552c4f5dfa2
SHA512 5637c40404d6de2284a3cb82a205590c6ac676511d5d058cdb8fd1f9a1445f07f7abb697a17fa0760acd88426ecbbe501f42f107d7d2771a04917742cf6dd195
SSDEEP 384:NtNn/s3n9SfsNK0+kW7BGF3ldLKoJrf3ICK:Nj+9UFg1lhf3ICK
TLSH
T10A625B326C385C3B99A6E285F14A3A036FF4916B97C02F94E9DD7F1C01DA6AC130B916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0c5636e1521692a39b08aa56bbf20c29aa413925fe2b9a3d496af0fe1e70d11d
MD5 84a28cb0615901733bea98f48f3bb183
SHA1 d1f33a100bb1b95091dde5780a4b31bc9961b30b
SHA512 e05cd06450f8c385d58af46dd96b8b33eeb70e3a71458ffb9289d0ebe69f8fc9bdc0a71d0654a53b867cc2f4f121fde899782aa346c399a5fccc5236a3a221be
TLSH
T187411A5CB6F91108B3B36F5AABF2A95E487F79772E06D45E10210E4F4662A00C871737
MD5 SHA1 SHA512 TLSH

Submit Download