hxxps://www[.]acn[.]gov[.]it/portale/w/risolta-vulnerabilita-in-prodotto-mozilla

Analysis

geolocation tags

nanew-jerseynorth-americaunited-statesususa
user interaction
yes
max time kernel
898s
max time network
729s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/07/2026, 13:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.acn.gov.it/portale/w/risolta-vulnerabilita-in-prodotto-mozilla
Sample260702-qlpgcae16z

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2832	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134274720823220872"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{33347F7F-C9A9-4568-87D4-8D654D7F56CD}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe
1484	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 1484 wrote to memory of 2080	1484	msedge.exe	85
PID 1484 wrote to memory of 2832	1484	msedge.exe	87
PID 1484 wrote to memory of 3464	1484	msedge.exe	88
PID 1484 wrote to memory of 3464	1484	msedge.exe	88
PID 1484 wrote to memory of 3464	1484	msedge.exe	88
PID 1484 wrote to memory of 1172	1484	msedge.exe	89
PID 1484 wrote to memory of 1172	1484	msedge.exe	89
PID 1484 wrote to memory of 1500	1484	msedge.exe	90
PID 1484 wrote to memory of 1500	1484	msedge.exe	90
PID 1484 wrote to memory of 1500	1484	msedge.exe	90
PID 1484 wrote to memory of 4528	1484	msedge.exe	91
PID 1484 wrote to memory of 4528	1484	msedge.exe	91
PID 1484 wrote to memory of 4528	1484	msedge.exe	91
PID 1484 wrote to memory of 3936	1484	msedge.exe	92
PID 1484 wrote to memory of 2900	1484	msedge.exe	93
PID 1484 wrote to memory of 3936	1484	msedge.exe	92
PID 1484 wrote to memory of 3936	1484	msedge.exe	92
PID 1484 wrote to memory of 2900	1484	msedge.exe	93
PID 1484 wrote to memory of 2900	1484	msedge.exe	93
PID 1484 wrote to memory of 4484	1484	msedge.exe	99
PID 1484 wrote to memory of 1628	1484	msedge.exe	100
PID 1484 wrote to memory of 4484	1484	msedge.exe	99
PID 1484 wrote to memory of 1628	1484	msedge.exe	100
PID 1484 wrote to memory of 4524	1484	msedge.exe	102
PID 1484 wrote to memory of 5660	1484	msedge.exe	116
PID 1484 wrote to memory of 5668	1484	msedge.exe	117
PID 1484 wrote to memory of 5676	1484	msedge.exe	118
PID 1484 wrote to memory of 5232	1484	msedge.exe	121
PID 1484 wrote to memory of 5232	1484	msedge.exe	121
PID 1484 wrote to memory of 5956	1484	msedge.exe	129
PID 1484 wrote to memory of 3504	1484	msedge.exe	130
PID 1484 wrote to memory of 3504	1484	msedge.exe	130
PID 1484 wrote to memory of 1216	1484	msedge.exe	131
PID 1484 wrote to memory of 1216	1484	msedge.exe	131
PID 1484 wrote to memory of 3100	1484	msedge.exe	132
PID 1484 wrote to memory of 3100	1484	msedge.exe	132
PID 1484 wrote to memory of 2876	1484	msedge.exe	133
PID 1484 wrote to memory of 2876	1484	msedge.exe	133
PID 1484 wrote to memory of 2828	1484	msedge.exe	134
PID 1484 wrote to memory of 2828	1484	msedge.exe	134
PID 1484 wrote to memory of 5728	1484	msedge.exe	145
PID 1484 wrote to memory of 5728	1484	msedge.exe	145

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.acn.gov.it/portale/w/risolta-vulnerabilita-in-prodotto-mozilla
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffb1b7cc188,0x7ffb1b7cc194,0x7ffb1b7cc1a0
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,11225047512925147216,17203699442660873321,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,2016465123347042714,16209214895585720634,262144 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:2
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,10450973803318383772,13794622860121690773,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,13726667509295801666,10475427875726151016,2097152 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,3842278925948779706,4433776592360341251,2097152 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=2336,i,1744493850749624219,11269258277958433886,2097152 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,5509745650182685132,16084376205645354537,2097152 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,17428105321478604526,16315662046330782846,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,2512427439283488695,1541577523894028095,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,6027550546496216568,17039872202909466433,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5848,i,6027550546496216568,17039872202909466433,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,6928146871652112839,13311069360268171789,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,7588628385198927949,14669965497409136246,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:5668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4524,i,2592644822895431000,9141865762670431087,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,12093981382578201185,1734141799321670043,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6152,i,4591861537674252802,14453332448035899703,262144 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1300,i,11267232068946468558,13179739766138073724,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,8984553444593341080,6848047485261757164,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,7848426916337436521,2922302616762535830,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3040,i,2382487999984923649,8647158610565597363,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,8107507433475059181,9846979095149410866,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1296,i,18368348568573367094,15671617920857684023,524288 --field-trial-handle=2876,i,8792519271892145793,7294225207969582316,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:5728

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3940

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 33ad2c2ce29a9fc8ef72cc19e98c7fe82f90c000e675d01165e7a0d35ad7d635
MD5 03a13d2159c3ca878577f08947ecd7cd
SHA1 6f8c248ae2d14400231edd21077b92c8c69e2784
SHA512 a1f90a2b9a110f937adbe0bca7cc5bcd664ef68c83cf29e4e1751a42b6ae6ffa1ee1bc85177bd2ffb3954e85b7c9755e4ca066615c1bb4852515a9c8ba137a8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7T:fwUQC5VwBIiElEd2K57P7T
TLSH
T184B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d8f086c3f1d43acb7b052773e72f5c88f49d6ed3f696e1e2cb4dc111d8c6b37e
MD5 e4fd8e0dd985c928ebef8f3d538c3788
SHA1 b47b35efb285efe0b0308936fd75f2bd85931a16
SHA512 8d8a485a734e17ed36907d50fea50f4d5547adf32a6be86077eaae46cf22df7a62c88fe3262543e2c81329331c5f3b357019e4616ca7b1dbfdfa16b555a0d9f5
TLSH
T1FCE026A406CCC2BF9261B84B51AC430D82C2372F92C86D9E6B18C9DC3601A40A7C36E1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 282d830e8f5a2b52fd26b7c0f032b8a0726dd86eae413899d9ea3f4b7f48c9cc
MD5 09e188e71aa2845eea00f03c57467d6b
SHA1 505c6a952ffb1fb8cda26944d9e1782d12e01974
SHA512 4a24bbf1f91bff513295a359c0b7fda03cc474808e1c406498997eae3fd8c69e97f70fc6aa04de99afac3b20bc911b5558d82ae2343df2f16a1d4a9c8f863404
TLSH
T194E09A3423D991AA4623998784EC922BA082303E95C86DDDBB0871992E000025BAA9E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 bfec66073905fc8245c07a8362a6c59f82b209fd4c5444b76261ef9af723bf90
MD5 7030d1b85c531882126bb7c7c836dde2
SHA1 737194c4d62795d08a01caeeb8eb196264918a38
SHA512 aa11cdf0088e651a16acbb016cfaa05dff5b2ef7248841c07f6140060665cfeb2d378de0f7dc88bbb348ccc00ceb6e9f42f7c663999e152079082b9cf0a42283
TLSH
T111E026B9D3C4C2A60103A44783DC6B9C81D2B16FFECC98DA330C719DAE00601FB448E1
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 b1576340d4ae388ec3d34f503e035964be4f208ed87f215ded84584e9bc1038f
MD5 1695c3e071410a9f1f5df5aea7381515
SHA1 a7ea41ffa2bc761e288381b4606555e91a51d004
SHA512 bf13035b230d683698b18e7599b9eef64a84857b4d673941590fa2a09e14427ae4f02537202a6888f3447e2ad23c1607bb0d6a264329d4ed6a4fc28210d9c472
SSDEEP 48:VHVqKyOBdLnG1RF+e0heTz/W00jW6NIYqUqV8hmKJvMBRUY1YhBdJh0:V1qLIxG7Yetzt0q6EIBtMBRUhhBN0
TLSH
T16791C5B515CA2395DB563433E5F20E6A30308F992E033E128074F57DD80A7AE63A5DF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58f2e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f2e7.TMP
Size 3KB
SHA256 895d6f833a62b3bbdfeb0d7dd7c6c6c8024f34e40e62dbc1b87da6bf31386acf
MD5 801dd41d679fd5449eb72b6a4af3c24b
SHA1 cd9723dde685c4bb694a23ba415fe156f3f4a7b0
SHA512 2214ecf63fa9e404114690bb9c823aad4d1f3f3a3bc5fd8b705da00642100eddd892cf0001b5762e9c09695690bff6d476316089e9acde556df4a97733784246
TLSH
T125712B7911C227A6E38A3533E2F2160A30708FA90F137D211074F93ED809B16676ADF8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 bac56e2833468f047c4ceb695b98b218ae2d79e6d52e23396cca9fb431aa4b20
MD5 931de54f6504af08fcc72a31c288ae09
SHA1 f3667a429f489426d9a230d955f1794022c151d7
SHA512 58e6cc41e9dd55868d58b4b74130ee452ff4d3bcb465e7c64904ede41fc997e3be6d0f363fc270785bdf8c410d1a1aaa38a721aa83db7258a7bf7a5d5b645a76
TLSH
T1BA317DF743F1856EDA1196F09A14AE2BCE5C0511436C3C6A8AD0AF1793F3071E042F5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 36777552ef513457378dfb8d4af69b9f902e7db5b5856d0dd8a398620d2a3b13
MD5 e1643dc73e76ba258e48e495842c02a8
SHA1 a9088b92d922dd79cfb083e21b0c9aa89d5c2a24
SHA512 a59927c1d29459655dcf79fbded20ea726a80e76df82f91f96639fe58de3cd767e098cab728c60219dbbd900e6e6c6819be1c66bed6fffb89b1fa4329a9f14cc
TLSH
T1D2216AF383E5856ECA0156F06A14EE1BCE5D0516832C7C29C9D4AF2793F3476E501A6B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c028124e703ed91c3cceda370447af3460b252d83c054098c5b564abdd4b937f
MD5 9c3bb2c39b6a5b5b720f31f5034b8d93
SHA1 02ce3167cab9c72650fbe29e52ae51cb74a4b633
SHA512 a50c69053ce41f80bb1bc85800fc54f5385549fe867ed4c2c16c0246bda09e1f13da920884f159a0d2fd27aa84861da70c5eba6a649101f2561beacc14a2c6fb
TLSH
T19C218CF383E5856ECA1196F0AE14AE1FCE5D0516432C3C298AE0EF1793F3475E401A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5a75d0cfc3fcde6bba3efed87294538bd2cf05deac9225fdb021b9606b4b6c55
MD5 372702e48e2215b7b0abf04f8dda46a7
SHA1 5bd702297129b0247952ad80bde2f10ff1563cea
SHA512 188e4f91f186aed7986c19472987a1d0d09d732509d906796ea9ec2bcd9aa1334cbb553147ca5c452483d85b4091250225d05cbe8085b51369e2739f375136a1
SSDEEP 192:sxZHRnyM/jK1Ml8UQhkZ/fYsuU/RDLIdpiRHW6+WNMuGdY4sZth5Ig506fsJ:sxZH5qyZ/fYsbJDUyHbodeNfQ
TLSH
T14452C7166A3899B7CCDBD309B9457F63D6F9056292900D48ADFCCA0C05E7ADD220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 28KB
SHA256 d6bc77d2d0f3acaa371ec1bf85c0bf6b95f38303489c1096f98ab1763356c0f2
MD5 8f57cf98d4b0477a6bb00ab32c979722
SHA1 2addd9f8df03ca459a70e8313134216cd20c0c14
SHA512 eb99fba86f093f671a5c868cdeb9626ebc50a429bf697a8e4f6f8865c33772810a9bfda8feb7e837f7e465c0789c6cbb83cf8f6241a8d1395919b3f41663629f
SSDEEP 384:sxZHYqyZ/fYsbs66s8qMpRiYnazAW8pZS15posJWeT+EDUyHbodXNfQ:sP/yZ/fPs4Mnc7WeT+EDVHb49fQ
TLSH
T1EDD2F8059924C8779EC39E19787D7E33DAEC40526384CEDA19ECCA0C01AE5FDAB47867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 bb0f17fcb231f4f1e9a8027716a90d9c37a4a513e77df50452fd8e67cb344dcb
MD5 ec6612da615baf6e3a29aa0d9150aa73
SHA1 954deb88783e2c43a7bd8a00ad031b3c232273d9
SHA512 76a4a41f1599b18532f91c56ef156e6a3f9ce593a5403c268fe0efa82398d923a7ec9944d16f7f85191d3d015ae539192d4165c8321bec70bc32ec9352d03703
SSDEEP 192:sxZHRnyM/jK1Ml8MkZ/fYs1U/8ZNGIdpURHW6+WNMUT/Y4M8dh5IgrJ:sxZH5MZ/fYs+0ZNnoHbv/R9
TLSH
T1D952D9126A3499BBCCDBD309B9557F63D6F9056293900D48ADFC9A0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 34de1d704dcdfdd80d205968fefa6a097cf4f8f63569e4c1b59e14e3c7a13df7
MD5 c92782e72543a38a3f3e5b92c35fea83
SHA1 d06499630d74a3e90e2d2f21457e5313e125532b
SHA512 4fcc1a88962f2e2d1f7a73ba0f1fc0c71a005e312237775b7cbf59fe1cf03e18e1c00fdf9dbab05be4d49a3da573c84df746811ecf03630a5da7a9ecf9c4568a
SSDEEP 768:sS8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVsALl6opd/rokkeUnk:sS8iJPNWvx76ru1jahALocdsuUk
TLSH
T147D2FA3B680CCB7E4F844E9CEC266F966DD801CB6B948D5447FA884C03C76EE512799B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\temp-index
Size 1KB
SHA256 7bdba13be6db7d22af841ccaa2a8b6391fffcea0566c08b83379a637958b4962
MD5 14e969a54a5bbb8a7b2c90158999258c
SHA1 c7bd621efe95c3b24c720e2823e317bd5c0bec61
SHA512 fcd21342b5f0876af49b52e4fe7773327a4ca72edc6ac9e47e1c8a4b0931a0748a20b3ab272024874b56ba3911ad4a2e13841226e6e88e9b3a1c5c9c9a66e588
TLSH
T16E3142488EA18DAFFCB042B21676A8B4737184DC1715B713583C32316E2374A2A479EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d34fd.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5d34fd.TMP
Size 1KB
SHA256 81df0f3acafed54616b4a583636a4fbb4baefaf74dfe1c910772a85bdffb86b8
MD5 9eb88d3bd91b84a16aeaffa558594fe2
SHA1 e681e66f525690b4de0cef949f58dfdc63fbf6c4
SHA512 bd7228c26f0fd2dd0abeb65a106e08f7c667edafc3119c65c3b9cb3ce69d42c6c82ab6a532b49ab487a524606a8ea32874c57fa2b23cb789827f5f845d4782f7
TLSH
T19931254E4AD15E0FF894507B1967B4F8737589404711B393A47C62399D21BCE1A4F0D9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 a6dccce306c6a9033e2bf92ddd3b5f1d1882df8c2e5240ead9f3ea8d5ad092d3
MD5 0b2fe717ec3161ea3a82deb63ce5b4b8
SHA1 ac1a4cb631f0bf239156598d0c62043278f740a2
SHA512 e63996c7699408c570ca0742868b0e379e9ef6e24a78dfe0b00455217bd55ba7c710509ba369bd3afdb312247020f08f321a3fca6a734bdfd954fcb0be01238c
TLSH
T168E0C0F72EE72880FEBF63E514B198A00241B45AD584BC8F2416FB8324613533406C22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 a5942791e8b478e214def5ff026b8e7625aff8a8a662eb815320d5ddb7950145
MD5 b66774e20a51209e706c939c37daad9d
SHA1 c24712dd4e4167dd0f1277b68443f56a7895f286
SHA512 8f49890ff2e0b0d3507007bd3b142aae0725a289fcff4729a3f9b4698942ed9f2678b32085283b0697c64d66b3e960224ccbc4a7349bd8f9987acb54aa8ba428
SSDEEP 96:KV9aKe0yG12KGQKQh0gS+yoW2r7gooK4tgaocII7aglH3gFBQ:JdFFQh0gS+y/2rEostgaHII7aglH3gFK
TLSH
T19B915326F07763413C3E690899548A264BC279773018A86F3FE811A15F2BE355DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1b68e8b9-7e6f-4483-a1fc-0ea15f0694f2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1b68e8b9-7e6f-4483-a1fc-0ea15f0694f2.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b34f6274d4644f8dbb63a9525569f13cfad36545f2594030cfec924757c60a32
MD5 7924dc9a54e889d3e8b9a767b683773e
SHA1 c30e80096989d5981764e147faa7bab05526c237
SHA512 fac3d2eba6d52b7c0c801eb6eae8c94207011c9a9679eaffc38482d008f7b44c90ea43e0db70e0357bc05d4251ff47d0d2039ea5190df072c2c23e63c307534b
SSDEEP 384:BtNn/s3n9SfsNL3rSbv9kg8kyv7XLoXLKG4QVbG6FkG+o:Bj+9UtmbsXLp4Q53
TLSH
T1A0928D3299386D6B5EE39694B54B26279FF4817BE6C53F58D9EC5B0C00DF2DC030A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 3c0e66cc5527c9dee87a7519c9ec7ec36dd68ad3f0951f7b8ffc07655415d4e1
MD5 be88ca1b5c046e8b309c9de957f40c03
SHA1 62a856b764e821be5e5aa62161a4111b4f88ad7f
SHA512 1081e65f000f9d75083d956a8b78fe62450dab34aebaf40320f04876e80173dab4220241730f02a0fdc98949cf4de6a28755cdbd6ecafed524ba99b9758e1279
SSDEEP 384:KiF1tNn/s3n9S72sNV8TUNTUlIlCrKF9kg8kyv7XLogLKG4QVbG6FkG+o:BF1j+9h4wg/mbsgLp4Q53
TLSH
T177C23BF244D7897BD9AE4B47B73E2E128EBCC167B5816A54B7D84A0CCC961BFC206811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 df01a79effef8edf723771a5f63e55f81a9ce529d6c037a48450bce7cecaa909
MD5 5cc268872e9b8cfd02ee91a72136739b
SHA1 ea572e1cdcf142cdb01fc15a4b9ca0f55b403280
SHA512 ea19851eee795bf224a51156530234fd63eb0c4cbd6847a3fc9a81f3b0db794e5e61bee9faac2e0feb1856b49459fb26cd99a7a44d70740658a04f25b388482f
SSDEEP 384:dtNn/s3n9SasNLCrKv9kg8kyv7XLoXLKG4QVbG6FkG+o:dj+9ZCmbsXLp4Q53
TLSH
T1B2928D3298386D6B5EE39694B50B26279FF4817BD6C53F58D9EC5B0D00DF2DC030A826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 94e9e62a84ccb18065096a43007097e4ce4d1da21cb1ab5883ef25846e2ee732
MD5 f152b9e7f61a870bffd9db88c72fa647
SHA1 b5e7f4a0810fdb3571e823f32d521cab47bb4801
SHA512 4a053cfacbad8c3c0ccb9f84841e9cadf828c48d4330538ad58f20baff84fc52b260385233023ffb7fae18ea377412edc00780e2d7084ca58b38476f570552ad
SSDEEP 192:gONv6kDfQmiUy7TZ9035jzorkbravWQipaU6:gONv6ghiZ9g8kyv0sU6
TLSH
T1C302EB3568786C7B8EF3AE09B44B27275FE5112BEAD52F84DAE8171C00C765C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5625dfb4d11ea42b79f76d020a7e7b19b44dad8f1abeea8a883bfa8032f5e81c
MD5 0f5022b2023a116e02ba685126a5a939
SHA1 5c2e1cba037ed9875c611c5937c3e15037cb9c59
SHA512 fc3f7ebe40a6f0a5e933e23888a84fa3550c38dab3d6e71e4ee8b961afa2d63fc21fe0f5b6ecf8d2320aa85607233c15533e5fb2dbef4412f6879d32563909d5
SSDEEP 192:/ONm6kHQmiUyrTf9035jzorkbrav7XHNNoEcRmqvU6:/ONm6Ywf9g8kyv7XLotLU6
TLSH
T1DD122C326878AC7B5DE3A955B44B32239EE54127EBC97F84D9EC1B1C05DF29C130A823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d16a0ac-bf48-4fed-abb1-b4c05437a665.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0d16a0ac-bf48-4fed-abb1-b4c05437a665.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 98341eb907ba1ca7d081041ce1031509fd8919f6441446fe56b8be77fce48ad3
MD5 241f8a2c8bc9fc6f53adfb4cea521951
SHA1 2ee2a33e01c6237089b6cafa049abaffa6ce8131
SHA512 8498cb7add98937740c19e072bf6b0d03c7cdba4b267a0de97bce5300626fede7bb99638e11786501c19c1c2e028e117033a97e8315f03eb049c8203e17d8048
TLSH
T13241365CAAED2058B3B66E5A9BF2B86E447E7D372E06D19E10110D8F0663A41C871B33
MD5 SHA1 SHA512 TLSH

Submit Download