c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f

Analysis

max time kernel
898s
max time network
743s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260706-3fca2sav4n
SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
MD5 edaeffe92dbfd973958c9d2267201b32
SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
TLSH
T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3376	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278543695620266"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{C3378181-29DD-4F70-9257-5BACB1F4D7D8}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe
2744	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2744 wrote to memory of 2492	2744	msedge.exe	86
PID 2744 wrote to memory of 3376	2744	msedge.exe	87
PID 2744 wrote to memory of 656	2744	msedge.exe	88
PID 2744 wrote to memory of 656	2744	msedge.exe	88
PID 2744 wrote to memory of 656	2744	msedge.exe	88
PID 2744 wrote to memory of 3936	2744	msedge.exe	89
PID 2744 wrote to memory of 3936	2744	msedge.exe	89
PID 2744 wrote to memory of 596	2744	msedge.exe	91
PID 2744 wrote to memory of 596	2744	msedge.exe	91
PID 2744 wrote to memory of 596	2744	msedge.exe	91
PID 2744 wrote to memory of 2760	2744	msedge.exe	92
PID 2744 wrote to memory of 2760	2744	msedge.exe	92
PID 2744 wrote to memory of 2760	2744	msedge.exe	92
PID 2744 wrote to memory of 2584	2744	msedge.exe	93
PID 2744 wrote to memory of 3796	2744	msedge.exe	94
PID 2744 wrote to memory of 2584	2744	msedge.exe	93
PID 2744 wrote to memory of 2584	2744	msedge.exe	93
PID 2744 wrote to memory of 3796	2744	msedge.exe	94
PID 2744 wrote to memory of 3796	2744	msedge.exe	94
PID 2744 wrote to memory of 1420	2744	msedge.exe	100
PID 2744 wrote to memory of 3744	2744	msedge.exe	101
PID 2744 wrote to memory of 1420	2744	msedge.exe	100
PID 2744 wrote to memory of 3744	2744	msedge.exe	101
PID 2744 wrote to memory of 5084	2744	msedge.exe	103
PID 2744 wrote to memory of 1444	2744	msedge.exe	112
PID 2744 wrote to memory of 3320	2744	msedge.exe	113
PID 2744 wrote to memory of 4708	2744	msedge.exe	114
PID 2744 wrote to memory of 4516	2744	msedge.exe	115
PID 2744 wrote to memory of 4516	2744	msedge.exe	115
PID 2744 wrote to memory of 4740	2744	msedge.exe	117
PID 2744 wrote to memory of 388	2744	msedge.exe	118
PID 2744 wrote to memory of 388	2744	msedge.exe	118
PID 2744 wrote to memory of 708	2744	msedge.exe	119
PID 2744 wrote to memory of 708	2744	msedge.exe	119
PID 2744 wrote to memory of 4868	2744	msedge.exe	120
PID 2744 wrote to memory of 4868	2744	msedge.exe	120
PID 2744 wrote to memory of 2512	2744	msedge.exe	121
PID 2744 wrote to memory of 2512	2744	msedge.exe	121
PID 2744 wrote to memory of 632	2744	msedge.exe	122
PID 2744 wrote to memory of 632	2744	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7fff659cc188,0x7fff659cc194,0x7fff659cc1a0
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,13649967493383443528,3214972276554202932,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,3652860373929732996,10979051915854297521,262144 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2292,i,16180717406271320095,9961649080180051758,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,5165477206597299347,11386794301225027019,2097152 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,3657589033387132297,13139146646372723404,2097152 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,14292617809285366616,11033207590749370134,2097152 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,4670079041836837063,9925642476819089620,2097152 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4628,i,12054350283689551358,15849498499312171870,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,7763044222564960757,17542514891976785154,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,10241834258169642214,7197529174853700739,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,10241834258169642214,7197529174853700739,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,6512123627274481426,3089859505458657790,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,12353297516413559651,13986681518573532647,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,9241857997610477388,15229086121476213650,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5932 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,12177004801079770685,9252919253519846699,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,14838966093756339625,5108154834611568039,262144 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,1987149340005130559,6216428699107556611,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,4696413961377388896,7677798244881263483,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,10283812758045967478,17139970275845379401,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,924469943813494573,1367074786035859196,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=3860 /prefetch:8
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4004,i,7171617448849377360,147494779308155870,524288 --field-trial-handle=2332,i,10432980133132515708,3020269323913263649,262144 --variations-seed-version --mojo-platform-channel-handle=1596 /prefetch:8
  2⤵
  PID:632

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

67320ea1-9f48-4e8d-ae32-aff72505c38a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\67320ea1-9f48-4e8d-ae32-aff72505c38a.tmp
Size 19KB
SHA256 d66f2154ce91d27d98335a5aa9a1601c6c540f5b4f278f8fb887a19565667e8e
MD5 ee3877115d4b8367b8200b2f3b20cce5
SHA1 ce90797436da45743c2a933960303f19a352988d
SHA512 e35f50f35cac8d4b47b16b41af6cd63cabdedba8d848941a8d48f88293df73554dc1695564ec890ebdfa84ce2c4c8ef20abb26a6f737d76407f7dbb30e2fbcec
SSDEEP 384:ttNn/s3n9SfsNhJoknAbzwmn2VGVOObjI9G6w7TO:tj+9UIAYsbV29Mq
TLSH
T1F19290369C695E368E939551F08A361B5FF4817BD3C42F44FADCBB0D06DB2AC5312506
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ab98da7535c8de464335204ae97fd672936e639269325c3a388b3039d8396b83
MD5 1656a3560c7aeae221756f3891b89fd3
SHA1 e48441fe2b843ba3bd0bb7799c07b22a27db8eb7
SHA512 c06d7152d11e33601716d4c5c33c7373ac4e0c16571e80ac4a8ffb9cabb52fae51d4fe8d808fc75be943287b55a320e90a186d71a5f06e9db006f6ab89266400
TLSH
T1CFD09B307B597042D3074031E8074790169E84B5249B86066554410D7D5A485E3DF547
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 f7fc6e0d900a6b25a8de83801ee0c3e6ea351875e1c2e40fb80f9ba3572d721c
MD5 c491d5b1d4c9f8ba91648d6789ef649e
SHA1 a28e05c082759cff9760b8ca0b491e534a66a838
SHA512 072388dae0f88f0d5db982cbbeb064c431441d58d886aec19bdd4e1b7ba0539a3f476d73186116a52b0ee49b2009c38f7963aa05cc1fca4c121480f98ebc2c10
TLSH
T1EFE020C703E8E99415529547C45B631850D0B6D9ED4CC4D63F6E69AC5498112CF828F6
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a3cb7b4b2627f2ddedf299bb059392284c4a36a5710271f6049907fb562eb4b8
MD5 bc37c42b6d3cc73a2efa9842c0e94750
SHA1 e3c43c70298ed9c70eaaffa761627aac74c1271a
SHA512 f80cac96f834ba52e7ec0e069a723a38cab10125901c2622cdb89e6c80885f2150230fb13173617d5e04ae3518f2c8e42394e8e015eb6a9664162a73fb4180ce
TLSH
T19FE026E507C8C27EA711644B426C770C92E43B6A96C8A90A2704888C7001090EFE6BF4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2f75372ead4e42e9d5e376c894c9080a5db42a93cf23b2dcd8010e5fd2d9b7cb
MD5 5c64d38f96cc4af8c4372f4ed11473d9
SHA1 d3886dbdc35d8059514f80b2ffb840f6ba8953a0
SHA512 62c5a3c153909452223387df4eca238ea5d79ac64619436b965290e5407f4e0587dfeddb809c5d203cf25a83e6459e7fa3c6d5a819117197b204033c1a9ded5f
TLSH
T1AD615E3C09410465F3624032AFE16E1ABBB383E9F61F6DF195906B7457F57D3C159428
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 460e2acb39f12bd532179f7a51df0cc7c461c57735f585ad7e881d360292bed0
MD5 51f7a5ad957ea2db1f943dbd740a9575
SHA1 1ca7274d07f8b1f383ac5f9fd3a8c3585e78bb51
SHA512 a1c7412dd21bab2d67a5c3f78272c70fd51733db6679e8b196cd5af087daa455e55dd973f4c86f0bbe7aef578a83bc5d517d4d2be78766197e16e2629fc835ac
TLSH
T1AC21BEF383E1856ED91146F06A24BE1BCE1D0501422C3C598AE4EF1793E3075E00295B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 13e5d76086d8f2a32dcc863dce1456454ea1df2651a91f7bc49b39f1f927602e
MD5 a63059b1b608b47d3aa9eababa563c3d
SHA1 817e126e95c0011237ef1352eaca8902e2e8f52e
SHA512 36203b20e7019eac3999d8a09bf121203c644090c8f6ba66684d2a0af170d8754e60f2758fffe22e8c9b126147f98e8febe28d413c858e3ec637f982c2f5d33d
TLSH
T12C21A0F383E585AED91156F09A28BE2BCE1D0501831C7C6A89E0EF57D3E3075E002E5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 bbc65c4069b9a7cbb4ac574cc616f4cc5291918958add1e2fe02ee7a893833c3
MD5 f84d5516b39565e870b9d48b8d3ca448
SHA1 db30e3937160159c3577346600f4496b4413393e
SHA512 9eeaddbfdc0b48701a2adc4c74b40b5f4428878c8a096daf5d53236a9324eed1f923173a9cb070d56c678d01d7b52886a3ff9208fe1f0599842150630d23a9a6
SSDEEP 192:sxZ8R3kX/fCsVxf9BiIdpd2HW6+WNGYzQmteIgrJ:sxZ8yX/fCsVxF5sHbGt9
TLSH
T12422B7126E38A53B8CCBD209BA15BF53E6F95032D1951E48E6FC961C05E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 26d8009340e83ad272b7d5648ff05ecd24e4bc988268ece065db2b4703653cbc
MD5 00f476ce9fef7ba20ea763587cc63951
SHA1 518f983cdb47c07d3fa4a3b79c733d999cd19fd4
SHA512 eb657b7d2866bf416a630b8748ea3f0bd748b72cf61bd60872b34980fd9e8eb55a9c9757c2679f26bea79d2497577f76da8b9e98bdc6ba1d6b9ca858481c7061
SSDEEP 192:sxZ8RNyM/jK1Ml8MkX/fCsxxfYBiIdpH2HW6+WNGYzSNVeIg5NJ:sxZ89MX/fCsxxw5WHbGMd
TLSH
T17A52D616AA345977CCDBD209BA44BF53D6F51462D2901E48AAFCCB0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 b21abe040b9d42652bab8c147cf50bcaac778624952b1935dac5200fb44d4065
MD5 4aea479ff57763e4eb92151a7d210fff
SHA1 6b9dab5e4c979ab8c562cdf2ec8d8698ec1341b2
SHA512 eeb31fb5d1994ba757a9650e737b2d084669f3f56625a71234691e2c0f824047d0a175b4c16a06baa10d56bcecf9d8ae82eef6d04f728097a6abac970a909aad
SSDEEP 192:sxZ8RNyMqZjK1Ml8UQ94kX/fCsxxfYBiIdpH2HW6+WNGYzSNVMnIg5NJ:sxZ8qqBX/fCsxxw5WHbG6nd
TLSH
T12B52E8166A349977CCDBD209BA44BF53D6F91062D2541E48AAFCCB0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 427f34173fab61df6e257fbfee6e1da66868420a4b133488b71530549d35d354
MD5 3c16d1be7e36cf20ea8786d84e5f536e
SHA1 f5314e1a060222eccbc8e56d3de008bccb6bdceb
SHA512 db52f88f59866832b857b3786456df9a9168a33f65241ee239e4d30c66ddc3558651959ef27a0d6fe3cd725c6e303471f7ba564ec1a84f31b38c600089724d82
SSDEEP 192:sxZ8R3kX/fCsxxfYBiIdpd2HW6+WNGYzmCteIg5NJ:sxZ8yX/fCsxxw5sHbGzd
TLSH
T13632C7526E38A93B8CCBD209BA55BF53E6F95032D1951E48A6FCC71C05E7BDD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 947eb344d29c5e0a9a05ff7fc2a0e41fb813f41236adb2e2a3533a0a9ecc0fc3
MD5 0af4526094304246a86d3a364cdf79b1
SHA1 2378bdbc3788d08ad4bb494f37f06b550862aadf
SHA512 4fefdb380c696d9a82801890f68405d27a0f329eeac57fb4640d9073c1ad6920e3ca507e1bd4a7c80146a3c1dc27f09a70b2cc6065fa41371ef5f747ab5d8f4b
SSDEEP 192:sxZ8R3kX/fCsxxf9BiIdpd2HW6+WNGYzQmteIg5vJ:sxZ8yX/fCsxxF5sHbGtb
TLSH
T1C922B7126E38A53B4CCBD219BA55BF43E6F95032D1951E48A6FC971C05E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f8db1462f711c2f7c84efdd765d7f4675b066929bf70fe3b0b073829cfe9b977
MD5 eb7d098cd2134629b9a30e7afb3c8411
SHA1 6f7acff306d6cc40c0a055df98802043cd603628
SHA512 8a57b3b1814713a34823019c4f45aeb41c8d91388e15c80da59f1291a18ef8b0cf549e51d65d3ab9f0dc9faed52b542da63eaa9cf27efde9f7b16a3e42f1ef36
SSDEEP 192:sxZ8RNyM/jK1Ml8UQ94kX/fCsxxfYBiIdpH2HW6+WNGYzSNVeIg5NJ:sxZ89qBX/fCsxxw5WHbGMd
TLSH
T13B52D6166A349977CCDBD209BA41BF53D6F51462D2941E48AAFCCB0C05E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8450f4bc2701a4b7793e742b685f93dbac1dee3058bb1fb9e79a8c8a976633c4
MD5 f539d97fea81bebedd826eecf97966e2
SHA1 7384a5e52d70ca198c772a935a61aedece32f85e
SHA512 7d484611cf7b64a7f6209345654a0d9b0fe54013eee2604126ddcef704d3316916669f05248be38f16d6b8187ed118786f621172112b11da4fc4e865fe6f17b3
SSDEEP 768:aYk7u70WvqiEa8F1+UoAYDCx9Tuqh0VfUC9xbog/OV35LlWYSBFroyjYF:aYk7u70WvqiEau1jai5LA3B+vF
TLSH
T139C2EA3B740CCB7E4F801E9DAC566F977E9802C7A6988D4087FA994C02C77EA51264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 a7e4008e75cdfc7081252dd2e77cf1fda6216d98e000f40441f7ba98eeef36f2
MD5 69763ce840c33a861350aa7f8b025cec
SHA1 3c35e5166eba88b5cadf57b195ecea5a6382b3a5
SHA512 ce56a031ba410599b29d4a32ae537bc951748e4675aaa464dca8b67d9a81f533e613293a4e620efae9249a2edc86621747aae78cd7642d2502a91ddeeee333a6
SSDEEP 768:aNW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjFroIqirY2:aNW7kf0Wvqidau1jaa5LA3j+h2
TLSH
T1ABD2FA3B684CCB7E4F840E5CEC266F966ED801CB67988D5487FA884C03CB6EA51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\temp-index
Size 624B
SHA256 9547dd7f011ec9b99c76e90cc2032bd8089ab0d4c200efc1f7faa3136be6cc6f
MD5 0f879c1a0f2efa7d71a5bfaf67e6a02b
SHA1 9b6cc986c6ea406535a53fc168061cbc0d0e350c
SHA512 7fa8a617e9cbbe8a731ea47a80713f51a07d32eaafd6dd848fbff13816c6b5f2b8509d800691e728d5a66c22dba314007e7706a3b32da5ac67e7e729b828abd7
TLSH
T1C5F0DC154FA2E92ADB6815F314FA20E53370DEDC3332C467842C6D6A3C3B28CA42A1C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d0f35.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4520dadc-db5b-4f2e-9026-0b551f142464\index-dir\the-real-index~RFe5d0f35.TMP
Size 624B
SHA256 34185f1552d250ee30093fe10dd3be48562cab99b3db0d84c32cdbf6ef67c5a5
MD5 fa0451ec1444d683f2a91ffcff41671b
SHA1 5b01199179cef432c1914081189968fef0a11f01
SHA512 0de2c68b5d098c10b77781142b43e5f7d1c0bb89d26fa2901339b3eca7a6df7cd20a85f89852c7d13dfaade7af5d4a767d0e94a3bceae8200953b61eb48b3bc0
TLSH
T1ABF0239687D29D53EC14097208E800E5B330CE007237E4935079A92E2C3638896120CC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 72885b16897d3fe258e782b368a5c6c0cb870488057f56265f3fca54cd37d397
MD5 218f4d2fb50c25839c2597edd709b2e6
SHA1 340be037905aca2b764c5d5afb192d1565e685ef
SHA512 735280103ec61f0b9e815dabdb6d0c460115c8c61d6212dd730ee97e0d561a4704a31b1f15ba656b4bfd9c9bf29bfc4a74b8486ed94bf13493446d9c0512befa
TLSH
T1FEE068BB2DFB1820AD6F87D138B054A081863D18C900EC0E302BA28730F23512406C32
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 55e1c9cbaf19c0b5cc86ad306afc55ff2c97d1944ce5a2820932212b577bcba6
MD5 79462ce0fb694d2fef28765cbd1ee663
SHA1 f7f913712b0376884b1f0cdd01472249d8e0a476
SHA512 4fe26914c635844aab8c6e0960c0c4256eae1de952b8d188c50edcff415dffbdb95911bc8f59d438957ed4f5528d92d4f515525acb8eedd61c556cca1d880d46
SSDEEP 96:KIbCKc3MIKZqS2lCKek6stY826ucWKHHgEcK4JgOcl:sw35NstY826uDKHAEgJgOU
TLSH
T168914B1A317B07013CBD2C489659C5365F4235A73498A8AF7F7800B64E6AE128FFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 688108426a1c207dd3b6fdabe26da0aa25e0b7b0d9d038771144a8bf4ecc9bdb
MD5 5fcc1e4037d18c382d606c9029b6e01b
SHA1 b1df81e32c4c80baf7f85a0e2b93614a93edb553
SHA512 71e113a1ef23b9cc9d5fcf503f1740bfb0b67053ba47042933d1a04424c796e35afc2ce04c81ead6e0a0c46b92f9734dd067f60589648ccf4ea6952ec8658de0
SSDEEP 384:t9tNn/s3n9SpzsNhkoknAbzwmn2VjVOObjI9G6w7TO:/j+9mRAYs8V29Mq
TLSH
T1DE929F36AC699E378E929551F18A361B5FB8817BD3C42F44FADCBB0D06DB29C530350A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d96d209365b5e55ac072f7f4386171ce22a49c7744d47a727deac77137094b4
MD5 575d92a3de003bc86533fb7726bc1231
SHA1 28c04836117eeef317e3dcaa06ecc0c16d7f5fb7
SHA512 75d0233fce9e6ec6aa023cbdc7624d2a961b4f35aafbeaf9b257bad28e5ba59beee71c42314c8fa1804dace152396939ebde5e4a205b602ada051451fc9d2987
SSDEEP 192:MONa64BAQmiUys1SW5GBPKScC2567aDqlphU6:MONa6eAn4WE2BGU6
TLSH
T15E021A39AC796C7B9EB2AD05F58737175FA4117BE6946B40EAE86B0C00D725C230392B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 e96e5706410df6370c602affca16f7f1ce48ee9e2e9296b4ff53fa34537b1a5d
MD5 34b93b90e55a6139f26348c8ff121916
SHA1 945d37db23303be8515f9fada3b3adbac20794d6
SHA512 ddbd4d599f47e9e56e55d389debd37a725b7c61746ba5aaaf06ec342b1d5265f564c54b9aa04b7a5913fac2ff41d2b439b4492b8acf91c7e90829f06f53414c9
SSDEEP 384:ktNn/s3n9SfsNhkoknAbzwmn2VGVOObjI9G6w7TO:kj+9URAYsbV29Mq
TLSH
T14F92AF36AC695E368E939551F08A361B5FF4817BD3C82F44FADCBB0D06DB29C4302606
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9faa341f750436c4d65da71bdfdf289f9667ebad0ad1f1bec43331e8d656b892
MD5 1b29c0103e1c343ca0317839c4d0e888
SHA1 ee15c191a697d198edaf0c639e97fdfb9b7f2735
SHA512 6694e57e2d7e3f199e831312f5fa75f1e0effde8eeabe463138137fa36d6702d19b87483c9aed7f39fced36edd9a51e9adda6de47f110e8bd775060526750a93
SSDEEP 192:NONE64B+QmiUy6SrG5GBPKScC256bePNgWwqgq8U6:NONE6e6uyE2VGVU6
TLSH
T1DD121B36ACA96D2B5EA2E541F08637075EA4426BEB88BF40FADC771C01EF25C2307517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38142afd-301e-4a8a-95ac-dc441bc6c782.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\38142afd-301e-4a8a-95ac-dc441bc6c782.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b220fba9c6b8743c39c4594839bbbf4f48be2c6261036fe4a9d6d72edea30453
MD5 48dfd2c9266ad4cf5c000aeefe28fe35
SHA1 1cc8667fefb5d72b394fe3e3260aef8339fe1152
SHA512 c5cb3608ee3a16bf823fc22222af0d138f2fd63350a8c014a749e354a526b571569ea804c2c13cbd8a700ee1efb16c06fefe835216a06cfe2c977d029755e75e
TLSH
T1A3410658B6EA1148B3B76F5AABF6A86D447E79373F07905E10010E4F0936A40C971B33
MD5 SHA1 SHA512 TLSH

Submit Download