c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f

Analysis

max time kernel
898s
max time network
746s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 23:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 8.7MB
Sample260706-3fca2sav4n
SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
MD5 edaeffe92dbfd973958c9d2267201b32
SHA1 ae43e814d3eea2ff27bb414c9e26ecb1b5c0341f
SHA512 d0e58cf4bc9db25982d726f1ba65924bcef8fa405f06f6abf0ab80177d691805ff228039c5a85c3a8029e4422fd50c3d8e84bc6528771092c79e3d5229f43281
SSDEEP 24576:2o9dQj6p6j6j1WZswRiXj3mfI/6k6mjK64jK6gjK6e6cjK6feGjl8LpH:BWVeG2
TLSH
T1E896A52F7B48037306C642A26B8B65CAF21F903F3B561654345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2220	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2626306573-1585762579-411806764-1000\{E7C4071E-08D6-46CB-8C17-F3DA1EEBF463}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2626306573-1585762579-411806764-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1528	msedge.exe
1528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe
5560	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 5560 wrote to memory of 5860	5560	msedge.exe	87
PID 5560 wrote to memory of 2220	5560	msedge.exe	89
PID 5560 wrote to memory of 5088	5560	msedge.exe	90
PID 5560 wrote to memory of 5088	5560	msedge.exe	90
PID 5560 wrote to memory of 5088	5560	msedge.exe	90
PID 5560 wrote to memory of 4716	5560	msedge.exe	91
PID 5560 wrote to memory of 4716	5560	msedge.exe	91
PID 5560 wrote to memory of 1560	5560	msedge.exe	92
PID 5560 wrote to memory of 1560	5560	msedge.exe	92
PID 5560 wrote to memory of 1560	5560	msedge.exe	92
PID 5560 wrote to memory of 1852	5560	msedge.exe	93
PID 5560 wrote to memory of 1852	5560	msedge.exe	93
PID 5560 wrote to memory of 1852	5560	msedge.exe	93
PID 5560 wrote to memory of 5000	5560	msedge.exe	94
PID 5560 wrote to memory of 5000	5560	msedge.exe	94
PID 5560 wrote to memory of 5000	5560	msedge.exe	94
PID 5560 wrote to memory of 4152	5560	msedge.exe	95
PID 5560 wrote to memory of 4152	5560	msedge.exe	95
PID 5560 wrote to memory of 4152	5560	msedge.exe	95
PID 5560 wrote to memory of 2308	5560	msedge.exe	97
PID 5560 wrote to memory of 5700	5560	msedge.exe	98
PID 5560 wrote to memory of 2308	5560	msedge.exe	97
PID 5560 wrote to memory of 5700	5560	msedge.exe	98
PID 5560 wrote to memory of 3544	5560	msedge.exe	100
PID 5560 wrote to memory of 4088	5560	msedge.exe	103
PID 5560 wrote to memory of 4008	5560	msedge.exe	104
PID 5560 wrote to memory of 264	5560	msedge.exe	105
PID 5560 wrote to memory of 4864	5560	msedge.exe	106
PID 5560 wrote to memory of 4864	5560	msedge.exe	106
PID 5560 wrote to memory of 1528	5560	msedge.exe	108
PID 5560 wrote to memory of 5540	5560	msedge.exe	109
PID 5560 wrote to memory of 5540	5560	msedge.exe	109
PID 5560 wrote to memory of 4744	5560	msedge.exe	110
PID 5560 wrote to memory of 4744	5560	msedge.exe	110
PID 5560 wrote to memory of 3880	5560	msedge.exe	111
PID 5560 wrote to memory of 3880	5560	msedge.exe	111
PID 5560 wrote to memory of 3032	5560	msedge.exe	112
PID 5560 wrote to memory of 3032	5560	msedge.exe	112
PID 5560 wrote to memory of 2508	5560	msedge.exe	115
PID 5560 wrote to memory of 2508	5560	msedge.exe	115

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffcb428c188,0x7ffcb428c194,0x7ffcb428c1a0
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1876,i,18085661736617583564,16028769337167607324,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,1457749165407246552,2838109198922192178,262144 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:2
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2280,i,10378117412523552793,2700468158323411260,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,16944052408011191371,5909296361953187827,2097152 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,11825500702524275032,11912558160678424743,2097152 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,7410778305886637363,12456283138866597873,2097152 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4256,i,9417158046699129400,16560449365621558915,2097152 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:9
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3500,i,3058931715265846906,4521415785051256786,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:14
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,10931477423659239149,8418658629734123906,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
  2⤵
  PID:5700
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,2819862404102002600,7226842066622190047,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,2819862404102002600,7226842066622190047,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5884 /prefetch:14
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,10458095166121226229,5989770678976813496,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:14
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,12719794203188957246,10899165485609428074,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5884,i,14857126977094219823,15677057903462172596,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3128,i,3136638252616622654,7278099203005757886,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5520 /prefetch:14
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6456,i,13205517065757410134,7782094320723724222,262144 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3668,i,766471947555745282,6310184107024692976,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,5516148898766605934,17367359005845921738,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6572,i,10871562326473471902,4839665628846685675,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:14
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,1245925872586114556,275217475079491532,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=5328 /prefetch:14
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,4026519865331959245,13854292247285435750,524288 --field-trial-handle=2720,i,16729434585237402809,11755333788209587328,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:14
  2⤵
  PID:2508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:984

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6036

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a54d1be6da491be16ecc22dac3ad8cfbe4eabb017451e32c26f2904977fde58e
MD5 9daa45ac0383b3b978ad8da2d5000b62
SHA1 f52083ce5d095366a6fa9406b8b49000fcb53bc0
SHA512 ac55ccfd63460f712cd2ffb1ff656349475683b1ec07abd198254ac469a634f7129cf280de184340d8314fe2b8f7e955f7a112deb1511d52de882ae801a7c1af
TLSH
T17DD09B9D6686AE54DD80343134A1E34B9A18F522642C464880177054CCA464246571FF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3f51b0e24e52d8511f72e348c132f84b6b8edb54027a5c8c4fbe2a976322a690
MD5 e32f775acc5ed08adf9d5f6678c2bc4d
SHA1 bd5f4d60c6c8f97a1fed276a8c02ca345e30bb2a
SHA512 2b2fef021516ee5e90b192840780767fff5c147cfb2dfe5b900a8b298d542111707f16c28e265447d090c61e8e091b3529eb29ff376abe03cd34315206805eba
TLSH
T1DAD09B996686AD54DD80343534A1E34B9A18F522102C46488117B064CCA464246561FF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 ff41ee2411a90f1f4667949eb05ccd853c4e130b6f901fda11083b2eaff8bd27
MD5 9bc3dfabe8a083ef0e601e145fc81f69
SHA1 eda7db90586f5a3417e42539fff3893fa9c62c49
SHA512 e874c877cc6543cc650a3e4dfcf9dcb8e3cf2ca707b5115a8ad121f9f7c92d63398d44beab7929e77ce338e0e6c77aa468c5c042b924a144ce442c6f9eeef63e
TLSH
T17DE0205F17DDD19545019547805F6758C1E0B7AB974CC57A3694E47C1441042CFDD8F7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 830cdeb94e4a70af0cadb8c37f5746eb2302bd93e7e8f60efa2866c9e4ed5e46
MD5 0118c5b89977bb6fd1f170e6e1d18680
SHA1 c825baf5d908d154271a7d15d9072b50a3c9f876
SHA512 a44524d85da7165071fdab734d936a139878d403f4afba87d459a6281cd725dde62f230e34c58ac1550a872a083fa79beb0c956a32afc651c2b8e87eea804c96
TLSH
T169E020E546C9E25E9500A5975174734C82C0379BA2C4B945171484487043844EF83FFC
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 274B
SHA256 dd973a468943b0d42af7837ad8e1ac7703212e435e057a09803462826a1e696f
MD5 a088fa2aac9fd996a679c9d24b35929b
SHA1 adae9d1c9f875fd8c32f9300887e1bcced07e55c
SHA512 4884a6d213d6aca5941189adb38d68ea3a45123eaf30073ee145fc306f0cbef37db12aaab71934912772c10bccd247840bad0f45c4577be68ba506e305562fba
TLSH
T193D0C2B9A49C684ED2E01AFDAA62B0400F6057D24426DF120211F8C136659F01B6A024
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7ff03881cbd472d8da53e7c7ff3fb715c4770e1d7b998f1fcf0c9c818f4c432e
MD5 29f2d9a3fb3fa6df1e97b6bbbeadc467
SHA1 207fdf461362ce8a30397d6ce2034a09d038f089
SHA512 e163e46ac13c76fed3a8537d0ab28be671a9c5536b74590b907422988e56d9c091dc20197966425efde4e22a28068f5854af5e93263fd3e4bdd917e67d03e83b
TLSH
T11751A6A4233A67D3C7709F7137E1C1AC3636D25A4047AE1E9168DA7E4B073AFA24E311
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59e296.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e296.TMP
Size 2KB
SHA256 e1c0d32f4e442d0e401b081e9bc873acbc735517e7b80814e326a3cc3ba40f04
MD5 cf64a8e377cb2c16c6a6944cfff8b3d6
SHA1 b969cc6a72d9e55319287da974df95b38e4d9539
SHA512 1b72fbfe8e93437711b1538abf8e5433cbbdcc86563eadb2f7e3e23900cac96c8a035b79f07e99381718f2f27e8268e7e99b93e67be28b53dac59f9e68627168
TLSH
T15C51A894233A67C3C7709F7137E1C1AD3636D25A40475E1E8168D97E4B073AFA24E311
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 22486455fc3df088fceea8c683721d88833ccd3676d1772fe2921c97e997ebf5
MD5 8a901aa8422a404582a0fe16cad0a38e
SHA1 e0b071d7374dacb5f12902dec65fe34f41267cd0
SHA512 31df405c4617c1cb23b8d1aee767513d4fd452c4c69b4d59da70618452702d071bdf45e36f168107d6ab585af10c5dd139af62971b48866260bd6df50aa116c9
TLSH
T16241ADF783E4966EC91196F0AA186E1BCE2D0915432C3D5A89E0AE1BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c0b31857167e672669ceb67058a2b65bbf789c93965b55de583abd9fec12c487
MD5 df3b753a5b3c11f0aa8a99a386989c2d
SHA1 bc595444b50273b657f612a08a255f5f6b2a6448
SHA512 6433a25325498544789245b7044e06c0aa3b5bff756e470398c77805b9067e5e93ad2a68c05197df4062113de7c9b65216d77ab0389d502c2a4215d42bbac52a
TLSH
T13C41ABF3C3E4966DC91196F0AB186E1BCE2D0A15432C3C5A89E4AE1BA3E2475E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 3f4af6b75bc5cd08759e3f01ddbc7861d069319fb8a74383e394007431139a77
MD5 c9d02bc40d1076c0adbceb90568efd22
SHA1 5d81543e645055ef2f488fc0817e871dbd9db8ab
SHA512 43511f94f95de176e481a2663b83f338a570a620a7681d4829bae2ec4f25352163e10b2fae63b04a703a1885b5e11a472bcf7cf1bd20cf59597b5d75a1e246f6
SSDEEP 192:sxRGR/yM/jK1Ml8wb2/fPs0Mce3mU8xlzoA8p4T/g6+WNIYDQs+GHIgIJ:sxRGLl2/fPs0vk8xIq/5IGps
TLSH
T1B352D8056A38997BCCDBD209FA517F53D6F91573A2901E44AAFCCA0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 948019c686a29229a6f867ee4334c0f636296644d042b9ea3449b72b6141d463
MD5 fbf8ba7e5f42cf11ebb8289c27993202
SHA1 fc6a8a30415b8dc7996a5ce39d8bc5c59730445c
SHA512 eb7977aec6d8988fed9bfe97e7759d2870068b13279ab44e8c8b3d68e5598e53356008dd36a0ed3447b7e45e42e41b01d93df75490d78c80565df5a51ff81e20
SSDEEP 192:sxRNR/yMqZjK1Ml8UQeb2/fPsmMce3mU8xlzoA8peT/g6+WNIYDIs+GHIgDtJ:sxRNEqA2/fPsmvk8xIs/5IEpr
TLSH
T13A62D8066A389977CCDBD219FA55BF53D6F81523A2905E44AAFCCB0C01E76ED121382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 98b0ce3f9d9f7d28a64144c0c7fb3f56730bc404a2ee749c81587245ae29a4eb
MD5 a138ef8ad4e6fb833ed5097599d10927
SHA1 8b5ac835a4c0e7cff7ce2d04bc110284c6173a22
SHA512 f6e7eb3286808496f4d20315a681aad66dfcfa8e04be04ecaf97c9f37a06159394af4f72d9ab15c42b91dbe02b756e6ddf07513b13a1a0e9fece43cd91537098
SSDEEP 192:sxRNR/yM/jK1Ml8wb2/fPsmMce3mU8xlzoA8p4T/g6+WNIYDQs+GHIgDtJ:sxRNLl2/fPsmvk8xIq/5IGpr
TLSH
T1F652C8056A389977CCDBD209FA51BF53D6F81573A2941E44AAFCDA0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 2daf28ec6864c814b37a406ee8a1a03a636d28920c30e680c4c950ea79ee58ef
MD5 0e92d07c71bd970760e2b74d5419d6c2
SHA1 4f74b205d83fae1c7fcbd378091aceb6cc376595
SHA512 6310c35150ff4323d5fab8c0a4f861e88b68cdf40a078dbdd1ab836c4b7b77f3c046a11b516062439b7117dd5a3cc9d3fe0f80c833cadfc81e728d4d4aa9be97
SSDEEP 192:sxRNR/yM/jK1Ml8UQeb2/fPsmMce3mU8xlzoA8peT/g6+WNIYDIs+GHIgDtJ:sxRNLqA2/fPsmvk8xIs/5IEpr
TLSH
T17C62C7066A389977CCDBD219FA51BF53D6F81572A2941E44AAFCCA0C01E76ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 19c1fe442be518c1d40ae401b13feb69ac84dc174ab1dd3683682c2b7100eea5
MD5 004edaa9666eadcc250911b74e82339b
SHA1 f0a3683dfa714e75a8bb0d564497f0669be3b364
SHA512 fe644ad46ac8b281bc3cdf2b5499e3a4e734cea99e387332d5f1ab7fe2b0225d024ab36f4effb7dea264e863752090430d793f58910e01857a9f030c34be15fa
SSDEEP 768:f+4+IDWgb/fPI8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOIn2rro7gR:f+4+IDWgb/fPIu1jaPw2Y7gR
TLSH
T183C21C2B640CC77E4F444A9DEC29AE966DD801CB9B988D5447FA890C03CB7EB911B4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddd891be-e425-406e-a275-cc54897d1741\index-dir\the-real-index
Size 360B
SHA256 259fde8f68376c93abd9663f2172623956d53927560717a0662e93b853f664fc
MD5 c6806757d1962fa2226fad1fc6222fdf
SHA1 013b624b70c6efe5e335630ec51046d625229092
SHA512 be5595a6e296b1165f8c54f13db8c044e3e70f07a034ca86aa595b8c1cbfc85121169b4565095370b21ec47b14234ed2b51acf8bd234be60b2df92fae3f83051
TLSH
T128E02B95CD511957CA01127D09F6541D233335EE37446B13146D653DEA4753CA118348
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e22c8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ddd891be-e425-406e-a275-cc54897d1741\index-dir\the-real-index~RFe5e22c8.TMP
Size 360B
SHA256 2f58343bc39665f5882b210b96412998ff43d5561dd044cc8f213f9d0e7cbf46
MD5 23e0ba4863401edba1dcfec99a4da9c4
SHA1 67bd0e623d00832a45b249442df6e547339ca1df
SHA512 41e7fd0f5f807476dafb55345d177138d670ee2733e9565f60ccde00d35d89929e447eb0b9be678f286171f63247ade05c929a88fdb1f9e1f89ae3fa5d16e374
TLSH
T118E097D287403FA3CD0213BF0642A80D333334B92A489303045E707D9A92BBCA509349
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 249ec215464c5fcba70e4b2ae7055a68415db507bf71c4a2f5006e2633847277
MD5 72eb52975098064095434e34ad5596c3
SHA1 2194a56fbddd5c2500d8c56537fdda8750df75cb
SHA512 093cab8e28219a245902432925000dc7da5503ed227d828a490a2b1f6cecfb9c9a51fe8c9c45de3ada434dd96749ed936bff892b43cc465797469c816b9d3953
TLSH
T122E0DFBA2EEB1C24ECAFA7D6103154A581413C958D88AD9F141AA7C758B2321A89DC26
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 9b0f08b7c2fb88e34769fcd2abf1ea59ab7411b0d97bcce494605ede0b8bcba3
MD5 417e7860d217b11cf92ec724c8386b67
SHA1 6c6d9ef67527064eaa7503b134b7969a7068057c
SHA512 5395ae3c7cc22983a75f034f8aceb3d9e9135e4b014d4751aae163cd1992a0012bac989732939347ccf782652907ca9eaaf0ddd7963df46fabae7ef5a1901d78
SSDEEP 96:KR5WnjRzHDW3EygrDK4aglDcJhKtZ+HU1gkeCGEWCPvgsEK4hgmEcEkveE+zC+4U:C5WnjRzHS3EzrZaglwJhKtZ+HU1gkeCJ
TLSH
T1E191411831771790393E6449C1A99D67A2C170B3340AA52F7BB901E21B27E568FFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

9d7f022b-4d33-4f68-8edc-6dd15802ebd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9d7f022b-4d33-4f68-8edc-6dd15802ebd8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 92369b183b7a4aa3d75e1e581e9bb5ad6475a883dd805be5e6c77b9836950984
MD5 4c725c48d689bf672eb842d0e0b9190f
SHA1 3d9e5e251d776c34e63e543f2cb4940f2ebb139c
SHA512 0f3d35cd4ae17dbaf85a808c1ea1bc2fd44fb60880f154e87cffcce951c63c75fb465b8b609abef259384fd813d318c972afbdb3010f8286c3ab1e4e1b2b5c92
SSDEEP 768:pj+913BlkTwifggQNgaHuVboPzkZLNx9OFib9Mb:0913rfDHOawZLNqob+b
TLSH
T10BF2AF3268618D33CD6686D8B24A3A87BFF01127C6C81E8899DCBF0D05EB56D4707926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 efce4a5a5e86c052f357fc3466a62d49a86b56bce3bae867d24d70362f454971
MD5 15f4422e11ded374d984c3284fffaa1c
SHA1 9fa2f0cf83880f5ed044332cde3a266b179bd165
SHA512 558db7fcdf508c83c88c1ea27cf3152a7049bcd70b0bfd7493b72384666e30c6f5d1b504e0a0e687e9c5f57b43b0a3f8308c7bd66c16bc32f065986caa01c4fa
SSDEEP 768:3F1j+913nwgIlMTwifggQNRaHuVboPzkZLNx9OFib9Mb:+913EXGHOawZLNqob+b
TLSH
T131039E736851CE37DD668BD8F24A3647BEF01167C5852A88AADCAF0D11EB4AC0707D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1a46ce47606ba2bd7b29e5872dd72fb90b29b19efe9ace0a3fb3e1a57091b1fa
MD5 adac9b1a645349cba1a03d35fa148c0b
SHA1 8c3b1d978172535f1d30db86c8937e3597f77e3e
SHA512 02aa1c775a0d9851357a4d0c1a20887c9bbb2789050f3637e8bec34d1f432dfd1921abbd0892d91ea47c6873dd588b261619d2fd4268af0b31a85db6e68f1f4a
SSDEEP 768:0rv+4UNbdC352lwifgg5aHuVboPzkZLNx9OZ3Uik4K:0bsbs35DxHOawZLNqNUVr
TLSH
T1B303BF35A8649D37DDE79289B28B7A477FF4201385C40B88C9EC2B4D45AB46D170BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de1d8dcf-a0da-476f-bf68-017fceb249a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\de1d8dcf-a0da-476f-bf68-017fceb249a2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download