62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373

Analysis

max time kernel
899s
max time network
863s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/07/2026, 04:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 18.6MB
Sample260708-e4js2aay6v
SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
MD5 0f6417e60719dfacf3524b61cca87e8d
SHA1 f2f4fa439dc120908a53965d8f292b00e51f7647
SHA512 1eff62954cf80b2ffaa1d676a9ee61c8da9488a327b458268f6efe94dfef5f6030ab11e9ad2df305de5a8bb05c4e2beb21e027a0a0c9ba3fc94a15ca9f85e5ed
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTDeQdt+lHx37DoB:i
TLSH
T1D617B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4452	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134279706038001428"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3575702013-381963388-2545377694-1000\{29AD43D0-E3E3-4895-8DF9-F770C615A91B}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3575702013-381963388-2545377694-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2648	msedge.exe
2648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1704 wrote to memory of 5756	1704	msedge.exe	87
PID 1704 wrote to memory of 4452	1704	msedge.exe	89
PID 1704 wrote to memory of 4928	1704	msedge.exe	90
PID 1704 wrote to memory of 4928	1704	msedge.exe	90
PID 1704 wrote to memory of 4292	1704	msedge.exe	91
PID 1704 wrote to memory of 4292	1704	msedge.exe	91
PID 1704 wrote to memory of 4292	1704	msedge.exe	91
PID 1704 wrote to memory of 5068	1704	msedge.exe	92
PID 1704 wrote to memory of 5068	1704	msedge.exe	92
PID 1704 wrote to memory of 5068	1704	msedge.exe	92
PID 1704 wrote to memory of 5940	1704	msedge.exe	93
PID 1704 wrote to memory of 5940	1704	msedge.exe	93
PID 1704 wrote to memory of 5940	1704	msedge.exe	93
PID 1704 wrote to memory of 2308	1704	msedge.exe	94
PID 1704 wrote to memory of 3244	1704	msedge.exe	95
PID 1704 wrote to memory of 2308	1704	msedge.exe	94
PID 1704 wrote to memory of 2308	1704	msedge.exe	94
PID 1704 wrote to memory of 3244	1704	msedge.exe	95
PID 1704 wrote to memory of 3244	1704	msedge.exe	95
PID 1704 wrote to memory of 2524	1704	msedge.exe	97
PID 1704 wrote to memory of 2524	1704	msedge.exe	97
PID 1704 wrote to memory of 5392	1704	msedge.exe	98
PID 1704 wrote to memory of 5392	1704	msedge.exe	98
PID 1704 wrote to memory of 672	1704	msedge.exe	100
PID 1704 wrote to memory of 616	1704	msedge.exe	104
PID 1704 wrote to memory of 1060	1704	msedge.exe	105
PID 1704 wrote to memory of 1728	1704	msedge.exe	106
PID 1704 wrote to memory of 1424	1704	msedge.exe	107
PID 1704 wrote to memory of 1424	1704	msedge.exe	107
PID 1704 wrote to memory of 2648	1704	msedge.exe	109
PID 1704 wrote to memory of 6112	1704	msedge.exe	111
PID 1704 wrote to memory of 1460	1704	msedge.exe	110
PID 1704 wrote to memory of 6112	1704	msedge.exe	111
PID 1704 wrote to memory of 1460	1704	msedge.exe	110
PID 1704 wrote to memory of 1620	1704	msedge.exe	112
PID 1704 wrote to memory of 1620	1704	msedge.exe	112
PID 1704 wrote to memory of 1596	1704	msedge.exe	113
PID 1704 wrote to memory of 1596	1704	msedge.exe	113
PID 1704 wrote to memory of 3240	1704	msedge.exe	121
PID 1704 wrote to memory of 3240	1704	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x264,0x268,0x26c,0x260,0x2a8,0x7ff940e9c188,0x7ff940e9c194,0x7ff940e9c1a0
  2⤵
  PID:5756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1784,i,4659362355504605954,8040488382029963453,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3288 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,13020367996118186897,2615135212980428910,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:13
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,4024729406596784941,1674960740466931978,262144 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,15046222577699595344,8473635637374839544,2097152 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,6959420128708259643,10148476071734224972,2097152 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,15090892600605679586,56579456568365914,2097152 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:1
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,5760174102346787978,4472289833183521508,2097152 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:9
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,5942078388034838211,3768762442935489255,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,17107875458763020722,9125336819905538944,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,11780500577788921607,2553999321648675622,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,11780500577788921607,2553999321648675622,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6276,i,1151386901695311887,12710799032644646102,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=604 /prefetch:14
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,16828058900317147217,10962217990106838854,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=4960 /prefetch:14
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,11639043651657881541,2312117632502506357,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:14
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,4004736771976425985,12455374705861689627,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:14
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=832,i,200179876388031336,16423599364406862313,262144 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,2451470402924872471,15968951258916790755,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=3308 /prefetch:14
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,8252076065007967564,277139503026775164,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5684 /prefetch:14
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,14328420092451586552,18240328856859234991,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,2510635238898113823,8236807198445677818,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,10184731521159556307,14741604856856861971,524288 --field-trial-handle=2316,i,5294243814781077376,7689781702310775826,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:3240

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4132

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1624

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5964

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5373dba236158f8b47a5d7b664d171a8c47fe1fccd7b9ce0e1bd4afa2951d836
MD5 94a2023674c565156f1a36186c104810
SHA1 86e289a50e37125a5f15b949883b1e7188e31934
SHA512 d74a13f710bdf2137189f88217902762a3207a2efa776e19c74d44824ac997d398c4d0995f1b45894fe98d29700bf2a4ab26ab89b59bd32b83e714bdb7d03691
TLSH
T115D09B747661D508DB40267265E55767F2115D35681D010C4041F16948557D106574BF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fff4f5462f00db2197bad3d5dba44e0ed82332400e95ccd8e5aacbd03ea21ee9
MD5 5de064ddd4c36dfd1714ea6c60646443
SHA1 48976457417008f63c629290b82b7fcabfe4a7d6
SHA512 7cceae45d0afd44ac6288bfcc0bb9265585ec202aeed97194d26f5a717e32b99e16c516c465e3a99e12146fb39abc1e5707717e4ab27a4263928a6eadc9da500
TLSH
T1D6D09B747671D508DB40267265E55767F2015D35541D010C4041F17948557D106574AB
MD5 SHA1 SHA512 TLSH

Submit Download

28462381-e72d-4b08-982b-7f479123ccd8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28462381-e72d-4b08-982b-7f479123ccd8.tmp
Size 14KB
SHA256 f660460e45a17200e3d0ac4e48929b0dd6cd1d54fe2d6fb0fb9ee1ed205a2eba
MD5 6169dba3c3b1afbff5e5c24b9aeb41c9
SHA1 2a612350565f83a8359504127ad02aeba5729a07
SHA512 47307a70a95fd481455d7b89ea1d15a58b9272ee0501add009077b27c6f009a73230ebf74522c86d7991722baa2e91d14430b605fbdf221273b996492ca83ce5
SSDEEP 192:sxRQRRkUyM/jK1Ml8wbk/fEsCEJXs3R3zoA8p4q/g6+WNIYPq7tiiGhXIgIJ:sxRQRLlk/fEsbx7D/5IFJ03s
TLSH
T1D152D8056624993B8CDBD30DFA557F93D6F81563A2945E44AAFCDA0C01E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6243621f040a9bf572d79a5bc07de9b409d55203c61347f2d537e609969ed3c6
MD5 ae009cd36a347e19facdc91d1b3474a2
SHA1 afd471adf989a4157ad260210ab0a77d48093d72
SHA512 47182c11abea2464a529498401523843e7ffd6e3932e925e4a3c0c565ca22b0e8df4938c38340c25f79bff0150c60139abb58d39b5bc1bd2e697cd65221d4bb3
TLSH
T16AE0268A67CFC26EA309754F4178470CC2C93A1B97C8AD1B370C88A9B841580ABC6AE0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 699f4379c29575bbfd19105cee311db5060e175d0c00effe4a5fdc5e21132917
MD5 0810cf284beea53039bbba5314526b1d
SHA1 409499295ce22d63474913e6c7ab07a79f94d234
SHA512 d7e37137eb978db80c6f7851041e88d4ffcc98913dd7b99748285bc93615fa48b24b5123315f3ca6259d621a5a349f92bb616d10ecee1f28bc41d7bc5118277e
TLSH
T161E0DFB733CDC1AB51009A8B84AA935CC5927A2596CD956B260EB0BE2CC1000CF90EEC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 299adbcfea74dcdd940a98451907bd36259cc15e8ed775f785a01c0b44cb239a
MD5 6a657861aaadc87cce1f14b4a58c4f95
SHA1 b2716d274014bca8b68cd29e6c3bba90a925c8e6
SHA512 a7fc95f802dd670a75e59e23d53ebd0f1c7ab405d51740599f2b76c3be0e75ae2753f869fd2684f62f1084acf85fb9fcb5644e9d5a3686a388380333dc6c2d24
TLSH
T1F9519254A3F10BD3EBFF5CB654E1ABCA7AF4C86BB6071E4C0280D47A0C067261C60A2D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5966de.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5966de.TMP
Size 3KB
SHA256 350b7a405000c772c826843db0a45d879f87692b64963c7c5924ede7e6c9615a
MD5 84bed563abbb118c5c6004576727fe6d
SHA1 e95c8e218cce78aa152dc63c8c447f54185c79cc
SHA512 0187505e05d3fa8cc6f911e3fabaa5e432e5b19427d88ffbda87ec38e49c91552f6f3f00b3487a80784a5bc0a1323d4bf04c09f71a59e645a9d4731183057f1c
TLSH
T193517354A3F10BD3EBFF5CB254E1ABCA7AF5C85BB5071E4C0180D4760C067265C65A2D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15a857a6-306c-41a3-a7a3-ad69aeb1ada8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\15a857a6-306c-41a3-a7a3-ad69aeb1ada8.tmp
Size 2KB
SHA256 096e8f8d28d15c91e9e8ebcb830841a62aadcef3c8138f646f6cdc8987487a57
MD5 8dbc2807002029a279765d14eeb995a1
SHA1 5bda5b4b4426e8bacd66b17908310909b50fdad7
SHA512 7f619e86c8044148032f35312f8a18339984e0fe6af6bc0fd5b65d9a4806740b8bbd0c0dc5a7e9f46357ccd910c83ee9be76aef06f528a74cc11831513c0f150
TLSH
T11441BBF3C3E4856D891146F0AB186E2BCE2C0915832C3C5AC9E0EF1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f643287706473776a1b9a75675f73b1d72c18e1e8637eef082e624819acee320
MD5 63b481cee30b930ffddbe2743652c8f8
SHA1 c33aa1d6baad9d8383c7ca65d00ebacfa763177c
SHA512 cc7b53ad789650aac948a4b2812590ff7d5dd78d858516d7fb5ff8e4808e794ab69ee5e7b2bedfaf86a6c3397568df535bdf76fd83883062e818982b51a38db8
TLSH
T1CB41ADF783E4856EC91156F0AA186E2FCE2D0515432C7C5A89E0EE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7386e7643fcae1ce57a9a38163c979d25bf64966c6944813ff9fbfc8b70c4013
MD5 0d43c9579abf237b92f14a1f7bfb52d6
SHA1 aca7190ebc554e21c5acd07abca728d178e0423f
SHA512 dbb4a3c4f7a64ab1a33270ca9e892d2a838d99c50f274806c1339878251f2daab140f696b48a84144ece92a3f548e1d059e172091683c687924e0f525db2dfe9
SSDEEP 192:sxRQmRkUyMqZjK1Ml8UQ6bk/fEsnEJks3R3zoA8peq/g6+WNIYPP7tiiGhXIgDpJ:sxRQmeqsk/fEsEq7d/5I+J033
TLSH
T13962D806662899379CDBD30DF6557F93D6F81163A2945E04AAFCCA0C01E7AEC221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4a4e3255da837f2aa3fb961fc9ad5fd55f272c57349c5202e53515e31820323f
MD5 1dd2d1d62ef5b11b4b58bc331c4ef933
SHA1 36676dcc7cab1ed3ed411624781a15fc0d3002e2
SHA512 426b81b3e3a9156de06ae7e15dc206718aabf0b4937c87c2f145367524d0b0cf990ccc9296da2c44d2f9fbadad36c95d580e866c1f2398cd3457847c3337dfb6
SSDEEP 192:sxRQmRkUyM/jK1Ml8wbk/fEsnEJXs3R3zoA8p4q/g6+WNIYPq7tiiGhXIgDXJ:sxRQmLlk/fEsEx7D/5IFJ03t
TLSH
T15E62D905A624997B8CDBD30DFA517F93D6F81573A2945E44AAFCDA0C01E76EC221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ed6b11a2629c6302a6611c2baca7d998c9fc0ab79dc4bd20aaca9d82f9e4ed21
MD5 399c8c523d5fe210830e73aeab1170cf
SHA1 acd04ec03b7ca54ae29f1bfd78e1af920bd22f6e
SHA512 3c4a7a62710672d3bfce9c3cb097fc8b9ecc22ffd18691668c77b36f7b142ef82a2ab46c0fc9f259eb4c0ef02613cc56061c153659d9584b4359455786037135
SSDEEP 192:sxRQmRkUyM/jK1Ml8UQ6bk/fEsnEJks3R3zoA8peq/g6+WNIYPP7tiiGhXIgDpJ:sxRQmLqsk/fEsEq7d/5I+J033
TLSH
T16762D816A62499779CDBD30DF6517F93D6F81573A2941E04AAFCCA0C01E7AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 12334675c5de9def17e1d49bd2f453e841b965bc1856323d31da6d08518f1a4b
MD5 20a34e7430b9b3f7209e42a78a51fe8a
SHA1 4d1145e95544f09de2dbd3079dc263ae9aa3bd07
SHA512 a16530b71b736e07c1f22713071ac8b28b6d972cc55836767531e0a7d119ecef039c566032f2bbb8143288649f16bd11df28c740b82a8a9e0416b896562f87ad
SSDEEP 768:+Pw4qBWg5tf+T8F1+UoAYDCx9Tuqh0VfUC9xbog/OV2Ux2lroje3wh:+Pw4qBWg5tf+Tu1jarW2eam
TLSH
T1F5C2EB2B640CC77E4F844E9DAC29AE97ADD801CB9B984D5447FE890C03C77EB512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ed71b70-19b5-4507-a79c-1967fe91ce8a\index-dir\the-real-index
Size 144B
SHA256 e6c7563cea57cdb5245995d46a8fc1ec74bbade079a9cad4e2e55759a1276ca2
MD5 a19eaeedcc41f8b956edf85f2e88b416
SHA1 ad7cd77a0478277846f182106524967a053e72bb
SHA512 68e4de137a98a472d02eaec9f3e5468e69f7a442fc93a433d112e1785b161b05f18a27da1cfde5e9c973c8c8fbe60234fc0f3ee8f3e9ffecf1c0c1c0a807c68f
TLSH
T13DC01210CE0479AEC849177120F7E26462321CCF58007B27249C38DAACC614C90D9145
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5da74f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ed71b70-19b5-4507-a79c-1967fe91ce8a\index-dir\the-real-index~RFe5da74f.TMP
Size 144B
SHA256 3eaa717160d27ea1ea13b8c9f37f033c3fe7b682ccf1b3fbf9cc341cf98d64fb
MD5 5348e50e7c2414a320d38b1286335437
SHA1 a3e9fe74c8dc05df260519ca1e8361d175e8359f
SHA512 5e3b196bc590c741fc793d457202db575fa8563a3f67bcac7f2c4586af4a6198cc0ac9dc16cb2139ea191ad18d37e4c8c29a15395f57ec555ba2bb028e474cdf
TLSH
T15CC01210DB10BDA0C94F17B32007D78812A2189C0430B30F289A64DA6D8228D4186206
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 d3f53478bb7a1164eb01165a4a1218f990b60f68d3afa4321a52205b43d5c212
MD5 242cf7c340fdae1a85e35d07c15ed8fb
SHA1 a5a681514022e3121dbc426d8b3463bc613391ee
SHA512 c5cda6245015bb4b781d542d7cd69028164339b41180bfafa076e1f34f360c41ba3397975a50cf162bd154ff627d48ef5302ff68a37af67d5beb1f97482cd3d5
TLSH
T114E0687F2DEA180CB92FC3D288B3556081447818C147AC4E152AA2C750A32632419C27
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2cbef06e-edfe-4234-be2b-06e1421ffd94.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2cbef06e-edfe-4234-be2b-06e1421ffd94.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 7911997bf33624bfe98f936f8e923319e747589db4a5035a22781223caed1ec9
MD5 75f343e5808159c976bec4d61e10baf7
SHA1 2a5d45db75fbed53c6eb0f3db3a2a5c6bc48bbf9
SHA512 5dacacd2c678878d92f79f5df682564c6a51d26f1a9b76c746a06843e8de4212d79590f79841896d9a47ed8f57bdd3ac23ba548de6a8a2a921985d5f80b206fb
SSDEEP 768:cWj+9x3VpEYLkbcuyvKweY5PWu3N+pylXMjn:cF9x3VN9ua4e/XM
TLSH
T19DF2AE32ACA299678CE793C5F707B792DFB45253C2840B58C4E86E0E46D75AC2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 2ee7a2575ad6d0333f558d6ec5410a68e385e298ec438539070e1df4065a27ef
MD5 c2f693b48b5719153d59ae92a760c28d
SHA1 a8e7e3dff59ed82570f42f7dd53e778a7ed8ce6b
SHA512 d9a16f3b66f230c247bdce97062846f796437b8372d6bc15b5e3e8608bee50010ecac6d26ffa4c508bce730879d1929536531776a90b3f05e2f1a8e241e187a0
SSDEEP 768:cVrv+4UNbd/3VzEYLkHcuyvKweY5PWu3N+pylXDYB:cVbsbl3VTfua4e/XMB
TLSH
T13B03BF32A8A5D9779CE79384F20BB683BFB81153D6C40B58C5E86E0D479B49D230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 9e078312d76b1f38d0daa4c5fbf3db6c6425dc7bb7a4e21cd17035eb32e43e4c
MD5 66c98fff0ee3d78a9d0ba906fe8d449d
SHA1 c42b995cd1e0616cd216ae0a20e0b948f70b0a52
SHA512 7c0638990f4615afbc9a7a59dd0ecc60a34690ef6a707ddf67c408332a0c9e70e1db48b449e63cba628a100c8bf9a1c80763f8b5894811997e70250d2c573a34
SSDEEP 768:UtF1j+9x35wgEpEYLk9cuyvKweY5PWu3N+pylXMjn:Uk9x3MNbua4e/XM
TLSH
T17F03AD33AC91CA7B9CE797C5FB0A7392DFF40263C5845A98D6E86D0D42935AC134BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 788e5f04d0928d2a45bbe9adf0f22cf84aeb5c00039a6ec839d284b2137909c3
MD5 a74d1e87eacd97bea918402d074bc81e
SHA1 e1a3c02053e048c0a34458f7eb23724d96b3d1da
SHA512 8d71425ce2effd379af65a27a0b449fc3aa13e6d2929395386a3b81749a3515cdab5941abff88073c5bccea122a127439270cdc8d7a5729fb02137f965059d73
SSDEEP 768:Yrv+4UNbd43obNYLvcuyvKweY5PWu3N+pmic1UigCI:YbsbW3o+0ua4e/91U53
TLSH
T17503BF32A8A4D9778CE79381F24BB693BFB82153D6840B58C4E82B0D879755D230BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aedbc530-a85e-4cd3-8a63-2dc847b3cdf9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\aedbc530-a85e-4cd3-8a63-2dc847b3cdf9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download