f60618995532cab5ae6385cc30f49e548a221360de03d03681995ccb5307700f

Analysis

max time kernel
898s
max time network
730s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 15:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 55KB
Sample260710-sp43baes6s
SHA256 f60618995532cab5ae6385cc30f49e548a221360de03d03681995ccb5307700f
MD5 9bf9a78c6b53acffc0b1ef49e6d1f02c
SHA1 76e7756fba023fb69f55446f1f7b36809d5e8406
SHA512 75225274f5569540674eeac9a24a260e412d3ed3ef67de457475c189fbe4fdf659d1534b2dfcd32af9ee5dd50892ef060d498eca367d3dc87550f98ae8edf3a3
SSDEEP 1536:6Rmzik/tbdaAcwsfOucDdJAaDYoQkwL7kwOEkwAQhv:fdaxtn
TLSH
T1FD43F93AD21074BFC94B87CCE916A5283E6E8CEEF6C1C260917CCB6E16E1ED1DC49645
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4884	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281703518569278"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{C78E8568-9384-4A79-9D24-380AF5CD7E0D}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5748	msedge.exe
5748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 2224	4808	msedge.exe	87
PID 4808 wrote to memory of 4884	4808	msedge.exe	88
PID 4808 wrote to memory of 3580	4808	msedge.exe	89
PID 4808 wrote to memory of 3580	4808	msedge.exe	89
PID 4808 wrote to memory of 3580	4808	msedge.exe	89
PID 4808 wrote to memory of 4284	4808	msedge.exe	90
PID 4808 wrote to memory of 4284	4808	msedge.exe	90
PID 4808 wrote to memory of 5872	4808	msedge.exe	93
PID 4808 wrote to memory of 8	4808	msedge.exe	92
PID 4808 wrote to memory of 5872	4808	msedge.exe	93
PID 4808 wrote to memory of 5872	4808	msedge.exe	93
PID 4808 wrote to memory of 8	4808	msedge.exe	92
PID 4808 wrote to memory of 8	4808	msedge.exe	92
PID 4808 wrote to memory of 124	4808	msedge.exe	94
PID 4808 wrote to memory of 124	4808	msedge.exe	94
PID 4808 wrote to memory of 124	4808	msedge.exe	94
PID 4808 wrote to memory of 4392	4808	msedge.exe	95
PID 4808 wrote to memory of 4392	4808	msedge.exe	95
PID 4808 wrote to memory of 4392	4808	msedge.exe	95
PID 4808 wrote to memory of 5440	4808	msedge.exe	97
PID 4808 wrote to memory of 5440	4808	msedge.exe	97
PID 4808 wrote to memory of 5420	4808	msedge.exe	98
PID 4808 wrote to memory of 5420	4808	msedge.exe	98
PID 4808 wrote to memory of 5916	4808	msedge.exe	100
PID 4808 wrote to memory of 5348	4808	msedge.exe	104
PID 4808 wrote to memory of 1152	4808	msedge.exe	105
PID 4808 wrote to memory of 5920	4808	msedge.exe	106
PID 4808 wrote to memory of 2016	4808	msedge.exe	107
PID 4808 wrote to memory of 2016	4808	msedge.exe	107
PID 4808 wrote to memory of 5748	4808	msedge.exe	109
PID 4808 wrote to memory of 5332	4808	msedge.exe	110
PID 4808 wrote to memory of 5332	4808	msedge.exe	110
PID 4808 wrote to memory of 3520	4808	msedge.exe	111
PID 4808 wrote to memory of 3520	4808	msedge.exe	111
PID 4808 wrote to memory of 2432	4808	msedge.exe	112
PID 4808 wrote to memory of 2432	4808	msedge.exe	112
PID 4808 wrote to memory of 3388	4808	msedge.exe	113
PID 4808 wrote to memory of 3388	4808	msedge.exe	113
PID 4808 wrote to memory of 4144	4808	msedge.exe	121
PID 4808 wrote to memory of 4144	4808	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x324,0x7ffd1e07c188,0x7ffd1e07c194,0x7ffd1e07c1a0
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,14755629521885160774,355752608767920733,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,16266568182892440410,3315786707267820834,262144 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2140,i,4162139776630928954,1602318916091997239,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:13
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,10705295855866674100,18035938530063971188,2097152 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,16891061305959761774,11478989311344836384,2097152 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4404,i,12832842883801799199,14744878250037040783,2097152 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:1
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4416,i,15002898773290605772,1499705251975828305,2097152 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=4468 /prefetch:9
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,16094568735810588535,8582671407949054848,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=3868 /prefetch:14
  2⤵
  PID:5440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,16085237658217329414,13999494991939537270,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5464 /prefetch:14
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,3683394061442112004,12500375376191534734,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,3683394061442112004,12500375376191534734,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5952 /prefetch:14
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,4103455058750893153,16403657981469529061,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:14
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,2974485157693914177,438313240656754354,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:14
  2⤵
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,17875751830600554552,18181284189063417111,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:14
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,9426957980952981796,5032328908639062375,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1916,i,1677793798001634873,982677247477876174,262144 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=808 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,7586880133963873835,12087833579733106099,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:14
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,7522850810305479044,9818899014872742014,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5964,i,15591002292132476665,733062604476558967,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3472,i,2182865046240343517,13055579221485588378,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:14
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3068,i,11579005728451133899,610213791297474909,524288 --field-trial-handle=2420,i,14772580314962603511,1595644044117215281,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
  2⤵
  PID:4144

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2460

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:612

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3328

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

000004.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000004.log
Size 21KB
SHA256 4f6581686ec5a13e19f0394260a24d503c4b9ed2e8be784730ed671cfa92f3ae
MD5 eff4a90e4d34189847b1561364c36b75
SHA1 5b37b43fb0fc161f81f6a703ddc620b28be098e9
SHA512 b58d548f4f8c81c744a14dc2d770431493e9c1832c4b16d620f2dd1269f93351719b35bb4cb05302ff987f88f4de66b136450bcdfc6dd641478ec92fe172f5d4
SSDEEP 384:l8WHqX0/pZRQA2L+idxquF1StWGcCZZWq:l8WHqX0/pZRQA2L+idfF1StWGcCZZ
TLSH
T1D7A2D152FD5ABD6E3BBAC0205A946407FCA6879FA874501BF27CCD0C5FB9B240206D5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 495B
SHA256 777344464ecbe0f4464d70522d3fab9b774e9b1204b9aee32747544d9d55761d
MD5 d3c0e580f18354e34de396484bda5710
SHA1 af67b9868a26387ffa937cb5cb22018ef647c249
SHA512 361d92b834f77bc3bfff398037094578ad2588b897f09a0abaae030ebb9a0a4972c146e50314a2084300bfd25b4be0a45dc97927e94e8d4fb20ff315fec7f0a1
TLSH
T19BF059984BC6CAA9E2C5A1C79179B70D848231CEA3885B9A3B4AB09C354174CAFD9284
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 3289b37f7a9e6dbf5cea5d36cb31594c7ad3fe654e20330410700403dc89ead2
MD5 ab1b408ade63e44222da7e2404e3617a
SHA1 e13c46c6023cca764488da61332e38b5f9e944bb
SHA512 ec27699d015e6cf478ff9122166a59ed46d9bc483c56215bc15d8b74429da1ea6be15bfb98e08ef292112f785cd641da54ebf09407da048378e80558e852300d
TLSH
T17BE026C544CAC2AEE24AA9C741AC930C8281378A97CC6E9A7F048D943041B48BF826A8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 fbaef17a5e8d3bfe51a2691250d3a80f4707d188ded51cc7e829fb6029935825
MD5 94851f8352beeac44a43c3879d2918ea
SHA1 d646157a83d1f509e22feef3214a973b49a8b9ee
SHA512 0b9a54dca8b2680f296985884fc7bbbe4e9f5297abe24049b3c2cff663a0611870f97ef39bb7b70157bd5f22bdb6f0d02deb0af2379453b9ec08cdd989279094
TLSH
T136C08C4DFE8C8A9EC3D5483F937AB05006891172E81BDB9318207DC03080BB01D39820
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 5199e520bb118394a0092b87b64605337416419b573e38cda859f2cf0a0a85dc
MD5 0a3cd0b1b2a3dc1cedae15c47a3879b9
SHA1 ee46322e07a928d16296fb9e7326ee7b99971ea5
SHA512 4ce014309cc6326da7152542e29616d11e7515565fcf5268998fa9dc80edc6f76614c622e2bca74bc6f876f10777e1401ba02f36e6642d07610502f35db48895
TLSH
T166411E5C833CDFCDDBA409B1BCF0D6843ABED8CE0307AE50D4A42BBC4A06B8449A1193
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a0f9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a0f9.TMP
Size 2KB
SHA256 01b33c6355bb59360bbab0afa2e2d4d0d834e9062c892d8085bfa28fa899cb9a
MD5 cb0c55ebe23c6f0174741207aae4ab74
SHA1 f90ceca10777dba59829dda07b024672c4124901
SHA512 0b91f04d2c0d1a85bfcf7802e8269952ac5b7408712bd33b76bef943a60595a412ff565f37c51d0aa14a96871fcac8802a16496b66c3dabebc5607db429b6b16
TLSH
T1A6411E5C833CDFCDDBA409B1BCF0C6843ABED8DE0307AE40D4A41BBC4A06B844991193
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 89ed67da94f82c8bc66b8dba590db24259448ddb82d09a8a86c9b19db4166de3
MD5 b1fb1586f1b760fe3421756ddc0d4234
SHA1 f0196ba88fb9019ff9e06fdd147ab118d291dd80
SHA512 6f2a89a6beade04ac651902b708a5d5ba02128c74c74e0aadcd91f6e93ddff7e04568b818fc57680737a7140c7eb2ac603531e849dab74318c845c4e1bb28a45
TLSH
T10441DEF3C7E4966E890196F0AA187E1BCE1C0915832C3C5AC9E4AF1B93E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c39f29f4045cb4239aa18efad049ef9b71f1e91f981837fa4cdb8823a7d80621
MD5 592ee878db0f24acdc9a554b4d224583
SHA1 a2f8720c796acbdac632e014cd8d1892877d3ee5
SHA512 e7e4c2636c27c2b113622c8c65c5fba3c16c85700c2f3f4085d261bc0db1628e3393786ab68782824b790d92feacee7b949d72e3f7794715721a9ae810bdc514
TLSH
T10641AFF783F4966EC91196F0AA187E1FCE1C0515432C7C6AC5E0AE1B93E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 33ec4522ba85775d2eae1c26ccdd203b102391d88d2c9ca18eacdb62dd0ec0bc
MD5 4212f1db523259956b382aed18ff2445
SHA1 cbc9a63b57b6831b39e816717c4ef38d0a5e1179
SHA512 82238a979cc0381766fa43df9c78e050dd5757b4a86330880403c9777629009a9a56acb6b1d8100b62160c566f916859f950cf09f8322380d05b25f9284c935b
SSDEEP 192:sxRmROyM/jK1Ml8wbi/fpsbsBprQ5qKzoA8p48/g6+WNIYn83hubGVIgDlJ:sxRm8li/fpswBjR/5ITRRD
TLSH
T16C52D81666349D7B8CDBD20DFA517F93D6F81573A2901E48AAFC8A0C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ade6f94a90ee55eff969e18a460301a65aec51a9ad3b751296cbf61b9b200353
MD5 c88650aac83af4e798de59d06ce33059
SHA1 34e3323526e8917839d85b21dade431b484b0c0e
SHA512 45a2be3aafafe38d0b53d4da393c6fed80bb777bb411997cbba435f01e7a31a8d68668b61c74b3d00936ba9a2e5502bc12ac43918ecfb8863a5fe47b8148128e
SSDEEP 192:sxRmROyMqZjK1Ml8UQobi/fpsbsnprQ5qKzoA8pe8/g6+WNIYn8BhubGVIgDrJ:sxRmTqmi/fpswnjL/5ITbRB
TLSH
T12D62D81666245D7B9CDBD219FA957F93D6F81163A2901E04ABFCCB0C00E76DD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 77eed71303bde4cb722e61e394baf395a489be244c524bc4f9d6d9d025a442a1
MD5 799173c62acaaf411a7d1cbf710acf32
SHA1 98ded9bdc248f8cae0ac61c617e25b64f8c1a70e
SHA512 cb149b14d1d3ccd3756a9f4b96791c946b3ae0c3aed928fc6ddf11c0dd64498c4237fe22e58d74cecdd7f95bc27ee3d9f293487656de7e39ae97bb5679a23940
SSDEEP 192:sxR5ROyM/jK1Ml8wbi/fps1sBprQ5qKzoA8p48/g6+WNIYn83hubGVIgIJ:sxR58li/fpsOBjR/5ITRRs
TLSH
T1FD52D81666349D7B9CDBD20DFA517F93D6F81573A2901E44AAFC8A0C00E7ADD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 7ab9de3092083e2b3a3cfd59c30b0793fc5cd89d46b82a7196f9e78131968701
MD5 03191688b98e4508184f236bf69d94f1
SHA1 89fdb4eb2936644de223280638e437fd10979fa4
SHA512 243456c538e180a006dc128f2afdf38cfc5b89eed1203a1f0464707b33d0e3d70eeb3b2c8a1baa7680f79a06fb7791c5bb2ab94fb8d09be1b11bb2a2e6f34c7c
SSDEEP 192:sxRmROyM/jK1Ml8UQobi/fpsbsnprQ5qKzoA8pe8/g6+WNIYn8BhubGVIgDrJ:sxRm8qmi/fpswnjL/5ITbRB
TLSH
T1EC62C8166624597B9CDBD219FA51BF93D6F81473A2941E04AAFC8A0C00E76DD221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b8da65dca5603358f1aab6c33613f49e50ae1302ab7d9fc255cab4ca5a79e8e8
MD5 daba22e1780620cde64d1f5ab2a49aa1
SHA1 155b5997f21d0533cd57986424f880a7ae03ba0b
SHA512 713262a4f3bea82206488801ba20bd5b050c4d428e1608e218d8b31c98b1f7ecaa705c4da134ac1b83f9c606bc8c0c09bab1aac8de408f0ce12ec3ddb494578d
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YxroSh8ac5e:wGedp6WgoufDMu1jatVYKEcI
TLSH
T17AC20C2B640CC77E4F844EADEC29EEDB6DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 72B
SHA256 79bf64ff2f71477b78727601c655626082e56341dd9b1177ba873f10876ed15c
MD5 f3480859647ee937c827f0f58e152007
SHA1 5336a95d86d5dee2a4b370752e8bcbe9a47ae8ee
SHA512 63142dc425b02a8acab3740fa1dfe76872ba1d97290ebb634c08dd66e04a1269294e71d470493386d425fcac4a17ea195aded1fb08ed7a09fb3b2dd5bbe82b6d
TLSH
T114A0021147D4589ECC41A6B419A3E548121758681C10C75750D8505D8892155D1D2040
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5de2a2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5de2a2.TMP
Size 72B
SHA256 acb27dd268fa4edc5962b793efae01915f404a2abeb84cd37f60a6dc1abd1de1
MD5 9fdb162cb2288dbf8426676d24b41109
SHA1 f984730875de799ffcf0531ccf649557a1b54cac
SHA512 e6f762454597b349670d9e63eb90ab9b53799e40c9874e5af218fd258a71e0f8f30d6e37eb0e784ad7c70ecace2bbe983d2c2630ebdc74e5cdb24208ba2e1902
TLSH
T1D8A0021143D00CD0CC81F1B02407C78813C78C240415C34F61D8505D8D92190554110C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 24931821b747cf87f116959ea139371e9c7886805ff7fa5fa72c50220a64b613
MD5 197d77863c2a615789896b5193c823de
SHA1 25d69b00bb6e3ccff27404037d4946fd3e6bc865
SHA512 8b38172ed7ad8eba84be2f2bb02001a57195defb0f9f6fc287ec56bb274252ef2ca2d548d8fb08ae5473517d0757f8bfe5bb50a772663155a1b25bfbd12ae2a8
TLSH
T141E0207B3EFB2804ECEFD7DA183264510550B468844DBD4F7815E2D714B235434AAC25
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 536486d4e1f22ab3a4f8f6ff43f804016d61c6c4431d349c90238244faab422a
MD5 fb47f9a0782e47c35ce3731c016432e9
SHA1 1d311e7f9bbd211b05635ba14e7a4611dc111ac2
SHA512 89ad37df9112f28627b24145a6ee1e53123b5a65da248868d27bb6ec4275da0ad07cc76a3f8437ef584bb56ff545efe1ce86828d391426244d78c9376690bc76
SSDEEP 96:KRwBUAyeSIWWLbgIIK4Ng6Icoob6AFHjsJ9rhhdW18qgjbK4igtbcx50HPoHpm3B:CwBUAyeSfWLkIMNg6noob6AFHjsJ9rhl
TLSH
T1A991D455317E06403C7EAA0981F99C1AA3C178E23554B42F7BE902E64F66F039EFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

2f02e950-2662-4db0-871a-9050cd170740.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2f02e950-2662-4db0-871a-9050cd170740.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 554aeff23bb11879d077fdc860a8da8790376ace22781ae7a647af561dfe4273
MD5 ca0072989e3ae906ea83b0aaadf1845a
SHA1 320c945aebc3390ed7fa804c290d4c01b4c99091
SHA512 ef41cd03869e78b9ea0924b69d095ca831504d8807fe5b07c571b0e61c339ed46b1853e8859d5b37f96204889f46a26485a9d6f37df6b2ddd61cb1ad49b13717
SSDEEP 768:0j+9y3elEuDZIO0WhTXNzc4ReyIsP8b9MA:j9y3MXtc44bsEb+A
TLSH
T191F2C032FC258DA7ACE65796B6073653BDF0522B82C93E84DADC6F0C06471ED435B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 d09acfcde88bd77aee51d88af584abec3128b97749a2d42b6d5872b161d072b6
MD5 7823c9eca3f86fd9fb1dd35ece656358
SHA1 a67ea0b34a2b3975dfc296ee319f3001c80b2b1d
SHA512 efd0b73206063107505b7659021aa746df07aa5e8df8e18ca89561e0adce6461c092c8a64b6b23584f32bfc1210047b4ebccef7347e6a00931c63c02c0d5e007
SSDEEP 768:Hrv+4UNbd43RcuDZIO0WhTYNzc4ReyIsP8b9MB:Hbsbm3LYtc44bsEb+B
TLSH
T16513CF32F828DDB3ACF65656B10B35537EF4612B82C92A84DADD6F4C4A4B4ED031B913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 fd30e6aa42cae3a57eb042b43003f6831d59f94104e10ee0f93f0248dd009af1
MD5 2291ec3c0ef8817c145d70c13ece28de
SHA1 ecca1d576ad8802ea0ce9770dda3e50fecdde6b8
SHA512 f19074d440e4fc7d81fe162dcceaeffcecfd38fbfd4f2b17d8176f2bb8e2efa1b5ac18be1b66814d2d0606699a7f2e8bfdcbc495f3a6647b305ddbf59d3dc8a9
SSDEEP 768:RF1j+9G3UwgQlEuDZIO0WhTDNzc4ReyIsP8b9MA:w9G3fDtc44bsEb+A
TLSH
T1B603AE33A854CD6BACE65B96F60A3653AEF1522BC2C97D84DBDC6F0C06471EC435B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8eb94aac0c55b2ff9cd3bdc92670e5ec9750b1ef892ebb10d8194f1ba9e01044
MD5 f1a4ed14da65f8bfdeb9c1402c43d895
SHA1 9f828705939c92fd55e2e003d4d159b296854428
SHA512 9b0bc22c5ad4c039db4c04f3c69dac2969f02c71122588b4515bbd90b4f5a4bd7f9d4dd8723360edc6afd9e8af7d9ea3428793a44c64a797394255c1a3d84319
SSDEEP 768:6rv+4UNbds31PDZIO0W/Nzc4ReyIsXJeVH1S5D:6bsbS3Vtc44bsZEH1Y
TLSH
T12703CF32E8788977ACF66785B50776533EF8912782981B94C9DD1F0C4A4B1DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4532f06-4426-4f4e-b52a-df8b091bf4ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f4532f06-4426-4f4e-b52a-df8b091bf4ee.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download