44100c0d8ff4c15fc73c019f740bfa13dd186854f9bb6891207d7c787f6dd881

Resubmissions

11/07/2026, 02:57

260711-dfmdksc1318

11/07/2026, 02:53

260711-ddsgtaax7r7

Analysis

max time kernel
599s
max time network
509s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/07/2026, 02:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 28KB
Sample260711-dfmdksc131
SHA256 44100c0d8ff4c15fc73c019f740bfa13dd186854f9bb6891207d7c787f6dd881
MD5 b00ec5e37489fb13141086199275d688
SHA1 a6651275df35ebf51e7c94020baf091b59bff002
SHA512 6ed4edf6f77543d872d3b3a859b8ecc80cd0ff415145148ec56f3d8aa2313c51029913cc9add87ce2bc9be508099230d5fc96377fcb48b2cad1824be5e0f5137
SSDEEP 384:qx07BmOTcUOTr1P2HU+kj3nCLVxxXxAu4P:q67BmOTcUOTxP8eGxq
TLSH
T139D25753F7C0280CC97F4860A843BBFD7F3806C69B6549B2E99BAA3A874CCD7C581549
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2636	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134282122442397687"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{50002DA5-9D9A-4EFF-9BDB-9B126445A3C1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe
828	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 828 wrote to memory of 4420	828	msedge.exe	87
PID 828 wrote to memory of 4020	828	msedge.exe	89
PID 828 wrote to memory of 2636	828	msedge.exe	90
PID 828 wrote to memory of 4020	828	msedge.exe	89
PID 828 wrote to memory of 4020	828	msedge.exe	89
PID 828 wrote to memory of 5520	828	msedge.exe	91
PID 828 wrote to memory of 3540	828	msedge.exe	92
PID 828 wrote to memory of 5520	828	msedge.exe	91
PID 828 wrote to memory of 3540	828	msedge.exe	92
PID 828 wrote to memory of 3540	828	msedge.exe	92
PID 828 wrote to memory of 4832	828	msedge.exe	93
PID 828 wrote to memory of 4832	828	msedge.exe	93
PID 828 wrote to memory of 4832	828	msedge.exe	93
PID 828 wrote to memory of 3080	828	msedge.exe	94
PID 828 wrote to memory of 3080	828	msedge.exe	94
PID 828 wrote to memory of 3080	828	msedge.exe	94
PID 828 wrote to memory of 2812	828	msedge.exe	95
PID 828 wrote to memory of 2812	828	msedge.exe	95
PID 828 wrote to memory of 2812	828	msedge.exe	95
PID 828 wrote to memory of 2744	828	msedge.exe	97
PID 828 wrote to memory of 5272	828	msedge.exe	98
PID 828 wrote to memory of 2744	828	msedge.exe	97
PID 828 wrote to memory of 5272	828	msedge.exe	98
PID 828 wrote to memory of 1496	828	msedge.exe	100
PID 828 wrote to memory of 6092	828	msedge.exe	104
PID 828 wrote to memory of 2996	828	msedge.exe	105
PID 828 wrote to memory of 2032	828	msedge.exe	106
PID 828 wrote to memory of 4200	828	msedge.exe	107
PID 828 wrote to memory of 4200	828	msedge.exe	107
PID 828 wrote to memory of 4872	828	msedge.exe	109
PID 828 wrote to memory of 3484	828	msedge.exe	110
PID 828 wrote to memory of 3484	828	msedge.exe	110
PID 828 wrote to memory of 3324	828	msedge.exe	111
PID 828 wrote to memory of 3324	828	msedge.exe	111
PID 828 wrote to memory of 200	828	msedge.exe	112
PID 828 wrote to memory of 200	828	msedge.exe	112
PID 828 wrote to memory of 760	828	msedge.exe	113
PID 828 wrote to memory of 760	828	msedge.exe	113

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ff897e4c188,0x7ff897e4c194,0x7ff897e4c1a0
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,7432036256968591383,14377200035902047311,262144 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,5356676430498575896,739794872224568879,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2492,i,10937714002416439027,417452224610735410,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:13
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,13856700743298647706,4825961711642187315,2097152 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,7506743814083316054,7419505955027695687,2097152 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,987218445674366270,11348330354527143156,2097152 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,14507909398266092253,15559462619382088012,2097152 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:9
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,9704602577398498296,3702898343724852105,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:14
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,17710083437416657609,9433704218422578926,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,7780136733011845076,5888729243268377029,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,7780136733011845076,5888729243268377029,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,1021683624171737883,17094015100950163384,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,18422539403303416400,15814370192192019653,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6660,i,123565033377054534,13712416137472701375,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,4679300201154951625,378245026609218044,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6684,i,10746302634641941809,18188648518069487089,262144 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,1414134535072973472,7974890174597535516,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2016,i,2504579210789512045,16058743041578950042,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2760,i,1343309284665378110,3998122654479101891,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:14
  2⤵
  PID:200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,755105648888885657,9964854375696973530,524288 --field-trial-handle=2160,i,5226150328914957873,6220543420158105147,262144 --variations-seed-version --mojo-platform-channel-handle=6792 /prefetch:14
  2⤵
  PID:760

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:476

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4744

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 5fbef39017119e99495d04729c80a05b452f5f6e2512577ed67f0202c900796b
MD5 8c14bc88a691b8d29989fde3974eac03
SHA1 f521b5562c6eb108bb403230a9f5ef38490e6ddb
SHA512 ee237f18588bfc46744c68d750e51ecf371dca0cb3048637f91ba69c3481e799a34b37e4147f813e5a3bb9a46e24d9f539269ce88e4628674ad966726d7c3ad9
TLSH
T1FAE0D89843E1CE6581C696D7D269771F9164E09995588E662AD8F19DA5C0000C33A08E
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 2349ae98bc8dffc433ba88b9999d8489c68e65cc724818ef748cb3ed152fcfe0
MD5 672954994ecd36760d73a89f794fd602
SHA1 0e2b98a41b82889250d0a8d1831a97e7bd781ff2
SHA512 373721ce5b3a37e6c46ee7d104a8499ed75ee01ae46862034ad59681274014538823c37a5eda94c4c07db916d27d47f6646d3d5889e88a2b77f1b18ded3f5996
TLSH
T146E0269904D8CA6EA381E6878368431CC380368BD2CEAA0A1B44D4ED7042140A39B7D8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 76b7392cf3ec42506d2a64fcbfc7ee4bb38ef7500bc3c38484feb2aeaf493e47
MD5 c006b6e9f1c6e79e7a80ea8d87fb3da1
SHA1 a44aa4912ac7f27ec7301400ca0b342960b80a60
SHA512 0d6e6054fb9836dcfd9a4063361a3f1910856424c22bbf06ef2e727fdda8b60889a4dbbef1f44e98790caab11f5077ef14c7fa726493c9495e0b01539c5ffc6e
TLSH
T17E51957133267EF2DBFA497232E1625832FDC44902BB1E25B0906D345C6AF99E9D5063
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe596586.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596586.TMP
Size 2KB
SHA256 8764bb992044fff22a8fb52b8bf5c08f22c87cd375881d9b87f0d189396b1b1e
MD5 b93bc6942dc224e78ae4b384b53223f4
SHA1 46c6fc0e261880e8b14a88b4054c14ecd8307108
SHA512 f16aa3e856b52c8051339044894856e97822a6eadcce11870d2beebc5ffc20c45a2c98482a465964ab5d3d45b212cbaee99a6b4b61e61e3acc18909d27e03066
TLSH
T18151847133263EF2DBFA497132E1625832FDC44901BB1E25B0906D345C6AF99EDD5063
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 ebd9d44ff15492fd741631f0bfccd527d2ace639ea46b81ba991d64a2ba071c3
MD5 aa14f65fb49d6ff25e05939d8d5d3eb7
SHA1 7b8923263f125828bd41134f5e82115b6a048798
SHA512 53f6bf026784800dac04ce2fcfdb90a35f8b68fbe532e7c8c1d6832b5cc4480c9900ba2104ff301428d1555ae816df2202c4bceff0aafe75dc20a8278238ef0b
TLSH
T17C51BDF787E4867EC91156F0AB147E2BCE1D0915432C3C6A89E0AE2BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4264d17bc9b97e2ada94438da8fcfd347fc56b23693f63694e189cfec86cf66b
MD5 fab3e7ec6a5fcd5be01565669d32d018
SHA1 650a06b4cabdf5c0bad3b3a12d4f3709d1b98455
SHA512 3dfc4a38cb7d7ba733b25246df776207c3580a28456e189c8f2e51a4d3d7cb6d04a0db56b40709ae8f91cd68249696cd9400613ae66095939feaf6e9a5090fdb
TLSH
T10C51BCF3C3E4867E8A0156F4BB147E2BCE1D0915432C3C5A89E4AE1BA7E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 d876ffbc93663aa84406e0b00969d90fc35fd2755457f9ed072e0eec6e25303f
MD5 1da59ecab44950e045f311012defe028
SHA1 786a1b60b47c595b0d97db18d30cdf129426d8e7
SHA512 5d07d98bf3b0fe359c9e7062ba6262bb6382b5663570323a50b167c7b0e4a86a2c73972f74b708cee08e540e5b217c5c9cb42798e652c5309bc0b5032e720a31
SSDEEP 192:sxRwRcyM/jK1Ml8wbr/fVsFVIkDde5lSIuzoD8p4V/g6+WNIYCyuOBG/IgIJ:sxRw+lr/fVsF+kc5lAw/5IQYs
TLSH
T18E52DA056624997BCCDBD209FA517F93D6F81573A2901E44ABFCCA0C00E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 48850a249292e28b6cee9ac3b97c74dbdbaaf7a3294158fa9062ca73b4320f45
MD5 aa39363d92b7b9ec1e16638dc3bee90a
SHA1 3cdfb7be3b127a04d910078b1b2ede9d3629bce1
SHA512 ac26e9c13b0f119e12edfee7a2f9b32408699b5dc55d89c8c3569bb064e9aeecfff4082b015fb4486f93c167d1ccbc07fa126dc2ef1e2174745afa440ecf2cc3
SSDEEP 192:sxRnRcyMqZjK1Ml8UQwbr/fVslVIMDde5lSIuzoD8peV/g6+WNIYCluOBG/IgDKJ:sxRn3qer/fVsl+Mc5lAG/5IlYS
TLSH
T19B62D9066A289D77DCDBD209F6557F93D6F81573A2501E44ABFCCA0C01E6BDD221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 a6174c720bbc272572dba609557cbcc9f04b2aab5d753faad3b76c191941ce97
MD5 5c582c75818bef6c3296b49fbb64553d
SHA1 19eb514f37672595557f0191de9a38c0381570d1
SHA512 835edfea2171bf30a1e33b2d8582b86a50b87cf782ced5aabdb82e421e1622f522a44434c685fcb828bc891c6f8d85e93a6fe1b4f887afff8e4676ff225789ef
SSDEEP 192:sxRnRcyM/jK1Ml8wbr/fVslVIkDde5lSIuzoD8p4V/g6+WNIYCyuOBG/IgD4J:sxRn+lr/fVsl+kc5lAw/5IQYY
TLSH
T1DC62C9156624997BCCDBD209FA517F93D6F81573A2901E44ABFC8A1C01E6AED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 43806e286c16c29a12275e46099034c0b22b7d7908a8148c46e1a21999e964d9
MD5 2d094d697f17781d0728c14fbb49590a
SHA1 e18942cd464efc91ddc89a8ec8efd276f755a3cc
SHA512 ee792c1c94ccbc73dfae0bd7eb0d2e4ca6698b25ca6cc359efb772936a5c00019f1a7875777106d99ce7c66be838fa207a5a8d5e557ba8471e86cabcf0e28c07
SSDEEP 192:sxRnRcyM/jK1Ml8UQwbr/fVslVIMDde5lSIuzoD8peV/g6+WNIYCluOBG/IgDKJ:sxRn+qer/fVsl+Mc5lAG/5IlYS
TLSH
T13D62D91566249D77DCDBD209FA517F93D6F81573A2901E04BBFCCA0C01E6ADD221382B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c0447b37-907a-4df5-93bc-ef6c8eaaa751\index-dir\the-real-index
Size 360B
SHA256 dfde7eb3e3a6795e66f5a287171b51a3581bf70dd2404af37bac4e78177e354a
MD5 07540c59db9334c129eb15ab4145c81d
SHA1 c19e40ce8ef0eac9414cfeaffb749415e0500790
SHA512 8d9ee05a5e20a99281537e6b10110f999943ee1351b3a6f28654e92c38334d6211fc96fff64ada18a8021826c447c445984fbd78562773a683da6e1c87bb0c93
TLSH
T1D4E02B8A9C934517CA26387B09B6151E333F07FD2505AE1B50BD142E9D95A3E8541708
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5da635.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c0447b37-907a-4df5-93bc-ef6c8eaaa751\index-dir\the-real-index~RFe5da635.TMP
Size 360B
SHA256 f7eca69149b02014e7bc2e6bb4b8a00fe9de9d8d6e7b8b80046246600a2a7d69
MD5 a51ddeed1e454328d4c485fef2fdfd9c
SHA1 bd54413d95376d0a0b83003f12939ceb64c9512f
SHA512 5da242aaefea5075ea3bddcdcccfea55843de8d87d5a2cc7f820a472be44a0a4ef1b0e77981f0b46b1808857eb1b0743b23303bbe3d50c269604e1931ebe1e8b
TLSH
T18CE02BCB44929D63DE2669752502512E333F08242505D62A10AE586E19217AC858560A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 849fa4847e56b5d3e0aa9b0ac1a89870c1d35eb071e644c2cc38840bfa4b6c22
MD5 8bb69af20aad852121590bd074a15c05
SHA1 1f5a6433f71d99e9032fb79589345763c4deada7
SHA512 db6527c5ccab894adf45ac4e82c774238a86ece84ad3168a3fb735a327cd6543de4eedf326474827332723413ec84f248d76f6d89bd9a4fb66557f5316be9bd9
TLSH
T1E6E0D8B72DD72850ACABD3D528B185A40152B864DB48EC8F602D978744A12153496C76
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ac86a4e9-56e6-4a4f-a53d-8ce2665d74ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac86a4e9-56e6-4a4f-a53d-8ce2665d74ad.tmp
Size 27KB
SHA256 8c1b58f243002cea49572109a1e47feb2a4b978245938398169cebf3a5dfbfab
MD5 aaab65e513fdb79cbfe3d77a543b17f9
SHA1 231f43939d2b7a1a704fb87c2e8a81b5ca9f1c2a
SHA512 01a8e8b27655aaa958d4afe9942da33e135de5084d2b69660def872e199513fcd880d94b21c72844c3ce7f9c09ca85c2898084523918dcf35afcddd5f8c168c9
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqqlrovF:j/8vrQWgQ+fB+u1ja3Vqe9
TLSH
T1F7C2EC2B640CCB7E4F844EADEC29BED66DD801CF5B588D5447EA890C03C67EB521A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59fed8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59fed8.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 b0844226c1cfe2dd7b9faf2d91ad0407e8c02bc39a99fdcc77b57a21aec8bb54
MD5 e8ba8684ffd3f51d332724cd0ff359a3
SHA1 58f7b9b95c4942ccaa273b41c81f64a7f081b309
SHA512 379b231e54f6819ed2d26464c8789d9cb173f38422d6c2db1a88b759961ba6149e8cde48d5e11daffa86cb8a288e33b94208b5459d6f498596c2c4c2d2a6f960
SSDEEP 768:0j+9I3MDTFCtQkFp8+p3bd66j+4BRv86aLIWZb9M8:j9I3McT8+p3Z6n4yvb+8
TLSH
T130F2AE73EC698D738CE1C694B2463A83AFF451A792C01E98E9DD6F1D06872AD4306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 2c3ccd6313805cbaa512ed7dd8478a79c9cdd26f9a18986dda9d927f7500218e
MD5 40fefd306e6051c31c3af43aebfeb2b1
SHA1 04c44943a04791d6b20c472ea7a68d184cf396f8
SHA512 132c2844c975177102130eeff67aa5da72018f69ff608a59caaf1af80dd8682dd2c16dfcdca3ff376afd9120b827216cab87434eac0bdd230a0e9945f67d27e0
SSDEEP 768:NF1j+9+3Cwg0aTFCtQzp8+p3bd66j+4BRv86aLIWZb9M8:E9+3fy8+p3Z6n4yvb+8
TLSH
T17D039D73EC98CD779DE5CB94F24A3683AEF451A786C11994EACD6F1D02871AC430AC35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e9c411c868dc98d0e6a2ac50b74ed9e6cc21fd52ef47654b62be00058d6d91a3
MD5 c4ed568a1f0cda286251ace733f198f7
SHA1 c75d1fe4a1cdac389f5426ce15f7de44905579e3
SHA512 f4bbd01290ed2bb1e94209498a4d9984a85fa5b632739cf9e706952ce35ba195ab80b5a1e311d0cdde161a0540f8c0b169fc6fb790f501c2952b734caf781d74
SSDEEP 768:Irv+4UNbdD34cFCtkNp8+p3bd66j+4BRv86aLIiJ2bwCl1:Ibsbp3TL8+p3Z6n4yH0ww
TLSH
T1A003BE73F96899339CF6C684B2467A837FF850A396C10AC4E5DD2B4E415A19E230BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e0ca83c0-733c-4019-8027-4af5310e9ffb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e0ca83c0-733c-4019-8027-4af5310e9ffb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download