bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

max time kernel
898s
max time network
748s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 12:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260712-ps65asbz4x
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2528	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134283336889147488"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{291D5265-6520-4FBB-AEF4-DAE53E36EBBB}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4744	msedge.exe
4744	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 5892 wrote to memory of 2104	5892	msedge.exe	87
PID 5892 wrote to memory of 2528	5892	msedge.exe	88
PID 5892 wrote to memory of 6020	5892	msedge.exe	89
PID 5892 wrote to memory of 6020	5892	msedge.exe	89
PID 5892 wrote to memory of 1188	5892	msedge.exe	90
PID 5892 wrote to memory of 1188	5892	msedge.exe	90
PID 5892 wrote to memory of 1188	5892	msedge.exe	90
PID 5892 wrote to memory of 1264	5892	msedge.exe	92
PID 5892 wrote to memory of 3904	5892	msedge.exe	91
PID 5892 wrote to memory of 1264	5892	msedge.exe	92
PID 5892 wrote to memory of 1264	5892	msedge.exe	92
PID 5892 wrote to memory of 3904	5892	msedge.exe	91
PID 5892 wrote to memory of 3904	5892	msedge.exe	91
PID 5892 wrote to memory of 2992	5892	msedge.exe	94
PID 5892 wrote to memory of 2992	5892	msedge.exe	94
PID 5892 wrote to memory of 2992	5892	msedge.exe	94
PID 5892 wrote to memory of 936	5892	msedge.exe	95
PID 5892 wrote to memory of 936	5892	msedge.exe	95
PID 5892 wrote to memory of 936	5892	msedge.exe	95
PID 5892 wrote to memory of 712	5892	msedge.exe	98
PID 5892 wrote to memory of 712	5892	msedge.exe	98
PID 5892 wrote to memory of 4616	5892	msedge.exe	97
PID 5892 wrote to memory of 4616	5892	msedge.exe	97
PID 5892 wrote to memory of 4112	5892	msedge.exe	100
PID 5892 wrote to memory of 6084	5892	msedge.exe	104
PID 5892 wrote to memory of 5840	5892	msedge.exe	105
PID 5892 wrote to memory of 4544	5892	msedge.exe	106
PID 5892 wrote to memory of 5976	5892	msedge.exe	107
PID 5892 wrote to memory of 5976	5892	msedge.exe	107
PID 5892 wrote to memory of 4744	5892	msedge.exe	109
PID 5892 wrote to memory of 2776	5892	msedge.exe	110
PID 5892 wrote to memory of 2776	5892	msedge.exe	110
PID 5892 wrote to memory of 5824	5892	msedge.exe	111
PID 5892 wrote to memory of 5824	5892	msedge.exe	111
PID 5892 wrote to memory of 2520	5892	msedge.exe	112
PID 5892 wrote to memory of 2520	5892	msedge.exe	112
PID 5892 wrote to memory of 5332	5892	msedge.exe	113
PID 5892 wrote to memory of 5332	5892	msedge.exe	113
PID 5892 wrote to memory of 5332	5892	msedge.exe	120
PID 5892 wrote to memory of 5332	5892	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffb19dbc188,0x7ffb19dbc194,0x7ffb19dbc1a0
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,13547524176740121158,15932652020034826414,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2476,i,5795129242281803372,1874643765252469184,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:13
  2⤵
  PID:6020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,8939640342493576799,10617004901914824381,262144 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3172,i,7377643718842546005,14765620570740062776,2097152 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3712 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3656,i,7679680527184972408,9505118871842318676,2097152 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4340,i,16476687137803128904,10183583807678779162,2097152 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4404,i,17265709805703089800,8635796888154684237,2097152 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:9
  2⤵
  PID:936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5400,i,12644904076384269925,7487373652282447829,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:14
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,6311335749615867537,2042448487846789021,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3912 /prefetch:14
  2⤵
  PID:712
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,15581121235563393139,12112699698041214709,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6056,i,15581121235563393139,12112699698041214709,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,10719208473547907078,7793796362534567533,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:14
  2⤵
  PID:6084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,1070831042051831809,733161640574907780,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,9250491253996096014,4940231279407579601,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,7353803432620775615,10709377726363016543,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:14
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6164,i,12556195811132764800,13570299295699279988,262144 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,17710357879165027043,10420755957580213662,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:14
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,986158532139771940,8419173674966249855,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:14
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,6482665918393375031,3720951858115819860,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:14
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2708,i,239230389429184622,15616496744521605217,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:14
  2⤵
  PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,12672014667130069233,13143082217675152914,524288 --field-trial-handle=1960,i,3392223475423070981,16321460910625985821,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:5332

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5896

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:756

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3496

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2388

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 0b824d38ef09d7f6f3a4f9c04514fb2eaab29793194438fc7f2362ff067dc733
MD5 29b177fc0c8625618aa9b5368fa97ef3
SHA1 84c1094199a94326d55be79347bd0ae138e0dae5
SHA512 81f38702f5062d481e7e8213a04065408cc4b1901de870bb75d402af2aa57ab962c2f382a6030c5031eb996ae77f145c52f4caf41ea7e76297d0382ab1faf815
TLSH
T1A4E0DF5533F0CAE452B09B8A8279E72C89132A879BCCDA5F3244A2BA2488C0463814A1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 5175975a60f908e197ce33e2252194f43a958e736917c2e87f845c4f6c14a0e4
MD5 ecdde59d3d2874a62c085351d4e4d507
SHA1 0443d7de13b9d8fb21e1258bbaee4dbe72664845
SHA512 e8d0fc70998839a9f90f3a81c40aa9308dde6cfb8aa836e45b96759792f883974d660cd9942f9c478cc06f14065cb84492a155c37de8229b8424b41ab67a6700
TLSH
T1A0E020883DC4C29ED3406ACB42B4D30C8F81360F92CCAA0D1B0088647006840B7CD590
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 274B
SHA256 0c0db9815994476b95ee5d2ac1985c1335f77e1866e53f380c6bedcd7d44297d
MD5 54ed366f74200c006c85f2c852a5013a
SHA1 fa4b39a37d23af82c3a6660e1915b6a07bf0d6ca
SHA512 35e503555a860ef9e2911f4cd5034bef763110d15b1c7015ab58871354452d0b485ecc40ee059e1cb083e7ffd21d54d24b604423da64a970dc197566bf4e87f3
TLSH
T185D0C2B8A88C694FE7E41AFD43A2B0400F6486D26416DF120255F9D132555F41F56070
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5d21c5f6c3df7f3214f48367b4c23144699e68cc1b56928e9468536f0bea6cfc
MD5 92ff8d686f9099f327d232e7a31c9fa3
SHA1 a22778085d4b2037b52c9978e7fb536ec822f5ab
SHA512 f4c30cf8fbac83d70303ddbef48cdc922be064b7f3cdb661931421a405144a49155e31e792bf7a66173bb81e3f94a5461b06820f9eeed9fed9ea7f22e89d8749
TLSH
T1E661214B236E04E9D36A4A7254D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59550c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59550c.TMP
Size 3KB
SHA256 24ae68b5aa622062229e85c3839de6a3f1aa3e11e5abe7e291a28f12181b9a1e
MD5 ac0fa3ebb83e03449376c576bf56741b
SHA1 92296aaa424c397a08b2a76f0a651110fe0b1381
SHA512 69fee8256f4679cb1772699530e1acdeda21b15a921e8a77c97594bcc1c7a23564d43bbbaaaa6d8615b314fa4a250c96fa27f79c3970bdb7706f4340b1e8cef9
TLSH
T12E61214A235E04E9D36A4A7254D9774436F086704D07BF8080F6DEBADC2AF5892F921F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 c872bd625b9c9699099de7eebb911f329bbee2a4d9d22b563ff2e8064618245b
MD5 8495f2ab48b96fc4f5e2f5552b81e966
SHA1 5be1e2423d4ad7b5599bca033e6f363e6bc28ee2
SHA512 488d4269f5c0311506c9fc30c1f66a24bc05b4e1070cbf20d256184a4200675ea82166e3b3c88e4f912b451242fba9e7d2a6f72481d7ea8f6a152657e0c3fc90
TLSH
T16241C0F783E4966DC90156F0AA187E1FCE1D0915432C3C6AC9E0AF1BD3E2471E142A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8c894de5e477e8615332c06f1a44e06c44393ecd474ffdc388ed6323b61942c7
MD5 b92340c43872c7aac9833f4f27dcd812
SHA1 3c39baa37ea99eca39808408352aff2280033b0b
SHA512 d65c3c29c4143fd5057bc568e8cf25ac64c8f03aa618edb2fb281f35d8077757f8d5e58f7fcb77fa1e0bdd8ce6c64d07c5643de25d8f829411d8b7e9b7b01552
TLSH
T12951BBF7C3E4966EC90196F0AA186E1BCE1D0915832C3C1AC9E4EF1BD7E2471E102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4404b69b52dbb952353217146c5523af0a3a770982cc4d0ec919ae7cdb6d7ea8
MD5 0683b8eaa4af96630c53f5982442152d
SHA1 2075657df387cefea11f4ab8c630d41f357955b5
SHA512 09ef56bd6ab505dbef098f3e26aa36a8d3f8ba165633f47f583220d13e4bb32d2e48b0552b2e634be5b3035bafc67aad123b107a707448b45bb294a1530b79ce
SSDEEP 192:sxRxbRkyM/jK1Ml8wbZ/fi1sUPT5mprQ59zoA8p4H/g6+WNIYn83hTRGPIgDhJ:sxRxb2lZ/fi1sUPtmTu/5ITRTQP
TLSH
T13952EA156A345D7B8CDBD20DFA45BF93D6F81573A2905E44AAFCCA0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 de5a9c684c95ca44e1df05145b5e050a15bbda7e79c26dda8e091d9a9fabba11
MD5 bed288471d53ca4a50b09b2efe6e160f
SHA1 2849a397f044212246539ebf5bad6e0f16206092
SHA512 0604997ae0b9744d1d78dad100b2b020ba7d6cca434b4be2d4345aa463a241b73b56656ecad5084bd44849866aebfe443a8e4937e0d52b6632261d3a1743f97d
SSDEEP 192:sxRxbRkyMqZjK1Ml8UQJbZ/fi1sUPT5fprQ59zoA8peH/g6+WNIYn8yhTRGPIgDZ:sxRxbPqhZ/fi1sUPtfTs/5ITQTQ9
TLSH
T1B962EB166A345D7BDCDBD209FA95BF93D6F81563A2905E046AFCCB0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 96660f228cf1647634b963e4891255915a7c0b71a6d0937185daf93a6e93280e
MD5 267e56d95ca6c3d107951fc79efa9465
SHA1 02680ac7257b2f73d59426ade661e8f153f9158b
SHA512 0f584b5d978e9ca1099b48474ee8a6ce52f0823e09475a0558715f0fea7f7474ec72316425c1b6f06ddf8adeeb6588401885013219f5c4ee77fbe61fc2bea2ad
SSDEEP 192:sxRSbRkyM/jK1Ml8wbZ/fi1s6PT5mprQ59zoA8p4H/g6+WNIYn83hTRGPIgIJ:sxRSb2lZ/fi1s6PtmTu/5ITRTQs
TLSH
T1BE52E9156A345D7B8CDBD20DFA55BF93D6F81573A2905E44AAFCCA0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 362198e8b95d68b07fe581bc7a4ea3ce628ccef3393a3b1c82aeb94b235ea8f8
MD5 039ef4436cd0c52e40f1c8fc433a9068
SHA1 310cd57945bc1f6abaf6946352bfb78c2698924f
SHA512 8c61b3f6a2bbf565b0dea8aa247f945806ed0316cefe5d03114116e9a761d94cd36fcb5f4175f783d2a2cdd785bbf393e2957cf5db410c0dc4bd13a8abcf0c5d
SSDEEP 192:sxRxbRkyM/jK1Ml8UQJbZ/fi1sUPT5fprQ59zoA8peH/g6+WNIYn8yhTRGPIgD3J:sxRxb2qhZ/fi1sUPtfTs/5ITQTQ9
TLSH
T1FB62C91666345D7B9CDBD209FA51BF93D6F81573A2905E44AAFCCA0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 f2d32f8ace6bb83a5fbf992b1df285a8ca3497f73f5ecab06f8039d8f03fc23a
MD5 0cf82caa73802b04fdc74ba9498908e3
SHA1 0c6c62eebbb8dababc13f858747dd8aaf57666bf
SHA512 8a34e2654009f91601ad89b5e6c26da6711f8113e895510ef92f9ccd8285c897f6e9e49117071ca221b3210c6099a20569659e55e051c89ddc8f0f68f5d2f68f
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YTroSh8s5a:wGedp6WgoufDMu1jatVYge4
TLSH
T157C20C2B640CC77E4F844E9DEC29EED76DD801CB5B988D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\temp-index
Size 672B
SHA256 7728bc6e9e32304328bcd46910c2d1087d49d29f59676810ee410048ad4a8d26
MD5 c863fcb74c9fb29cd96c049b715a25fe
SHA1 1d58c68071ed781589ad3b282ea1debc65226c93
SHA512 23bb60eb165ab95d52b5d78adcbd598a1d05530b31af99714c5801eca0e1062fb896312e013a9a8a5425d9f09ac8f9ea2d28a443a27524c51f1c6d6ae2bd5b93
TLSH
T11B015447CCD66807DC533DBB263E218E373C08FD15038DA7015DA0369CB36388244315
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d9618.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5d9618.TMP
Size 672B
SHA256 45a5815da1d933cde56db711b09f699434a5ddeebd01091b2be215d42c187b7c
MD5 5913faba6a878a0dae1c1131a5a927e4
SHA1 8dc2247cfaba0fbf78ad1f6880a367e2a8b90ea5
SHA512 8f5abc0f47f176a5b939920dcfd279b922652926e4bc1c13b83b56b6dd9d950655274aa13ff5365020c45086e814da4d48654dade9f92d90cddfee97c7327106
TLSH
T17801D4EB40D1EC46DD5664B532195115733E08342125D94B21DB747A55717348581652
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 36efb9fe8f4ca6e32727c170a5dac60fd5bd3b9eed62ad405843e222380309a3
MD5 37b0457acd570474fedbca1ac1edeb1b
SHA1 0c9a7b23490149d5634a9e4c9f2cd9227d271e93
SHA512 c6c9b10d271efb9b24dfb1d1aba99b089b77f14296c892ff81646d7c0c8096ae736f0a0ce3c10473af13d83b6e74a7beec2e0156df093ebd169e1d480a12a2a4
TLSH
T172E020777EF72814ECEFD7DB5831745105107454844DBD4F6816E3D714B236434A9C61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 7a7c6436c9d70047cc9156a0c6d0b0d2a0fe26060ccf33326945e72f92e04fb3
MD5 4167be1f856e098b41783bead08494cf
SHA1 a77692f1de3af3e31a49e7dce6c60e141cf22d02
SHA512 6547f4f744bd4691bcd18cbb49a3cd2d9d8accd23427f5c9e0e220cbec04635312cab9917a6ffc5800103cfe32b92cd57ef61c1711dacad39737f2e666ddd245
SSDEEP 96:KRtaTHd3LfWTI2gPfK4Ogxfc1NAj70HS3eyEkUyW8pBgiyK43gYyciKxQ9egKL6d:CtaTHd3LeTInPlOgxU1NAj70HS3eyEkn
TLSH
T117918642713A1640387D7A1881B49D2BD6C274B3341AB46B7BE956B10F3EE139DFE4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ad840109-862d-4a6a-8556-f441d48119ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ad840109-862d-4a6a-8556-f441d48119ab.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 159341b4447b3da180f961b561686735d36192d39c207de0d3ac6c447256d110
MD5 38df8e647fca8539feaa4a36f76a11ee
SHA1 c67a6a85a45ba38fd0b9a51674d65771be55bce6
SHA512 fd1c82dfc209d5020ad0f2b4faf8e9012d48da6b1eac9a5f1bdeba7ac4d53e5c4829be8692b49073b3d42a5d9d4f54f7100a515c26e1fe107b516dc3bb90f3a5
SSDEEP 768:Drv+4UNbdb3ocqDZIO0X4Nzc4ReyIsPQX:Dbsbt3oNtc44bsoX
TLSH
T1CD03CE32E838CD77ACE65285F10B71577EF8515783C92AA0C9DE5B8C464B4EE231B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ed1cdf838660f375b3dc7bf8318576062a24e037ad3f48af2579c4fdb539abc3
MD5 ac2214dc106cb41e9efdd3481dc031bc
SHA1 05c0e15c249ebbba014e9248dd11352b7b8d6e87
SHA512 fb7a10721fc3ad495118518e40f6ee5d412092b7a4a0f43ac6762b93d65ab8c8c59721e464e27c8964d2e58618cad8da365ad8852dcdc5b858dafeea5f439743
SSDEEP 384:stNn/s3n9Sy38NJpOYmTLwJDZNfNoXOVSUU+GXRF/ETRzcoXfK86sfxEZxxsIj4t:sj+9Z3lzqDZIO0XENzc4ReyIsPQb9MT
TLSH
T10BF2C032FC248D77ACE29295B20B365ABEF4516B83C92E84C5DD9F0C09875EC532B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 0a0d60dd4a565d0713e5e736bc4283f121c9e4c3ea74c6c9dc24acee880d2bfa
MD5 82153554109709827e8db3d95afa6bfc
SHA1 019dc4b82a4a844972d0d8195cfee983eedc5a36
SHA512 ee3efb9dc439d4aa6f97fe39b669ebda38bf9414d433311b6a31d8d3a920ef0907dd86387a71f9da3767094a535cd84f66bbd97b41f8a323e1ebe71196462f45
SSDEEP 768:qF1j+9p3swgizqDZIO0XkNzc4ReyIsPQb9MT:v9p3z6tc44bsob+T
TLSH
T1BB03BF33AC54CA7BACE68B95F60B325AAEF5416BC2C96E94D6CD9F0C05471EC031BD12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 61e93776319707768e78dd262a3dcb650f4ef6bc93290154646c11d9b8e419c5
MD5 20a53675a5cabcffa53e30ef75503a2a
SHA1 52a00a5779abfa3b5195f15f08dfc0538c77299f
SHA512 4fa117fcc3f638e30add3bdb57ac716c0149000f1c086863de22da513af84a8350d2b5a9404be231ec693c2d9c03c754622024097f571e824e4522f5f36674bf
SSDEEP 384:ItNn/s3n9Sy38NJcOYmTLwJDZNfNoXOVSUU+GXRF/ETRzcoXfK86sfxEZxxsIj4t:Ij+9Z3ozqDZIO0XENzc4ReyIsPQb9MT
TLSH
T105F2CF32FC248D77ACE29295B20B365ABEF4516B83C92E84C5DD9F0C09875EC432B917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 84b37cdad9d8574f78842f59744fd55bb58b97749d5e9df5c7dd844c950263a2
MD5 2cb1704160090367179e4210b64ec3d0
SHA1 6efebe54b048ace76d40c7e67b2d0ec8be537dbb
SHA512 d777893ee1e55adbb7302a996e9e5ec71cb160f18021cf733d81b573476a03fb3e7dcb3aa065ad9dd7355e73676661f9b151f0e23895b36b4bed0d836c35d173
SSDEEP 768:6rv+4UNbds3mBDZIO0sNzc4ReyIsX4eVH1S5D:6bsbS3+tc44bsoEH1Y
TLSH
T18703CF33A8788937ECF6A686B50B72137EF8612B82981F90C5DE5F4C464B5DC130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

703e21c6-496f-49f1-b8d7-46a0b36409ab.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\703e21c6-496f-49f1-b8d7-46a0b36409ab.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download