5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c

Analysis

max time kernel
900s
max time network
733s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/cmp.html
Size 5KB
Sample260718-etzfqsf13p
SHA256 5966979a422c2526dd77897fb643639d82b16bdb89d8fa6e8615d3b32169af3c
MD5 17241946e51074e6877c43737b94ad71
SHA1 16918c53471fe3f35fcae1e9902870d91c50d957
SHA512 b4b6e030fd1abe19fa308b32f04571a7c1c1f78a7cb789f169b37b54f281ec66d16e4cf0bbbdad81642bf28e266a6b2af7c19cf5106c683fb7f443bfa3110e05
SSDEEP 48:tZrc0/GdshWpo1rckthAoShbEHaLKNGiNQtvmolOGR36tgtr/GTvJP8AscaV4Li1:4V+8v4jHa2NGiivmmpWsBVuQFwlE5vSG
TLSH
T15DB1DB1A2D5914A80077E3385B6B6208F72AA1B72105CA067EACDE513FB152BD58FFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3704	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288217195773687"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{0FA4A94A-9585-4C89-A7E4-AB1E01F08AE2}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe
2908	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2908 wrote to memory of 4000	2908	msedge.exe	88
PID 2908 wrote to memory of 3704	2908	msedge.exe	89
PID 2908 wrote to memory of 4548	2908	msedge.exe	90
PID 2908 wrote to memory of 4548	2908	msedge.exe	90
PID 2908 wrote to memory of 4548	2908	msedge.exe	90
PID 2908 wrote to memory of 4440	2908	msedge.exe	91
PID 2908 wrote to memory of 4440	2908	msedge.exe	91
PID 2908 wrote to memory of 3020	2908	msedge.exe	93
PID 2908 wrote to memory of 4244	2908	msedge.exe	94
PID 2908 wrote to memory of 3020	2908	msedge.exe	93
PID 2908 wrote to memory of 3020	2908	msedge.exe	93
PID 2908 wrote to memory of 4244	2908	msedge.exe	94
PID 2908 wrote to memory of 4244	2908	msedge.exe	94
PID 2908 wrote to memory of 4140	2908	msedge.exe	95
PID 2908 wrote to memory of 4140	2908	msedge.exe	95
PID 2908 wrote to memory of 4140	2908	msedge.exe	95
PID 2908 wrote to memory of 4080	2908	msedge.exe	96
PID 2908 wrote to memory of 4080	2908	msedge.exe	96
PID 2908 wrote to memory of 4080	2908	msedge.exe	96
PID 2908 wrote to memory of 2516	2908	msedge.exe	98
PID 2908 wrote to memory of 2516	2908	msedge.exe	98
PID 2908 wrote to memory of 2840	2908	msedge.exe	99
PID 2908 wrote to memory of 2840	2908	msedge.exe	99
PID 2908 wrote to memory of 4624	2908	msedge.exe	101
PID 2908 wrote to memory of 5860	2908	msedge.exe	105
PID 2908 wrote to memory of 2296	2908	msedge.exe	106
PID 2908 wrote to memory of 5720	2908	msedge.exe	107
PID 2908 wrote to memory of 3304	2908	msedge.exe	108
PID 2908 wrote to memory of 3304	2908	msedge.exe	108
PID 2908 wrote to memory of 3212	2908	msedge.exe	110
PID 2908 wrote to memory of 5608	2908	msedge.exe	111
PID 2908 wrote to memory of 5608	2908	msedge.exe	111
PID 2908 wrote to memory of 3908	2908	msedge.exe	112
PID 2908 wrote to memory of 3908	2908	msedge.exe	112
PID 2908 wrote to memory of 4864	2908	msedge.exe	113
PID 2908 wrote to memory of 4864	2908	msedge.exe	113
PID 2908 wrote to memory of 1048	2908	msedge.exe	121
PID 2908 wrote to memory of 1048	2908	msedge.exe	121
PID 2908 wrote to memory of 3236	2908	msedge.exe	125
PID 2908 wrote to memory of 3236	2908	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\cmp.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffb5309c188,0x7ffb5309c194,0x7ffb5309c1a0
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1836,i,1036657417800960182,8371254582845038848,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=2644 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,3833442243088148659,16077920912597610454,262144 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2288,i,12885199100332300587,16541964864014630344,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=2552 /prefetch:13
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3604,i,15354921861297627543,6548755774566989734,2097152 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,975527921789085939,5851053445887886429,2097152 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4432,i,11407784471707265639,225723279188590243,2097152 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:9
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4420,i,5204517467922708738,3336522969863080314,2097152 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,1276637856215122136,5063199846652189183,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:14
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,5422863683827686324,6154257892674296402,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,6788705360900068668,1013423251404331910,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,6788705360900068668,1013423251404331910,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,12581404011364569544,9228088306781805929,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:14
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,8886393320804892954,16377020231008417525,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:14
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,11909404782927643901,7366298089961766699,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5388,i,7320011512982401322,5964149095351556106,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:14
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6500,i,12345641809589983216,16658277076078142936,262144 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,111937802217225916,8476024738175803732,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,13857856660553062024,2909786306946623255,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7632012651634651458,7259154481325931294,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,13832286233316986579,14881921712183562977,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=3924 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,6682031595997813496,2369888193933122787,524288 --field-trial-handle=2608,i,5288184218557756396,13830893981176311872,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:3236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5568

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2040

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2680

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5568

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 63c4384d78036728589548d3a74cb04daaa54328b3c2c53f6702784834e6829d
MD5 79f58e4a975fe0f22b85aed140017dc5
SHA1 c29d580a49554ab0b44b75205026a22fc277cd1f
SHA512 b7010e050b8135b446d380650b1b102fba18feab6ffbe85de41a93117c39c52df8ee8ed85efa79bdf32dd1ef06b631a690ec3171dfd47b4094b676b6956d75b1
TLSH
T166E026C529D8C27EA780F44742B8830CD3E13A8AE2C87A0A27448AED7285150A3CB6D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a5dc0c2766f1037ef1270b5e993a7c6b79220675cd76a856ce7f77683836817f
MD5 d3f873d40d16ddefd6c8c39dabf0c8bb
SHA1 1dc5557f9484ee6bd215e24e6d2ad0a7cbef863e
SHA512 3e6137af6fec8f27e5855826296dae9840393500292fce3010741c4f1a2d32f41f4ca384152218b4034ab1d8f13a01c7225f19a2b57a82f17d3bfb93a3e724e6
TLSH
T137E0C0A099C9C21E5210654341BC430CC3903FCEA2C42E052B04859C3341090A3E2944
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c4641159ef6bad8c2d283e20be807cb2d74bd8f179ac2fd758c2fe2bda1290cc
MD5 e44f1f1b4906c055d0d8cd49ef9eb067
SHA1 7f8348f054ef4c73f48d391b4882601a268056b9
SHA512 764b9eb7de0018d60fd845cb32e953911e41f2c13ddd45cb36a9d24b9feb0c87c3c5c94c05eb94ee6f1cd6e4aaf625ed7780b0a06ae0bdc1f43e130302c2be89
TLSH
T16AE0208418C4C35F924065A7425CD30CC3923A4FA2C46F4A2740D599B10607073C17F0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 7a7663401d67e21eafee123d7920029966750f6a16b717f291a3062c0ac42cdd
MD5 52a3b8502da5693b7ca1eae9897512dd
SHA1 e076c41c2fe616bec389ec0102dc3588b0ec66ab
SHA512 9e1b7a4c38949a68ccdef471dd6fee693325c0a334015779fe91273052696861b732f937e739dc650d192269374a896e912dbad6c495b7a686ecc49500183367
TLSH
T16A51D9CB433704E7E3AC48756CE28C6E3E75D5E901CFEED0AD4865B84A5A31B6CD0092
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a0d11.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a0d11.TMP
Size 2KB
SHA256 cf89280d95d5d32e9d8f48ce62fc1fafb4f70464a69373f1fe4522651fbc6078
MD5 279271730774fd53137caa0a71de4f67
SHA1 086cd280dd34e0306319e47ebf97c711d1945f2f
SHA512 3d45ef2fb208c99dd9e716e17d62475583974a5af70aa29449f245833d17ef227e19d04f25a577374c3901f066eeadc6d80ff2a4cc6ad013bfb383c8822a045f
TLSH
T12951D9C7432704E7E7AC48756CE28C6E3E75D5E901CFEED0AD4865B85A9A31B6CD0092
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6263bab3-2319-49e0-94a8-afb21202a9ba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6263bab3-2319-49e0-94a8-afb21202a9ba.tmp
Size 2KB
SHA256 ad2cf2a143e72f76e2fec6da2855b576a4d2bdc425ea7ef4e4b36f5af509c47f
MD5 343f4e7cc80c1f3b1638e14b60bfa132
SHA1 f51b4592deeddc022f0e9efeafa7c9a06dad00c9
SHA512 48b34bb3b548756e2118094e1402516b03e5c262718c48f88c9d75d0023bfdb246f7a3ba93d967fdd4bc70e66651147919431a899cc00fcfd3495299b9e78ad5
TLSH
T19F41BDF7C3E4966E890196F0AB146E1BCE2C0916432C3C56C9E4AF1B93F2471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 e0324fa07c1ca0a9d15d7a20cb42ea6c6eef298a1ab5899aa813a493aea100d5
MD5 7e7ce6610128c7ff1890b3faa148e4e3
SHA1 672e764f316f2be2d53ea0f5b293d4fb592c9729
SHA512 e75fa78b9cc440035a81dfbf1e9aef73e9be6ac3216a78522d10e8900269c28f005b2ec78768b19b3983a9dbcd9ac799353c067275a63952a7dde2eb4e417aa1
TLSH
T1A441C0F7C3E4966E890156F0AA147E1BCE1C0955832C3C66C9E4AF1B93F3471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cf56dc4913840cec3ff5c04f36b3a569d65e7dd1f12469f4fa0873c7fe3f7179
MD5 4db639d390d882c4883b97d08d5272ef
SHA1 144c07d49a619de49e2f6f897e97aa7f8cc3c745
SHA512 f4583af1d2f96a53ac08e82ef40ac615a8e381739cd05974e5e68609f992b36895dd21173506621405489f98757d86f6585b3092a5d16cff067d3eff99d9aa71
SSDEEP 192:sxR2R3ba/fEskDprQ5EzoA8p4t/g6+WNIYn83hvGIzIgD7J:sxR2Fa/fEskDEI/5ITRRJ
TLSH
T19432A6166A28A93B5CC7D21DBB55BF93D6F9503261D11E48B7FC9B0C04EB6CE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 e51373dc756661bdfb69cf1f361f77d88ddd9f14bed2e6c591dfb4541b487f6a
MD5 d7d7c2f49e273de1f38115360382c9aa
SHA1 af27ee6f2b523ef93fe0631b211b637ddd36c145
SHA512 d21c5e8ac2600aca2ca36b132a5c9d26060c0fa92a35f06fd726bac14def09022d43af32642733351e7428592017d6d205f5db221d1a8dd159511a74f0e80dc0
SSDEEP 192:sxRFR3ba/fEscDprQ5EzoA8p4t/g6+WNIYn83hvGIzIgIJ:sxRFFa/fEscDEI/5ITRRs
TLSH
T10632A7166A28A83B5CC7E21DBB55BF53D6F9503261D51E48A7FC9B0C04EB6DE120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 313457a9a92798175eac7ad53f6758115a157d91752786a0bf282a57353944df
MD5 d6a51a94b2afbfb6cef2186b606f19c7
SHA1 4191bf750032de19448059c1793d4023077327bb
SHA512 7f5b1ed01570a1417bcd3ba428977830b438b3b941811d6b063c4438b7c7af616d7e4f2ca7dedb7783b5caa7e8bf3311acf39dab4e95360cabff711be09658f1
SSDEEP 192:sxR2R3ba/fEsk6prQ5EzoA8p4t/g6+WNIYn8QhvGIzIgDNJ:sxR2Fa/fEsk6EI/5ITGRj
TLSH
T1D132A71A6A28A93B5CC7E21DBB55BF53D6F9503261D11E44B7FC9B0C04EB6CE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f64a01ddfa5262e2036fb128857706f9caf4e333216c4caa527b24d13b2c6f11
MD5 dbdd562f4eb367616f561788d9ffa721
SHA1 034baa991e119d12cf5469eb036fec2465bee45e
SHA512 413b5f5b79d0c78188db2894d9cb6d47c5cf4eb16323ae71d373bd69baeb82cc24f8195df123f4634e1cec58cd0dcad4f4cac871fc7399b935e6bfa9da467c18
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPmrohMV:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VF
TLSH
T113B2EC3B604DCB7E5F800AADEC19AFDB6D9802C79A988D4047FE990C02C77EA51194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 120B
SHA256 1d9b9975d9f89e5c40b7450bb3b090bb315f5e960ed73803df500352c172bd54
MD5 6867b936a5bd97dd3c73b73a925d03a1
SHA1 60f154ef17b7d94374560b3a43ca55a236dfa074
SHA512 98fddbbf9d0b824646c1958e03572218ea44a0bb661b958f253cbc69e37e213f1639364c770d4f994e2753ddefcacfba6740832fb6258d70104d4ffe3f707b04
TLSH
T14DB012048D460892CD0A09310577213C27390AEC0811174350CC6046D8F149F9105604
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e4d82.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5e4d82.TMP
Size 120B
SHA256 e02e2f918e9b5e646cbab0fde2f66ad7a798d3d905248498bf2856313d6f0fb0
MD5 0d4ae390b1e99f1b05aab59d1026a800
SHA1 e56078b83e3addf1111f4c2a860a21d34f37d044
SHA512 7850f21999744425025efe3c2d85aafb864b769000da261ea579606a92f0b1df7f7d1ae199ff514717a4e29e24347c2912c766a39f619e86b280fb9e657684a6
TLSH
T19CB0112282A20CA0EC0B02B020238228332A0CB80C308303A2EA08CF88B20C88282A08
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 0befc3260505ccdb249a417bf7933af8dc7a90d378596f8c814dc9475e73e71e
MD5 d174eac7420aeba69b7aed1ed8a3b8b7
SHA1 046a5177a854d6884dfa247d105999797650532d
SHA512 0a62772ead6ba3d28c18c258a1a1fa214224981928f1d1103e2e4b169a4a67cf519dbb2868cd32068f5bf0808ed0f59b7c5dc5f1025694960c98968fccfdb452
TLSH
T11EE0207B3EF72814EDEFD7DB1831649105107454844DBD4F6855E2D714B236434A9C25
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5aa5d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5aa5d6.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 611502c8f4cbb619b4ef3f010f084d3e3f83d1aa6c98eeba48babe25a2258e16
MD5 77a9c783b63e2a9982f7055b1983dc3a
SHA1 50025f172d77408126b4d3f45b9a7eff82f05c18
SHA512 20d52b7fc388bd91db8397ad1ce184e490ef44effd29fe837b7bfbc848d568f2bc855fd3c31ddeff8e0fd61b4d9b0432995fc5e0f7e9265c58b433ff54e44411
SSDEEP 768:oj+9G36M/cDZIO00U8iNzc4ReyIsP6Jb9Mm:39G3vsU8itc44bsCJb+m
TLSH
T169F2BF36BC25CD67ACE64696F5073653BEF0522B82CC2E84E6DD6F0C09CB5AD436B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4e0bb4a18d27891f3effade443fe8713ccb6cbcd515f602c0d18b75e35460902
MD5 f6b533fe4399ef8811f10f0e657edd1f
SHA1 963dc9074babc1632c90d31774f48149710593f1
SHA512 80326b9e5d2f5b393fbc3b4a28577821484ec6b5aceed2871c14c3afe4404a627f1852711e34e121ab18d926bd504356c41b62189f86e348189f5ed592d7194a
SSDEEP 768:jrv+4UNbdc36+cDZIO00U8UNzc4ReyIsP6JiWN:jbsby3sU8Utc44bsCJT
TLSH
T1A103BE32F82889B7ACF69686F40735537EF4515B82C91AD4E6DA2F4C098B1EE131F913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6ff71325990f8a099023502c0b42beb9adf5bca4da515f86a436b911d0677352
MD5 8ac3ff1d101342d84b13f862178aaeb6
SHA1 c00a57f0bb779390d0e50499205f901d7eea9391
SHA512 0afc0397960ed12eef89afb17272e1f3c5c2e606949a193bfaa997bfb58308af784af7ddeee21f59d9b26f055fe7527786e390a9d78532b6f61c5e68d951d733
SSDEEP 768:6j+9G37M/cDZIO00U8iNzc4ReyIsP6Jb9Mm:59G3YsU8itc44bsCJb+m
TLSH
T19CF2CF36BC25CD67ACE68696F5073653BEF0522B81CC2D84E6DD6F0C09CB6AC435B412
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 040754f1aaf6fddeb06b2e4c86aefadc05e200da353cc34c41e155567d66555f
MD5 0ba20cbe0c2f0da21ca28ea97ef0d56d
SHA1 1233f1dcbb6b27b6b8cf5c4b20ecd0f7b6ed1d3d
SHA512 c115bc9985674e61274bc5ad6d5cb218b48ef13b72635327442cab21b6415e1090ec63ba07f6278bd3510b06b7f2bb75c8d02cd2deee96c1760143ac69feb93b
SSDEEP 768:2F1j+9K3awgqM/cDZIO00U8GNzc4ReyIsP6Jb9Mm:D9K3OsU8Gtc44bsCJb+m
TLSH
T14003BE37AC54C97BECE64B96F60B3653AEF1426BC1C92990E7DD6E0C058B1EC435B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e618daafac2eb3ef8421a4de4e885360b265daedbf1a7f5b32000bd2af3e74eb
MD5 9c6a48bc3dd975419f5424b244491d75
SHA1 bf68f8d0f389e37af0be6eaedc38935cb356a57f
SHA512 8467a9642f22d32e71b0bd0738b64ffbc1d70f9c5282a278e576c8b900aed1cc4584f628c61a501c8654f5aa696a8665ee1c50beee5533230eef3fc40f614446
SSDEEP 768:6rv+4UNbds3VzDZIO00UPNzc4ReyIsXueVH1S5D:6bsbS3zUPtc44bs+EH1Y
TLSH
T1E903CF32E8788977BCF6A686B54B76533EF86117C2881AD4C5DE2F0C468B1DD131B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9f1dcdd8-2dfe-407d-9ae6-73c5b6136e48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9f1dcdd8-2dfe-407d-9ae6-73c5b6136e48.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download