885a8d6b77fedcd26194de2b47db15c8053a8654c29f6ec6d23bc290c1125c0d

Analysis

max time kernel
898s
max time network
762s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
18/07/2026, 04:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$PLUGINSDIR/app/index.html
Size 27KB
Sample260718-etzfqsf13p
SHA256 885a8d6b77fedcd26194de2b47db15c8053a8654c29f6ec6d23bc290c1125c0d
MD5 339a23a417c09fa632d511dcd6f2896f
SHA1 d1aeb469489ab84154fdfed58fe8bc42c90735ec
SHA512 68a7198f2ba00b27a90ee30efb7725a3500780187e17632a34d107ccf998475add5ba93e67fa980da1a0ecfb4f54681949b48db8be3635e3fb4a294f6b33fe6d
SSDEEP 384:vNqP9FBsnWRJ/seq06INLglbyPaAT1vnEQLxN0vsu5SwU:BnWX/seq06INLglbyPa05nU0u0wU
TLSH
T10EC2B711DA36102DB277462E75E2BA4D3024C127E5638A7EFA5D9674CBCB18B1F13B8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2808	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134288217191187536"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{3DDF5608-59EF-441A-BA8A-7C653EE1DB09}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe
3292	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3292 wrote to memory of 3540	3292	msedge.exe	89
PID 3292 wrote to memory of 1952	3292	msedge.exe	90
PID 3292 wrote to memory of 2808	3292	msedge.exe	91
PID 3292 wrote to memory of 1952	3292	msedge.exe	90
PID 3292 wrote to memory of 1952	3292	msedge.exe	90
PID 3292 wrote to memory of 4440	3292	msedge.exe	92
PID 3292 wrote to memory of 4440	3292	msedge.exe	92
PID 3292 wrote to memory of 236	3292	msedge.exe	94
PID 3292 wrote to memory of 236	3292	msedge.exe	94
PID 3292 wrote to memory of 236	3292	msedge.exe	94
PID 3292 wrote to memory of 240	3292	msedge.exe	95
PID 3292 wrote to memory of 240	3292	msedge.exe	95
PID 3292 wrote to memory of 240	3292	msedge.exe	95
PID 3292 wrote to memory of 828	3292	msedge.exe	96
PID 3292 wrote to memory of 828	3292	msedge.exe	96
PID 3292 wrote to memory of 828	3292	msedge.exe	96
PID 3292 wrote to memory of 4392	3292	msedge.exe	97
PID 3292 wrote to memory of 4392	3292	msedge.exe	97
PID 3292 wrote to memory of 4392	3292	msedge.exe	97
PID 3292 wrote to memory of 1428	3292	msedge.exe	99
PID 3292 wrote to memory of 4776	3292	msedge.exe	100
PID 3292 wrote to memory of 1428	3292	msedge.exe	99
PID 3292 wrote to memory of 4776	3292	msedge.exe	100
PID 3292 wrote to memory of 1268	3292	msedge.exe	102
PID 3292 wrote to memory of 4560	3292	msedge.exe	106
PID 3292 wrote to memory of 4648	3292	msedge.exe	107
PID 3292 wrote to memory of 6064	3292	msedge.exe	108
PID 3292 wrote to memory of 4984	3292	msedge.exe	109
PID 3292 wrote to memory of 4984	3292	msedge.exe	109
PID 3292 wrote to memory of 3496	3292	msedge.exe	111
PID 3292 wrote to memory of 1088	3292	msedge.exe	112
PID 3292 wrote to memory of 1088	3292	msedge.exe	112
PID 3292 wrote to memory of 5108	3292	msedge.exe	113
PID 3292 wrote to memory of 5108	3292	msedge.exe	113
PID 3292 wrote to memory of 1384	3292	msedge.exe	114
PID 3292 wrote to memory of 1384	3292	msedge.exe	114
PID 3292 wrote to memory of 472	3292	msedge.exe	115
PID 3292 wrote to memory of 472	3292	msedge.exe	115
PID 3292 wrote to memory of 1964	3292	msedge.exe	122
PID 3292 wrote to memory of 1964	3292	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\$PLUGINSDIR\app\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c0,0x7ffa8d8fc188,0x7ffa8d8fc194,0x7ffa8d8fc1a0
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,15793642600942633876,16009175156609769253,262144 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:2
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,15231664032969305073,2340179638498554582,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,16733005135065135695,6015987375260880780,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=2828 /prefetch:13
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3648,i,12504423458297571992,15650542747123762261,2097152 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,10092601821641523463,11760234889443358320,2097152 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:1
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4304,i,17011469691401743105,7948720850751415106,2097152 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,14787181239728073723,4293056725127370575,2097152 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:9
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,801758201301322334,6506760718228271801,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:14
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,11996504105662253088,11123359753428373230,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,17718519729371274301,10723229181534640935,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,17718519729371274301,10723229181534640935,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,296044287186258806,2302909999454617317,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,2750130860392673213,15255019085386027034,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5236,i,7637186441763158149,3066847027258291362,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:14
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,2606810288495198803,10954548483637286321,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:14
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6552,i,6173768852611343805,5444337283529560846,262144 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,7772364063254989963,6391830925828571108,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,10872240826749193066,335845078351033067,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:14
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6268,i,16650252021139665876,4041308831156063499,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5568,i,656379720616496462,2412567016822514200,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,6601504183056285277,17046313003435344671,524288 --field-trial-handle=2616,i,6556842870200314024,18031779395723420791,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:14
  2⤵
  PID:1964

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3280

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2612

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2860

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

392971b7-40f3-4052-a6ac-d040d04ff92b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\392971b7-40f3-4052-a6ac-d040d04ff92b.tmp
Size 38KB
SHA256 3d0785815af588be7f79d78772050b9c4f003dd5f496aa730ce2f846663c3db9
MD5 d810a5c0b4c6e2b0c50ce43b34b361dd
SHA1 45d9a888df6c00d8fdd77e64940550a352174fd7
SHA512 00fe1032c6051c4733c3b4b4cff6b0c6c82b8efdd4c351fe5490464a2af234cb4b33580ed73cd2d9a7207307cf349e9ffe55bade7f36262e2fcc2fb05308094d
SSDEEP 768:Irv+4UNbdD3JcpoNp8+p3bd66j+4BRv86aLIiV2bwCl1:Ibsbp3ZL8+p3Z6n4yv0ww
TLSH
T10A03BE33E9A899739CF6C648B2467B433FF851A396C10AC0D4DD2B4E419A19E230BC67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 103c8465aa51ede615ee031d1eb0edaab8e22309cd65f068d68c8711de776ca9
MD5 6c621f10fa57c07c95d94518b4951914
SHA1 85abfcd34908bf8c650e76dbee02c0df1f2a8f6b
SHA512 0328f5498f5d3cee9bdf07a8110ba5b97ce8aae76ae3689ac773f6bb8396fc169286e919b43713087d0bb6e2f59fe150cf3ce0a69318cd6eb07eb909cd9e281b
TLSH
T10BE07DE918CAC36EA250648F41F8438DD3C17E8BE3C86E1A3740858C7346890F7C3E94
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 083d89beb4e079b882cef6d3ed916609f407a95b587eeeb933c97248e23a1ab3
MD5 6e8f50032ea9392acde511438f219987
SHA1 2796fbbf3725aea5500d163399f827c1635e331c
SHA512 e4ffcbf7740261b3afe598409635fbc0cb7931c4e373d439eff8e0b01e35fea9e9c89afa866a7700542d7e99f36a4c3d21949b01b5a02f9c7c18472b69b035b5
TLSH
T101E078C428C4C75F5380F447435C930CC2D17A4AF2C56E452744D5DD764545073C55F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8777a3e395b65a5bf62ebb543166adbf2ad3a848965d6d32ee739f2e09af7a13
MD5 7b648c7bc56b01ecdde66541dcfb1f89
SHA1 d9536f3112b90e1b9d5b019989a008b8ebbcaa1c
SHA512 8b47bf7d5f6f31af90e52a05301a629dfd63ce58efb55390983398ff31d9c225d4485b9ba218853b9e1e67949ade2a51e5bcf1264d3dfe979053e54cc5f1a6a9
TLSH
T1DCE020852CC4D35E5A41654B41B8874CD3913A8BA2C4BB162740854D714509073C3554
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 362bc7c888d90bcfee0f312ce327ac0ae5852aa2c6ed705426e57df1ff3bf4ce
MD5 b2caf274dddb15effb9a90de1affb5c9
SHA1 657053c4f9bbda54e88718277548e3adee3ef1b6
SHA512 f66816235878c8f7ffa4faa46ab8f4103f3c9e4532d0fe504783192e1adb9886d15590c9fcfc0361f5015ac10c4e0eae792b1d0c04ea54813b269dac8866e477
TLSH
T10C51A66D233F36CECB7481B994E4658932F0A45B8AA7EF22C0005D7A59D6F10EDCA853
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a232.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a232.TMP
Size 2KB
SHA256 5ee1ba56ac1b5bf699abe1fc6819ba6a8393319c846363ae1e2d7f21757b5bf7
MD5 1f49108b7e40c8de3afc19e42aaaa896
SHA1 01a523fb94e4aa08d05b3b286df37243ec921379
SHA512 8d416958092c56ed1f4e8f4cc4c3122c847af65c643ec7201b0df74e3f75114d8d7e12b570839205c4b963a22c07f060c3e523e8af6a5c37cb81c5bd8563c837
TLSH
T17A51B96D237F35CDCB7441B994E8558932F0A45B8AB7DF22C0041D7959D6F10EDC9453
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 75796f776d9603aeabbe83ac882e45aecb2c7685f32d178452f778f30209bb24
MD5 9d5ee4d8f43255bed2a5b0868bb66f05
SHA1 5e8a38a5e72e49e17148802eb1032dfc2758a38f
SHA512 5aade6433b508162984a26d7c6c2a80d925a5745389ae086e8a29e98183546f697e0be8292782782a0835a9ba932349e67e502b43f89ed81d808733e580aeec6
TLSH
T12D51CFF7C7E8867E890156F0AB147E2BDE1C0915432C3C5689E4AE2BA3F3471D141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 a54027c064ba650f07dc712ce40d1c1c74e1946916295968661b1d0c61fdd675
MD5 d40da1ee2f16badf97434a97b9c205cb
SHA1 12c03982625253889071915d0902ee5c14daa019
SHA512 cf4db03c450224fcaca75214a4f64a9812338726d8fc8a10c4f37f22aa991380aca39eb9bbb47e5f475e0efda65777b0ffbe4de914960e2c906fced0708418d3
TLSH
T17151CEF7C3E8867D890156F0AB146E2BCE1C0919432C3C5689E4AF2BA7F2471D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 865c91a20c9de4d4ab8d014e4fc11d6fa8fdc39bfd930ed94984d444bb0421fe
MD5 de2f1668a6f5fc1905e0089c0ef8a38f
SHA1 506ca135465b712133880625b39aac315e7563b1
SHA512 d8f1f6e3d6c87cd7a81066093221a560e011d53e3e56453a5805ae02eab4b8a2204d491f569c570a15bdc8fa6e2fc435c7f74ddd172f0401d2304b790b6533fb
SSDEEP 192:sxR05R2b8/flslPDde5lSgzoD8p4d/g6+WNIYCyuO5GfIgIJ:sxR05a8/flslPc5lhY/5IQcs
TLSH
T17132B7166E28997B9CC7E21DBB55BF53D2F9503361912E58B7FC860C08EBADD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 34ce106641ad29c10a391a1ef617ac1d5a4429b3218b18723f57dc012551f6ed
MD5 486838425dd58f55906b6339f60691fe
SHA1 c76a79c01aaaf83dd591d8f58dad3820bb92ae2b
SHA512 e8973a1365c6d606370e1e330efb75d848292d8c2c4da568415276ec8c25bdd18b53ec2c85a2c579e6f998e298af018a36e50a9ed299b4edaf4590c956863f38
SSDEEP 192:sxR0yR2b8/fls5uDde5lSgzoD8p4d/g6+WNIYCLuO5GfIgD+J:sxR0ya8/fls5uc5lhY/5I7cm
TLSH
T1D442C8166A28997B9CC7E20DBB55BF93D2F9503361911E58B7FC870C09EBADE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f893fa24147c8aded0e2ec91659632bcd32240483962c3e77e0bb6201f8680f0
MD5 1b178484cd4de75f09f72510c3efed08
SHA1 208bbabe90b029e5e7299f75188a426d216c4aee
SHA512 15cbf4fbf388990a5b1d82b1f19b9d760dfe50da7e090f1bba06ca53c6b1daae54393b22079a5755427e4d090a2b3ede629fb6192b6629ab5541ca5597f91514
SSDEEP 192:sxR0yR2b8/fls5PDde5lSgzoD8p4d/g6+WNIYCyuO5GfIgDcJ:sxR0ya8/fls5Pc5lhY/5IQc8
TLSH
T19032B7166A28997B8CC7D20DBB55BF93D2F9503361912E58B7FC870C08EB6DD121740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 239681e4a456374fb4a22212f716d85c96d993daf1d7e21f2c3ddff795b14ffe
MD5 9c303d789f8418311b0cf37a1270fabc
SHA1 99be58e99d5de0684704ac6cef71d2a480917383
SHA512 0a57019ab707fb9c4c8a386db1cf3ea636334a33b8f25592d41a6c5edce49e5b7d781fd589c267ccd578c2de7fea474b9236080ec57255fdec4612bd033d597a
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvoroZSI:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0Vy
TLSH
T16DB2EA2B600DCB7F5F800AADAC197FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\862ad6fc-d704-44f4-83c9-5dcb250b1cda\index-dir\the-real-index
Size 360B
SHA256 f7503af30af4f63a5f80110ecfbd592f1d3195ac16cc118df2f1d843339c9404
MD5 21d37f4cc3a66b5a8364acf104c67401
SHA1 8a936e9374caeace86f565be94329c807f98fe1a
SHA512 ffbc8fe47fb045a8a9a48a67392661336e2c8411c2bb0420bb8894d88b2372acfdc1f9ef6d0ad4acf2f135244406efbe4c6d8ff150e1a9ef16aace93752c58ef
TLSH
T144E02B8E4C639D53CE3A68760972A42A333F09FD1525BE1A10EE18299B5267C8506608
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5de3db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\862ad6fc-d704-44f4-83c9-5dcb250b1cda\index-dir\the-real-index~RFe5de3db.TMP
Size 384B
SHA256 9247804123e35bfb927ba25d76b033f11a29f16fcc50ecde149204e82e945abf
MD5 fecc830fbffefba6395b43dbe1c7fec2
SHA1 8d6058ed08632339b3778df5ecfd3b8ee120c566
SHA512 517c12d5fefeecd3f7e29c1b0936aaa95936d9253a2da93f848ec99545c1707e447f70ad81b03e581ff0b0ab631327cc9d5d67f3766f610fcf1be43cdd11c720
TLSH
T1FAE0EBCB80926E22D92658B51006112A333F08252029FA5B10AE281F4821FBC8640A06
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 505748b417711deb0b5d976ea9e69aad7836c3404f58b50a13bc788acbe7e8f7
MD5 d1d1123b356a22b2683220cf2005fbd8
SHA1 aec42d37cf0cf4edd102f0c5b7a3733ba6521a6f
SHA512 579f43aaa4b9174c7e009a648fca6926383d091abd16f22136e53ffba5d22687b4d63d9500237a064b19b4256924755c7370f301b11a7916dc1a90043a10d83e
TLSH
T117E068B33DE7180CE86BA7E75C31E0A000007818CD41BC5F102A729391A23403405C15
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d1ead894a9b8ad46d393cbfd6c86ed5dd91a1b1b0a0a80610e411da96b8b488a
MD5 0d1f9ceabd92bf9c6b58891fe88b9043
SHA1 901369c0765844e76f6fe04aaddbb0742353afb8
SHA512 e35e0973803d61c1b4f619909238b576b46bec158d21b58feca84fdda6c14388b8dfe5e6baee951ef8e4843b7cf8eb1d862943031bba74779f5a2930a8f4744f
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHLURlTp5FWtC4gNFK40gjFcrzKtZ+2xWKQ:CbEBVj5JAdSp9/EgTK7j6dJOHLURlTpA
TLSH
T13A913E10347E1281383D691991F9892BC6C274E33479A93B7BF845A62B27E435EFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ff5b72c4-899f-4276-9a56-88e00030c8ac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ff5b72c4-899f-4276-9a56-88e00030c8ac.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c0faff970a1c36b4afefe9ec25c90c9e71a8383dc861c82c996d67238028b922
MD5 3cd6a1d7a79cbdf8b54fdd249a44f23d
SHA1 968aca867728fbc375ec7a35afcf13a2debaa366
SHA512 14cd3d06aa085e1bbf7598b097ee4c7088b78c1a4a1350ea73c1635033a0024bf0b4a90e8f0c5e41c6c59eb2bac2bcdfe1616ac670ae6b613d7230db74edf99b
SSDEEP 768:zj+903eUppt0lp8+p3bd66j+4BRv86aLIWTb9Ml:W903Ez8+p3Z6n4yBb+l
TLSH
T1A7F2AF72E8A99D378CE2C798B2873B476EF4526392C41DC4D9DC7B0D05CB26D530742A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 876fd710a22904d56451c3f0dfc637d5323ab1ddc61a3870905a8d312cc4d1f8
MD5 e94fd189a99e73057d1a60a63c61ccd9
SHA1 685a1dadea49509e18c153d693eb4a7ac1737327
SHA512 faa82b347deeb0f98ba62848df8d51d3a58831d5b8287eb368f797042beb99428bbbe6ae40a8267a6869769dcbd6ff6dba964300cd8a82f3a8bcea931c79401d
SSDEEP 768:4F1j+9V3XwgWUpptGp8+p3bd66j+4BRv86aLIWTb9Ml:19V3K8+p3Z6n4yBb+l
TLSH
T17E039E73DC94CE3B9CF6CB94B6463747AEF042A386C159D4E6DC6B0D058B1AD5307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 a9ceae8297b162a8c2fa98990f0a1bb410bf31362651b9459c9d9d2ea102d0f3
MD5 4637fce6587e23e02003567d92e601ce
SHA1 30f4ed71c6a481ac4a8336f7ad73abe68cefa18a
SHA512 83cca51d8702fcb748d4dc6ee0f1ecfb04c10ec6ae089d56b1017ed895978b5207af10abed13963b3bfa723534305239b8b39af56e32a18f4f84045b473d9ac4
SSDEEP 768:dj+903PUppt0lp8+p3bd66j+4BRv86aLIWTb9Ml:Y903bz8+p3Z6n4yBb+l
TLSH
T12DF2AE72E8A99D378CE2C798B2873B476EF4526392C41DC4D9DD7B0D05CB26D530782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb03640e-a5fa-4305-b710-0879352c8792.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fb03640e-a5fa-4305-b710-0879352c8792.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download