e65e9d9867e8141eef6bd68201f494997c8685dc3b4ca704afa690247dbe59d2

Analysis

max time kernel
598s
max time network
441s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
20/07/2026, 15:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 3KB
Sample260720-tcxcdahs2s
SHA256 e65e9d9867e8141eef6bd68201f494997c8685dc3b4ca704afa690247dbe59d2
MD5 152595e688b1cdba577fe47d9234cfd8
SHA1 e9bf1e377f90cb932ffd1d2cc880721785c5523b
SHA512 75276f46231ea9b9a7f1fbc01f9989c062634abf6a05c6e6fd5ac50ea81df09a25c38c035931c53e14f034289170f2612f66dacff072db2ad2cedc2054466289
TLSH
T19D615FA362900D1D04634774B2F2AF6FE560F9407233ADB0A29217EB52C881DAD1F99E
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
452	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290365358932444"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{05370BA2-1A0D-456A-B5E4-773BD33E07C4}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
952	msedge.exe
952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe
4300	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4300 wrote to memory of 4608	4300	msedge.exe	85
PID 4300 wrote to memory of 452	4300	msedge.exe	86
PID 4300 wrote to memory of 2140	4300	msedge.exe	87
PID 4300 wrote to memory of 2140	4300	msedge.exe	87
PID 4300 wrote to memory of 2140	4300	msedge.exe	87
PID 4300 wrote to memory of 3120	4300	msedge.exe	88
PID 4300 wrote to memory of 3120	4300	msedge.exe	88
PID 4300 wrote to memory of 4808	4300	msedge.exe	90
PID 4300 wrote to memory of 4808	4300	msedge.exe	90
PID 4300 wrote to memory of 4808	4300	msedge.exe	90
PID 4300 wrote to memory of 2068	4300	msedge.exe	91
PID 4300 wrote to memory of 2068	4300	msedge.exe	91
PID 4300 wrote to memory of 2068	4300	msedge.exe	91
PID 4300 wrote to memory of 3468	4300	msedge.exe	92
PID 4300 wrote to memory of 3976	4300	msedge.exe	93
PID 4300 wrote to memory of 3468	4300	msedge.exe	92
PID 4300 wrote to memory of 3468	4300	msedge.exe	92
PID 4300 wrote to memory of 3976	4300	msedge.exe	93
PID 4300 wrote to memory of 3976	4300	msedge.exe	93
PID 4300 wrote to memory of 2568	4300	msedge.exe	97
PID 4300 wrote to memory of 1652	4300	msedge.exe	98
PID 4300 wrote to memory of 2568	4300	msedge.exe	97
PID 4300 wrote to memory of 1652	4300	msedge.exe	98
PID 4300 wrote to memory of 1260	4300	msedge.exe	100
PID 4300 wrote to memory of 1612	4300	msedge.exe	104
PID 4300 wrote to memory of 4032	4300	msedge.exe	105
PID 4300 wrote to memory of 3396	4300	msedge.exe	106
PID 4300 wrote to memory of 4256	4300	msedge.exe	114
PID 4300 wrote to memory of 4256	4300	msedge.exe	114
PID 4300 wrote to memory of 2984	4300	msedge.exe	116
PID 4300 wrote to memory of 2984	4300	msedge.exe	116
PID 4300 wrote to memory of 952	4300	msedge.exe	117
PID 4300 wrote to memory of 4488	4300	msedge.exe	118
PID 4300 wrote to memory of 4488	4300	msedge.exe	118
PID 4300 wrote to memory of 4700	4300	msedge.exe	119
PID 4300 wrote to memory of 4700	4300	msedge.exe	119
PID 4300 wrote to memory of 1048	4300	msedge.exe	120
PID 4300 wrote to memory of 1048	4300	msedge.exe	120
PID 4300 wrote to memory of 2568	4300	msedge.exe	121
PID 4300 wrote to memory of 2568	4300	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffd6f9dc188,0x7ffd6f9dc194,0x7ffd6f9dc1a0
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,598007004604194987,14758706470751897315,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - System Time Discovery
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,10230489062428304105,13280133665417532516,262144 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2516,i,3270743137135867083,14222998653747868730,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,808636326227938008,12413910386240658047,2097152 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,9425488690752174260,15461777652227017639,2097152 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,8362354172110346740,16268876726203559360,2097152 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,3914243406644812069,13203482951589012478,2097152 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,11847397973882402607,14058518316936197557,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,15172127318074523485,5083698836471319874,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,1491024250511158190,10549615466105346144,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5912,i,1491024250511158190,10549615466105346144,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,6841931971015794247,12448906552106875122,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,5213409596852823183,18355695766694997138,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,6769245845964339512,12607048850512682303,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,6801661523531850176,6143835927217142623,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,5640059780550620582,3584456265484526901,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6168,i,15786029961532542626,9586404135148619915,262144 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3280,i,9665217749039374148,7778837711798886567,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:8
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,7470104909206924852,9093640709284328897,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6264,i,10300429079769145124,10825132814138128407,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,14889259642506045100,12615525799339278669,524288 --field-trial-handle=2104,i,12407525994137412642,7141513219834060321,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
  2⤵
  PID:2568

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 6KB
SHA256 9dd03e044917c8dcd44ee43756c3fc2e0531a6ee1e0baa470ed379809f7e3582
MD5 b5f7956888fa8e9926eb02dfcde5a120
SHA1 92b7f6eac6e1d9cf58e7a565fbe5fe00e476904e
SHA512 19525cea7202e3412049a944b765b31e5f6b558e7e31f48709ca9c1c65dd8435404f97c3eaf37e77c6eca066294259aa64941ccb771e048f5e568193d21c4ed2
SSDEEP 192:xj3KDxCCXXooo99TSTSjjEEp66644nnnBBUUMXLO:xj3KDxCCXXooo99++jjEEp66644nnnBr
TLSH
T1E2E14D4786D9D39ACF0610DA49A4636C10703B0EEBDCF548134D89EA34CE69EF9F6A90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 4788c73719cce0568a191b2cfd0f4419686ebc37c340370a8f6cf5af4d60b867
MD5 8fdc1764c9895a4e770b8abf3ce3808a
SHA1 b56250f68cd64cd2e68bacb367f1c240b7143469
SHA512 d93a1c7dbfe13d4f3490a64ae2e4a0af0930637dbde0311333f4540a226d3b73112c60d79b1fab8c14aaf804705b344a5616523fa754dc45ed0f55bf26295a3e
SSDEEP 192:GjMkzomQSXXXLLLYYY+99Idddd17777777MtLO:GjMkzomQSXXXLLLYYY+99Idddd17777F
TLSH
T1FDE1594782D5C39ACB0510CA49A4675C2170370AFBECE94C678D8DED308F4AEFAF5A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 ac27c470df4b364d2421c1dd060486e94923c44ad09b6c7b854482653ccc0818
MD5 fb6f7a8199334fe8e47fb7d47e849967
SHA1 05683072ef9df180e1454b0597ee4964cb7148a2
SHA512 03f581e9a3a8ec0b24e2e09a2006638f54b470cf2e68ae42d4db1a32b59702acc2196acf32ca1eb1acd1a7a0cea76d8079f175fa7052927aa6ca00e2904a0a6a
SSDEEP 192:SjFd+cccccccccccccccccccccccccccccM4LO:SjFd+ccccccccccccccccccccccccccl
TLSH
T10DE1464786D6C39FDF0624CB49A8B35C41703B09EBDCD90C138DA9E9304E8AEB9B5694
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 6df3ea0a698ef020d8900d7a21e43cb9c35c7fabfe5799db754de73d8c86ee97
MD5 a4c386a01202cb455abf085ea6dc591c
SHA1 4197b3a534b124b585e389aaa9cbf87101764137
SHA512 ca796e8e48f9bb9962614e4c3ff8855889a1d1cac814f7b8d8743c37fd320e966ec77d705802de94e8261de1ce8415bef0b297ddb1c6262ccdf900b8102926c4
TLSH
T13D710804E6E21092F360317978D20206307F75DA89FF5EF44B50C87347897B2B565A36
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe582e9d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe582e9d.TMP
Size 3KB
SHA256 4df05c76024eb42186ecf98233a97f0e1ce73608634ee71c370ff551d577ec0a
MD5 d3d2355712cd8d385c12b1724da43eb7
SHA1 6dd14ff8624189eb119efad45e9b1b4cbb8fe974
SHA512 9096f14f92a4e3ffe18b5dc9ed31b4b9e9561dc572c65c09bd757b6784a68ae2d8fc9c5f65cf7f50b5cbbfff92fed1fa8107951275302790eb80915037949c88
TLSH
T1D8711808E6E22092F320313978E20207307F75DA89FF5EF44B90C83347897B2B961A36
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 5d4f297f307ee804ffde4328a966256aa0fb55441f4471c9ccb25faaff571cf8
MD5 4cf737aae7dbf07238e110dccc414d7a
SHA1 b06cccfe1f7bebcc7251945c6810986274680782
SHA512 a2e51fcae2b18be8b690ad46dc717bd2a8175ec642547bc0f66d486ef7bbd535e2856cb35ad42a368a560f90fe220664f9bf47b07f9becc932a263d3c4c2521c
TLSH
T19FF09EF7C3E055BE8A0142F06918AF1BCE2D0406831C7D59C5D4BE2B83E3469D00089B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 673B
SHA256 8ae022c5b6bb9b1fd6549b969c2b926e0e7821ec06266f2315e227d2affac970
MD5 41e2b06bfdd6f71869b6107111f1f757
SHA1 51373966e403707e2ed6bece2964781334f716f8
SHA512 3b4fe925b34884fcde2d459ec241c91b8a744a74e4351614e7eb3089fb7a3e268003c3f390ae0207c646a508cac782ef41079ea9407a1f15cbde1c7469f9db7e
TLSH
T188019EF3C7E5416E891112F059287F1BDE2D0501831C7D1AC5E4AF1B83F2075E10199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 7f553c7211f5c0ada121b8253a4ef3eddbe770cfabb315dfd136b05adee97e8e
MD5 80fa411ad4142ccb86f46aba0900618e
SHA1 cd4d7f81681ac0a8aa2d0d4189eb8e6436635f53
SHA512 ece905ff40f3d2565d1ca2259920b100f681b144e51e7a952e092ac72c84c71d697233716c40fcd45ac0af961bd77ce70dd23a1dea881ee8b3b540dc3afd5b6e
SSDEEP 192:sxZq7/ywFaKOMl8MkK/fFsEVLRcW9Iupd8HW6+WNGYLzOt5IgrJ:sxZq7XMK/fFsEVCWx6HbGT9
TLSH
T15942FA156B3499778CCBD209FA45BB53E6F51472E2900E44AAFCCE0C04E6AED230782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 dc69869c46fa22820e069367b118b37500faa563572a2486e4fc53f3cf4f3ec6
MD5 8e9026744c587bf59ef60c7b8da570bc
SHA1 c9b643bf02372c0ae3a4040f2e690f9b6815c2ac
SHA512 49b1ff9adf8fd5b1150ed2951b5e4327e5148cb60d7f193c4c051e37a074c3e644c3fd890fff92d4df74158962851662d2a63ce46db49271e369b10f74dd2198
SSDEEP 192:sxZq7/ywFaKOMl8UQ3kK/fFsGPVL0cW9IupH8HW6+WNGYL+1+5Ig53J:sxZq7Xq0K/fFsSV3WxcHbGET
TLSH
T1DB52E9166A349D778CDBD209F945BB53E6F51472D2940E44AAFCCE0C04E6AED231782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 010b6524fa26df1abb34e1cd52c840efbc334e18207683fdefa5a8fead9bf8cc
MD5 8cb599880f68fd659276e77637097972
SHA1 54820db4d912af0692416d129e0d0373fb158ae0
SHA512 801e1587cd05f6ca16e093f352164e7491afdf939a7b1ad9605d4e424683626227120f94b4529da8110a44df86f0f7be22192284a1ccc991915bbc4539d0cf48
SSDEEP 768:ays6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVzILlWwJNdron1:ays6pD1WvxzWju1jauILIsNWn1
TLSH
T138D2FA3B680CCB7E4F841E5CAC2A6F967DD801CBAB98895447FA484C03C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\temp-index
Size 1KB
SHA256 65a8afd4b09aaa77fbe7ea86231a79fcc20888ca868524762344a5a595171e36
MD5 a7ae6b0cbfc63d50cbb7c76fb3c56c20
SHA1 ed1911dc6f8fe7121a56ac018ee7c5a78b94e6b7
SHA512 52cb73b35c3c235454dfb4305dc96b4ea7e2faca7813eda1a566d46d74184dc49ace9dcc644bc5bf2940f4c16f14ef53e87bb3bc1b1565da3129c68f941cedb8
TLSH
T1CA41888E8DA4C99FE8A440B215B2A5E4377498CD0B66A6035CAC2132BD5332D254B5AC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5c748b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe5c748b.TMP
Size 1KB
SHA256 cd7fbcaba43223c7fcc02e5832469c54f3e07e5034ba751a6877aa68e19a922f
MD5 b96e1256dfe9e267443fb36f84afab86
SHA1 338ba716925bffbd7f76885f8bdfccf4a1a07e31
SHA512 34d142a0e582adf2439113e4ab46c57bbf575451d4c86e827e535a74984d8b6933a2de923ec55e876330027905565191ba08f2998f6985e67ad202384c98d139
TLSH
T1384168564D908A1EF8C4507B0EE3A8B83335584087127B8364BC1135BD617BE2E5E1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 59f880ae9564f08d15539f12e1839332a6e2340a61b2339cffb6d4c360d8e7d2
MD5 7aac5ed6971a4ffcda755cee464c7c5f
SHA1 8f83dc90d1f64e66df8a8311214835a56e359a67
SHA512 c3147c7e061928570b874954e8a9c0d88d22a80f0f3e3d103f412a6470b238461cea87495af71e62f185f39e295a057c69fc8086e4395ec4067b2440aade8d0d
TLSH
T19DE0D8BB6EA76820ED6FE3E7247154B50141381C8905BC4F587AD6C350B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 20a6d316adfba4154d13eccc3b8cbdbe6b3c19a2a4dc048f94d9d194ff177327
MD5 18c8e7a3de12c9474bf00be316d666bd
SHA1 fe743e202cf8e0ac7ba74ba3b8c2f3e51cebd5ea
SHA512 76a1e042b8aecf14eee37ce66537095d72479feccbb1803a37dbbc01fbd86dd011c5fbe56fd1aa40efa8ad0dd3b59f693108dd8e4296704767e5330fd0bee4bc
SSDEEP 96:KUAAKtePSeEKHqeSqSFS8SJS1STS/S7SMjSvS6SXxSNSMK5SZxS7SMlSlS1S6Sj/:iiPpSpoDcYeaWdK5EAkZUW9IY5u8TJ7
TLSH
T102E1000631BA22033C7E2B19D36497669E82B563341CA42B37ED54B20E67E21CDFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 47178e550d7e263e4f898d049eda632e1591a1fb08095fa8b14e35cc087fe6e5
MD5 53c152e8405fe34c398a5c9eb931b19c
SHA1 5c8ebcc75c0a538ae4199c4b470f86ba444c87ad
SHA512 fc6a0d80e1ab2235b831db4d0c76e5d87a45868ce5376b04e4b9d6b8fb668d83d5b3171cbb87959592accbf1f360b6ef70fd54ab92485eeb7783ffbaaecfc007
SSDEEP 192:uaQLsNipQowWEcb7+3v4xQmiU1fKg4atb03O2fh2YC5BLMqbq9AQU3:tmsNiphJE98sPa9qOUMYUWqNQK
TLSH
T1B042193668389D775DA7A541F58736139FB8406BDACA2F40D6EC6F0C01EF6AC134B81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 b7b9f23e6642a22fc9ffe4d41ccaffd084553ffe763523b4398e457f88ef6c84
MD5 8b7fa99decba015f3b13568433ef4f8c
SHA1 c89030bc7949fdd4b4af7cb93eeb89954177cf23
SHA512 17d615d18011a35f2957785b12d8a02951a0475502f138976588e6571f3a722691e6ebc3906e7a9a612d3491a3b267801abffc3d3e4a9a50af5a36c03bd0f5ac
SSDEEP 384:NatNn/s3n9SkzsNiThJE98sPa9qOUMYUjqNOObjI9G6w7kD:Naj+9HnJEvCEOAUjqN29MkD
TLSH
T17E927C366C289D734EA39591F58B3A179FF8406BC7C62F40D1ECAF0D05DB6AC530681A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 082afddd5a4eb5fb8770e88911d996752067158070da76987f60679eb8bfa3bc
MD5 f33ad79f31d64621249040c648ff29db
SHA1 9513f14c5ac88b8568902936734599b5649c9e3f
SHA512 49a2ce45750d850a1386720afb2cc09ecd16856c74c9ef1a37ae8cf0331c6ddff8d7cf3da2d6f1669e086e9ce6ef65e54d089bcfa1de22e9808164f9ff031d1d
SSDEEP 192:qONX6O7+3hQmiUyuSGttb03O2fh2fgGqlkicU6:qONX61kGt9qOUMjqaU6
TLSH
T1BC02E9356C7C6CB75AF2AE45B98737235FA5103BE9952F81D6D81F0C00DB65C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 d007ab37c078c21ce9a2a59c340b1247f6bd4783d34163d457a15baa474917f9
MD5 3d55e3c3a8c645ca7fcacc882112fb94
SHA1 ea4a40f067901882f12d1a019ac6092a133169ec
SHA512 ad24d37e19243dc30ed44fa936e103a58d1af1e7eb73a074990ea93d77687175e3cc699bd7aab7e77817de3286be95093d0fdb2b3818112cf4d8a320b4860b9a
SSDEEP 384:1WtNn/s3n9SfsNiThJE98sPa9qOUMYUWqNOObjI9G6w7kD:1Wj+9UnJEvCEOAUWqN29MkD
TLSH
T1BD927C366C289D724EA39591F58B3A179FF8407BD7CA2F40D1ECAF0D01DB6AC530691A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 daf0ca91f0a22ac29436c819f8c70440dc3edcd6e8d7b6d947fb6ca27d1be3f0
MD5 69c4ba79063184a4d70d92c3f97f9ec5
SHA1 ada8b6f3c198200a167247bf88f6eb97e8618e6f
SHA512 4f8138ed77328a9b9e782b31f70e9a7615b7c7669907578b1daa83c34783e518b7b41db49f8001609260cdcb9d1b296ffefe36290c127e9c920f5944e5953a79
SSDEEP 192:7ONj6O7+3RQmiUycSNttb03O2fh2YC5LcNqbq9AU6:7ONj6VMNt9qOUMYUwqNU6
TLSH
T11F120B35686CAC775EE3A541F5C735179EA9403BDB8A2F80D6DC2E1C01EF66C234AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 b925290b72d3136de178d8e23609c387d99b05d022a98246d79a4037774a8922
MD5 9a3d57ac4f51a18e8211427cb64672bf
SHA1 0e486821f94a39079aa26febd34fa3b6fe5ca283
SHA512 bec914b31b58071fba653ca8db8667d51582aca60bfe41d8773a4e0fd60ebea6ff463722121508466e3eda30b1d9707610dbd180e68d79e153f43022684d299a
TLSH
T171410B58A6E91148B7B76E569FF6A86D447FB9372E07D5AD10010E4F0722A40CDB1733
MD5 SHA1 SHA512 TLSH

Submit Download