e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6

Analysis

max time kernel
898s
max time network
835s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-de
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 18:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.4MB
Sample260720-xd4pmab13q
SHA256 e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6
MD5 f18ed9a25df7c7951cb7f936ca9feeea
SHA1 3ba65e050dbc1e365c6397d41edebeb8a4322794
SHA512 8eccd9eceb7032504437cc95e01e5e040872db5951ed1f7f11f86c26f244c2ff2516d792b32ed3941a2a3170048725112005877bd76637a9d1b3fec548cc19f8
SSDEEP 49152:52SFkMZThUZLQTYp281vCmh3r8xsJQfiFTuoYQdVi2Hxj37D4h:v
TLSH
T17127B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5268	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134290470877482174"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1875162379-3804078649-638427191-1000\{9B5D6785-91AB-4645-8C0F-CFF2983903B9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1875162379-3804078649-638427191-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2232	msedge.exe
2232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2592	2328	msedge.exe	88
PID 2328 wrote to memory of 5460	2328	msedge.exe	90
PID 2328 wrote to memory of 5268	2328	msedge.exe	91
PID 2328 wrote to memory of 5460	2328	msedge.exe	90
PID 2328 wrote to memory of 5460	2328	msedge.exe	90
PID 2328 wrote to memory of 2920	2328	msedge.exe	92
PID 2328 wrote to memory of 2920	2328	msedge.exe	92
PID 2328 wrote to memory of 2404	2328	msedge.exe	94
PID 2328 wrote to memory of 2404	2328	msedge.exe	94
PID 2328 wrote to memory of 2404	2328	msedge.exe	94
PID 2328 wrote to memory of 4500	2328	msedge.exe	93
PID 2328 wrote to memory of 4500	2328	msedge.exe	93
PID 2328 wrote to memory of 4500	2328	msedge.exe	93
PID 2328 wrote to memory of 5196	2328	msedge.exe	95
PID 2328 wrote to memory of 5196	2328	msedge.exe	95
PID 2328 wrote to memory of 5196	2328	msedge.exe	95
PID 2328 wrote to memory of 3936	2328	msedge.exe	96
PID 2328 wrote to memory of 3936	2328	msedge.exe	96
PID 2328 wrote to memory of 3936	2328	msedge.exe	96
PID 2328 wrote to memory of 5068	2328	msedge.exe	98
PID 2328 wrote to memory of 5068	2328	msedge.exe	98
PID 2328 wrote to memory of 2468	2328	msedge.exe	99
PID 2328 wrote to memory of 2468	2328	msedge.exe	99
PID 2328 wrote to memory of 2904	2328	msedge.exe	101
PID 2328 wrote to memory of 5540	2328	msedge.exe	105
PID 2328 wrote to memory of 2496	2328	msedge.exe	106
PID 2328 wrote to memory of 3516	2328	msedge.exe	107
PID 2328 wrote to memory of 204	2328	msedge.exe	108
PID 2328 wrote to memory of 204	2328	msedge.exe	108
PID 2328 wrote to memory of 2232	2328	msedge.exe	110
PID 2328 wrote to memory of 1416	2328	msedge.exe	111
PID 2328 wrote to memory of 1416	2328	msedge.exe	111
PID 2328 wrote to memory of 4596	2328	msedge.exe	112
PID 2328 wrote to memory of 4596	2328	msedge.exe	112
PID 2328 wrote to memory of 1560	2328	msedge.exe	113
PID 2328 wrote to memory of 1560	2328	msedge.exe	113
PID 2328 wrote to memory of 5560	2328	msedge.exe	121
PID 2328 wrote to memory of 5560	2328	msedge.exe	121
PID 2328 wrote to memory of 4388	2328	msedge.exe	125
PID 2328 wrote to memory of 4388	2328	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff8433bc188,0x7ff8433bc194,0x7ff8433bc1a0
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1860,i,4687983324096591534,6825785082525121249,262144 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:2
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,3149839833701108148,9652726619509018277,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=de --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,14101249840847253308,3443151921510975594,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:13
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3344,i,5137506854730003937,2127080154078098506,2097152 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3356,i,13937545973870433692,1903000950001560279,2097152 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4272,i,5812625225721821727,11272917918452688466,2097152 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=de --js-flags=--ms-user-locale=de_DE --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,16711010556193513810,1519285289690781748,2097152 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,5687425803126650225,5889383872306628719,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=de --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,10853992298140463422,1709413505858519534,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,16202993060306875635,8120266944067036944,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=de --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5892,i,16202993060306875635,8120266944067036944,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,5099809368498195188,15194338693458681026,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1100,i,17811328578946416177,5654827424972461198,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=1408 /prefetch:14
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=de --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,9670638634190475376,6057907853529933369,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:14
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=de --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5656,i,13191755356400343932,1340424901913326471,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:14
  2⤵
  PID:204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6480,i,8682552631086754921,2773536996799983732,262144 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,477707607732452255,15692301813474673820,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:14
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5448,i,8042729133516684646,10219335963618664831,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=de --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,7981397620938519995,2603563789592772232,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5796 /prefetch:14
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,15210976051038652963,14962808465318777136,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=de --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,12908459468295971777,16089362422810111305,524288 --field-trial-handle=2876,i,14869276855553374974,5669439843472183038,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:14
  2⤵
  PID:4388

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1316

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2968

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2940

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1356

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ecdd5c8034c45eff453cbaf31d8886e2bd9609a73853367a6d096a69cc81f1be
MD5 a774534a956a5c8affebe08e87c80683
SHA1 b3e4e20a91e4087d3b9247b5ef6815f51858a041
SHA512 27769aee2cac148a0154fe42b51da2a9a1088e9e990873915b4c7ab9bd5442a3facf82b2bd1cbaef75328bd5937813698b96ac06aa76d934d07ab5ebb194a824
TLSH
T103D09B6673449A1CC9C439712461565161115820E41443581C96715CCDE56C707571DE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 dfacefa73d018d54e3feba3eef28ec722a8422fee8768a2c3d8d6253f863b375
MD5 cb5000b6fab1115bfff50bedcc3eb9fd
SHA1 afbfe0ec03df59e7a1eba1da4227111508419c03
SHA512 aab9a1afd5de2f983466724b6ecf0dbc2e176c5a1eb2f059b9507511cc53643fcf9ed990bd565f22f8d53fb82db71cba238962a75c68db02d5f10b526661bd08
TLSH
T15AD09B667354991CC9C439712462565161015820941443581D96B16CCDE56C707561DA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d25f60360519618eb00713ef0bf5916ef551b9a0d938699b2d675c95eaa89c6f
MD5 31497fd78c371eee1bd0171d2d9ed3d1
SHA1 7a2f9644af1baeff290326ee7ae5a5833925b065
SHA512 321e1d217315aadfef69fa278349e1fafe6a9c694a5cd9219c769322a9f94576d9033244ff2cba78ddf49a5d93d3ae5637fbefcb4c8fdb930fa870cfd9f8fa4f
TLSH
T1AEE0268424CCC23EF32968C7437DB38C82A1BA0ED2C97A0E670888C47042450A7A6BD1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 2f818dda046a2ef207a7e7e8c7b9c3942354f18986860904de60133361b34071
MD5 32e7c63eeb4a1d32a964ab742d52dbaf
SHA1 a0bc400fba59a5ba36a0a4bf242d861c8b1ebd25
SHA512 bca24e50a905ceb633fac8154e834de12009e95b9612b0dee6f169e73406cd5597b3635b1a03bffe896a891d544de522fc49dfd418e897b0189a2f773bd45c7e
TLSH
T11DE0CD9405D9C2AEF306B44B836C574C82D2760FD6CA694E170D84947143559B7EF7D1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 df747bd43e273020c94bcd004d01af48fb9f70e8ca71f0b2da8e1cda61f548fa
MD5 def664822332db8c0cd72c8629a84f02
SHA1 7a93556b6372a49ef03fe4cd23260ed947657c06
SHA512 84a3dfcf9a0f72a8878321239b0ae9064981b167304d3b699f8d466ef5bb25b146c193c2b3dfdb61aa85fd71d2cc67e8158ebda65c881109ac24bff038a41559
TLSH
T1E8E0268808C8C22EF3006487527C638CC280760A9ACE6A0E27298885B082444B7EA790
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 510538efe697ffb63047b1b41f3bd407e057ea9e48c2d0f7168272748507031f
MD5 2e45342d9bdf180435e0b89d059199ea
SHA1 413b401587abe6e867b11fc0fb3a364dbdf81b6c
SHA512 639543e3c3146749e8705723dedae1d30a5af3d2ee8223e66b93c7bc96362b823131d9f4be69d52d228a3444ee5028421e230db2ea0f5441ff51fff3e2c58d50
TLSH
T18951E86493AF0AD3DB645AB32DDC84D932BE865839B72E01C5CCA038CE323D4546C163
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aafd9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5aafd9.TMP
Size 2KB
SHA256 031c64c7042a56d4b89d74496e0458a62afbe1bc075ac6615fa5cada1390849b
MD5 37aef51295c54201fa453ce279a9a436
SHA1 47dcb8164319670f21e5b5b772a2931af5e89611
SHA512 9396776ec29016849dab707d85146c9d47e5d2b7ee4432a614478a0176495e9f092d29c52aec32e642c68abbd3a404395036899c7ddf4af523e73573dd040b54
TLSH
T1E051E8A497AF0AD3DB645AB36DDC84D9327E865838B72E01C5CCA038CE323D4546C163
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c0b8db041edd67ab3a5c5e4ac97eb362f9081d9a4145b5bbfbd2c9f049a2eb64
MD5 c6fb2c245cd141ec0c2dd0a222570af1
SHA1 2d2cfddf0d25a41840541bc0abacea9838344f7f
SHA512 fbea1709da39c00c4aca618e8ee382ad218dd574ce414bede3697086142e27452c04be486cafa36e8e352473aa50f389ebb2eb2d35eb403f7ef63234a9bea7d5
TLSH
T1B931CFF3C3F4953D8A0181F4A7086F1BCE2C0915931C3D56C9E4AE1BA3E24B1E14095F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 92288312b322544019d94dbb243cf68f751cd454934f88a151fe345d17469912
MD5 969174b78a1e8e5ff599c14e07f7790a
SHA1 da9846e26ddcfeb01fa69bfcb7068e6e70568614
SHA512 2fb5dba453d1b55c8f27f727c8adc419bd655711b318e4c567e851fef31f8294cd7f483798c3fc33d81b305e3553212ec0d89bf161860279814482c259f4683b
TLSH
T15631BBF3C7E8966D8A0142F0AA187F1BCE1D0915831C3D5AC9E4AE5BA3E2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ef7764b012d7fb8ddd18d00c594700e4b97c973cda34eb0fa9c9a32f8ccddcd4
MD5 258e26998fe7f23874bfb45d20a057f8
SHA1 8bb427c9338dd96393fe4906b8f2b9e59865415c
SHA512 7765909fa4803435a770e093a0ab273dc885c7679246cbeb8c19e78098d1f9aa8661af083740e6673cfdd94425af367536232c65776e92b7c0ad680bc4398020
SSDEEP 192:sxRIT1mbbN/fdRsupYKQUKCA94/7kXgzoA8p4IH/g6+WNIYD986SLIGu3Y5IgIJ:sxRS4h/fTsfKQUZ8ZT/5ISSts
TLSH
T11832A6166938AD7B9CCBE21DBB55BF53D6F95032A1902E48E7FC960C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f231c8146fed2ba7bb4afae42a1340dd2aaaa0f4b5e33b94500e839c04c84815
MD5 6709cfea2226d6f95874aac0882ed0e0
SHA1 ea634ce3d550aeafd82c062315a628a0cf2c9e9a
SHA512 d2e31e973322ecc2eb5b9ab0ca606bbb418aa32e34f41b4c9f72cd2d84d818f2781063d6b13a317ee672ab86d16c993cbdd4eb71a84339e7934a57e9f66ced5d
SSDEEP 192:sxRIE1mbbN/fdRsb0pYKQAEKCA94/7kXgzoA8p4IH/g6+WNIYD9Rp6SLIGu3Y5I2:sxRh4h/fTsRKQPZ8ZT/5IjStx
TLSH
T18C42B61659289D7B9CC7E21DBB557F53E2F9503261912F08A7FC9B0C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 d61ec88318a9bec82b24050922862e7de44f15fa9855b7347f176b6356988a5c
MD5 969094272ad1a2794efa156815072fe7
SHA1 270d3dbdee8bebdb2f1de8bc6d4bef2f7fa7597b
SHA512 1e50bf4833858c623f39b438c763713465075bc77becd7b0de822aa85704d6f947875838ac8db3dd6c05599e02ab3f484975c42289c8fc80263df5752aabbd73
SSDEEP 192:sxRIE1mbbN/fdRsb0pYKQUKCA94/7kXgzoA8p4IH/g6+WNIYD986SLIGu3Y5IgDP:sxRh4h/fTsRKQUZ8ZT/5ISStz
TLSH
T17C32A6166938AD7B5CCBE21DBB55BF53D6F95032A1902E48A7FC960C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 ca4a9e11fe22a9a088a2f57505c284c5bda2fdcdbecdaa8d7fcacfb214b3c3ba
MD5 ca1423a217528a988c3cc0bad3949d8f
SHA1 8476ead305efe4810c943ad274f444c33053d0b8
SHA512 fbc3c79f5261df81ad2f68135f2b0470f6e1acb5a11f8e4906c53cc18ed557f5b6c97f88e09facd84f0decf268c11f9a541047530d37318bfbbbf368d9f23b67
SSDEEP 384:a8YfWRmfCtg/NFfHfKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVOe91bRckropDC:azfWR0Wg/XfHf8F1+UoAYDCx9Tuqh0V0
TLSH
T10EB2EA2F600CCB7E5F800AADAD196FD77D9802C79B588D5047FE994C02C77EA921A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\428a2d35-599b-47c7-a91e-7a3bd146e7ae\index-dir\the-real-index
Size 144B
SHA256 31d7201276613dd06bc28a51b6e369607193f0ac36ab9a12b38a8681aaba8735
MD5 fbf530a327f166b744d58ebd8bbcaf72
SHA1 bbc62aac1c17f28fb69a18a906121f1f37f57e25
SHA512 76c0ff639d27ab42c037bb60e8603e7ea466d0ead99d46d6349eff46a482c1e2629e5fac59a07287fa25842f251a3bfc3825ba03ab79349f72f45bd4bf254abe
TLSH
T1DFC09202CC5F46A5C817613120B720692B260BAE056A7EAA20DE284AA87229980DA800
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ef22e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\428a2d35-599b-47c7-a91e-7a3bd146e7ae\index-dir\the-real-index~RFe5ef22e.TMP
Size 144B
SHA256 8e0cc98b792150f93325a10be55d8ed125b05a3aa7b3af4fe910e44749f4359b
MD5 c940f6b38037201e43e1f37ddebf5890
SHA1 bfea6c2ca7750e2d38104aefe55cf32d819714bd
SHA512 07292601b620bda4ac2751ef5086b96e6cb247972867583a3e1ef18ec22273f07824ada74031aa0b92c008f0ca616bf120cefe3cf24d8293e37b0341e307e38c
TLSH
T157C01212C5578AB0C81F567010578259226B0C250032BA6A70DF287F59F11C4C0C7D04
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 6cf75235fe736047077ed0a06f8b16763424e4599192de33ad980c364149d8ac
MD5 d7a871e81997202d309191426d53d5a6
SHA1 4f6bee1b271f23c41bb7fd977bb1b0d1438eb532
SHA512 ff39fd284ecbc60777f5043a830e49b619c1cac8d368aa63d401b1873cb3ace9622a584fc4eaaa6fc486f3b1052077c67dba3438354ea3861e598f66bf735be6
TLSH
T104E0687A1EA71860FC6B83E5207018A40149BC54C905BC5F1057DFC7C0A27501957C26
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e482e0287f5d53c3ba44f707953029fd78a279155339825c80835c329a77ac98
MD5 c349164cd27e763456564bba6d4ced8d
SHA1 081af2cb261854522b6712ab8e0340eaeb01ea0b
SHA512 a24eeaabe2490e290180b02f40b4ca6138c60b7e8916b334f2ad0cb5fe1483bb97cfa581edb09860dbd044810cd390d855aa365138be3d96ad8dc1773ca37f7a
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uj:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAe
TLSH
T1B3A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b4b3e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b4b3e.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 1260f828931722e17fa9c250937902d58dcff176748dfc3de6b09fe74f2a9eca
MD5 7058e315a488424a4d405866d319c976
SHA1 d642a7ed027652bca92b8e00b472634b6c03a5d1
SHA512 4b6c43f2d68e0b83fd37588f22c721b99ddf4e7975ea5926fa0cbf5d0af9d9431c92fc8154388d9586e142cfcd8e1101c354de13c82f9818f0b3769002c194c4
SSDEEP 768:Srv+4UNbdm3Xv2i0R9ArEnjN3Gac1F8ZB:Sbsb03XsEQnjMazz
TLSH
T1FA03BE3568789EB78CE7E685B1477A037FB0475386C50BA4DAC92B0C46DB5EC230B867
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 38be74e5e8bd46707884f8e0967d3e3cb484492b1e38240d440a211245fb6c00
MD5 b22d1fe97aaa2f3d1f47e8367f7dc999
SHA1 47ec5dfad64e7032ef128d9098458edfcd71e04f
SHA512 5f78bfd552b924b4d97c0994b2ea18d69f7ee442d219cb5c5e745d219a0e45d16c25609d2e5c17d0ce14ace737572e27352ac8126c4a2965cf125d7a5db19be1
SSDEEP 384:EtNn/s3n9Sz38NBwmvznyX/hWZlf8hyEGyfFOAaREy2rEoajo4cdR8eHhVODjYPa:Ej+943i22i0RRArEnjN3Gac1F8b9MU
TLSH
T122F2BE396C658EB38CE6D79576473B43AFE0475382C90A94DACD7B0C06D76AC530B82A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5fc91ac6471eb258657629608ca7aa23850c128322975b39d3ccff9a5df31bb7
MD5 f8d658ef6a53c0754e7ca8322a9335ff
SHA1 8f8ee2dee80ec315975e337695fa598127097791
SHA512 58ed72b91d7985cdf8c34e0346445e8257bedeef3360f20887d92bbf8e18bb6c8a6846e5a1bc0c85dd97388e1c4c93f0e9250ba0a5d93840cffa686c7a7d15ac
SSDEEP 384:vtNn/s3n9Sz38NB/mvznyX/hWZlf8hyEGyfFOAaREy2rEoajo4cdR8eHhVODjYPa:vj+943X22i0RRArEnjN3Gac1F8b9MU
TLSH
T19EF2BF396C658EB38CE6D79576473B43AFE0475382C90B94DACD7B0C06D76AC530782A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 039ef6cc95b428e90e7e2562c48f675be02e9a18194fa003bb4cfece72547ea6
MD5 a8f6c8b6ee733ce5786286d756b4065f
SHA1 ab502cd4c562d6d84f3b9d4791937ade2ebb6000
SHA512 b1354b589991887bd91fca08b6eb9c7c94169e57c60ac3f762d1b7801c437c06fb3c448cd527f81d7c21e41d111282714b1ab765b70ae4a519de4c7108bb4d01
SSDEEP 768:HF1j+9a3swgt22i0RskrEnjN3Gac1F8b9MU:u9a38pZQnjMazb+U
TLSH
T12B03AE365C948EB78CE6CB95B6473702AFF143A3C5C51AA4E7CD6A0C01D75EC530B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 36d9bb05bb0e5162feaab0598e6077283894348bc6831080cc3fb6065f46244c
MD5 7acc45e03ded59789b8dc961b4e691bf
SHA1 ed0d340d91665db2bed214f1549f034d82020c34
SHA512 d04d83a472c28ca3691d636abfd316d60840aebe687c487afaba0649838e789f38edfea83a8ea55a8c723dbc3233f8d7cf642f32e1f9153af6d31a0a8b5ce6d0
SSDEEP 768:rrv+4UNbdS3Omi0OrEnjN3Gac1Z7eVH1SCz:rbsbg3tOQnjMa0EH1V
TLSH
T1C603BF3669B88EB38CE7A38571877A037FF4525385940BE4C9CD2B0D46975EC130B967
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download