e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6

Resubmissions

27/07/2026, 04:33

260727-e6ypzavygw8

27/07/2026, 04:24

260727-e1h3bsvhjd7

Analysis

geolocation tags

eueuropefrfrance
max time kernel
898s
max time network
750s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/07/2026, 04:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 19.4MB
Sample260727-e6ypzavygw
SHA256 e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6
MD5 f18ed9a25df7c7951cb7f936ca9feeea
SHA1 3ba65e050dbc1e365c6397d41edebeb8a4322794
SHA512 8eccd9eceb7032504437cc95e01e5e040872db5951ed1f7f11f86c26f244c2ff2516d792b32ed3941a2a3170048725112005877bd76637a9d1b3fec548cc19f8
SSDEEP 49152:52SFkMZThUZLQTYp281vCmh3r8xsJQfiFTuoYQdVi2Hxj37D4h:v
TLSH
T17127B46BBB49037316F242626B47A5CAF31EA13F375A1654309CC1182B7BD2483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5952	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296007216946882"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{AF153F9E-F227-48D1-8FF3-749A8A08A3E2}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3416	msedge.exe
3416	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe
4292	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4292 wrote to memory of 4916	4292	msedge.exe	89
PID 4292 wrote to memory of 5952	4292	msedge.exe	91
PID 4292 wrote to memory of 4628	4292	msedge.exe	92
PID 4292 wrote to memory of 4628	4292	msedge.exe	92
PID 4292 wrote to memory of 3748	4292	msedge.exe	93
PID 4292 wrote to memory of 3748	4292	msedge.exe	93
PID 4292 wrote to memory of 3748	4292	msedge.exe	93
PID 4292 wrote to memory of 4824	4292	msedge.exe	94
PID 4292 wrote to memory of 4824	4292	msedge.exe	94
PID 4292 wrote to memory of 4824	4292	msedge.exe	94
PID 4292 wrote to memory of 3492	4292	msedge.exe	95
PID 4292 wrote to memory of 3492	4292	msedge.exe	95
PID 4292 wrote to memory of 3492	4292	msedge.exe	95
PID 4292 wrote to memory of 5528	4292	msedge.exe	96
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 5528	4292	msedge.exe	96
PID 4292 wrote to memory of 5528	4292	msedge.exe	96
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 3472	4292	msedge.exe	97
PID 4292 wrote to memory of 5804	4292	msedge.exe	99
PID 4292 wrote to memory of 3932	4292	msedge.exe	100
PID 4292 wrote to memory of 5804	4292	msedge.exe	99
PID 4292 wrote to memory of 3932	4292	msedge.exe	100
PID 4292 wrote to memory of 5604	4292	msedge.exe	102
PID 4292 wrote to memory of 3256	4292	msedge.exe	106
PID 4292 wrote to memory of 4620	4292	msedge.exe	107
PID 4292 wrote to memory of 5944	4292	msedge.exe	108
PID 4292 wrote to memory of 1868	4292	msedge.exe	109
PID 4292 wrote to memory of 1868	4292	msedge.exe	109
PID 4292 wrote to memory of 3416	4292	msedge.exe	111
PID 4292 wrote to memory of 4620	4292	msedge.exe	112
PID 4292 wrote to memory of 4620	4292	msedge.exe	112
PID 4292 wrote to memory of 5776	4292	msedge.exe	113
PID 4292 wrote to memory of 5776	4292	msedge.exe	113
PID 4292 wrote to memory of 5012	4292	msedge.exe	114
PID 4292 wrote to memory of 5012	4292	msedge.exe	114
PID 4292 wrote to memory of 3300	4292	msedge.exe	115
PID 4292 wrote to memory of 3300	4292	msedge.exe	115
PID 4292 wrote to memory of 2680	4292	msedge.exe	123
PID 4292 wrote to memory of 2680	4292	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffd8df3c188,0x7ffd8df3c194,0x7ffd8df3c1a0
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,9320254366970867283,16741277407532738566,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=2752 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,3124091910505862525,6389540141584532370,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=2832 /prefetch:13
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1856,i,11494802953911218196,17243473122614871148,262144 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:2
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3640,i,17027921038416594480,17661674943328855935,2097152 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3644,i,4696983391590547028,7691302771596337608,2097152 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4256,i,3901263093017730366,10470281445180936308,2097152 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,2321248375439575839,12859278761827373771,2097152 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:9
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,1896567037167389688,4615535095830972141,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=2804 /prefetch:14
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,10695208261913138689,6762729025706900209,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,2210560104198511037,11698227632279889998,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,2210560104198511037,11698227632279889998,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:14
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1356,i,6432863824657129919,9644172292253529965,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1364,i,7019000349395786501,14830462312539415023,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1372,i,10333790162792875354,9630410862398339142,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:14
  2⤵
  PID:5944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,3241628825198862212,16961316089809851883,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=1668 /prefetch:14
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4980,i,18232965078855614030,9677138854670194359,262144 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1136,i,18156455769379551476,962747350248856942,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=1140 /prefetch:14
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,15787468983432800636,18279704460734884689,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:14
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,4493874313886831763,9925417361882174154,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2600,i,5336187538555191749,10886481269538722153,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=3348 /prefetch:14
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,12477582217123442546,5947690519703951041,524288 --field-trial-handle=2664,i,4674765683712230716,7661519907433556874,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:14
  2⤵
  PID:2680

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2168

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1528

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 ed1518ddb7c8af8586ce31c4d8ca58cd7b4b95b359db2c0b1758788511d1c296
MD5 f518c8da23571f04172e9559e35fea55
SHA1 74ccfabdc04fe9bd75a767f9b20226c0cb3f262b
SHA512 3682d2d356d0e1471d93b99806c07bc2ddb969327e929e9edccfba2ac2119a5d4e6324fbec2cd2d855b17fcd1235ff2af4b76811d9156e04f2181ecd067ef44c
TLSH
T1EAE0208505C5F69D9100A4C74158E38CC2A0374B92C5B9451B5888FD7041044E7B76D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 a94b6f3135c89c96406d47035849e4b1780a5113fc4f6d67f0231b42cd1fb8be
MD5 294ccd3307eccacd714b605dca2aecfd
SHA1 89991895a24c19198a050f0890399adf0534cedb
SHA512 b0e7745a9dfbbc52a33ed0606d522d20204a45ebc6c94af77ad757f4f063e94356254f5c558bc763ab747539675b37ddc82eced02ed635ecc23a1dbcccf60edf
TLSH
T113E0268546CEE22EA24068C741A883CCD2A1364FD2C8690F5B088CC97002088FBB26D2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8b2bea61db0972944804f141feceab2da952f0da60b471de210af4ee5cdf5fe8
MD5 75406fe1007004d9acb5b124d2fddf5b
SHA1 744423e5a81d2a4105954f33197df50ef5f13a07
SHA512 0c7909095388974f4584d8df607e7ea8c22e4ad1e68d1ac51cada172c2486ebbdd68fc9e94174551383607596b99d6ece5b617affd6cf1fe21d0ff77e4620d31
TLSH
T1B4E07D8506CAE32EF60668C7C1F8638CE390365BD3C8694A17488CC97087440FFE2A91
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 3be6b2e9044b2a60f4d3371f78e9df75db45820e8db21d63de808b7b3b815bfb
MD5 330076aee4675458989af77a0119a69c
SHA1 52ff08ec029772bc6a6ba28f6a4578d39a682b62
SHA512 22eccfb3a4897db1e1c5cc01966ce63f2e9edbc9e31869d0b0643606247d7c473a505c3069b0524a087a33ec5c10f69424a38be06b838d91e52d905bcd35f17e
TLSH
T1C5410956136647C3E7A889BBF0F1D68432F6E85E0B4F6E1162416E37CA06F4400E2DD7
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d9237ea68ad57090327a62ab06bdbcd93dd28743ab61c74fcdb11b3c02c7ca04
MD5 cdc220d30f275bd55b4b85b975617250
SHA1 7cdb271f3670e95415a9faed3013640bcb48c731
SHA512 2ba2e96311a7b85ab94f223f6ff4286e17eb115f48cdca6b6ad7e3904906b9e96c947abcc9a34455d450445ee9a881d6ce3dc0535c662044774bf0e2bef79201
TLSH
T16041DFF3C7E8857D890156F0AB146E2BCE2D0914832C3D1AC9E4AF2BA7E2471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 1d6aeedc5a4647b8003557aaa58b47b0e5727069c9b656e5e8dbb94e07941328
MD5 800b3d45becc6848098b389bdaee5bce
SHA1 c709656376964d8acfd79bd5e3cf272c9878dc31
SHA512 99098c5ecf7139c33553f928d94afbcde71aeac4319531dd8bfaa048272bb666c77b46a64bf7fb24b0056feaf5f78af663f4bd0235b820f4af05de018bc6d250
TLSH
T12E41CFF3C7E4866D890156F0AB147E2BCE2C0915432C3D6AC5E4AE2BA3E2471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 49ebdd6b73fe92ab552fe96e1c493f70f54a81737f70676654114124367ac010
MD5 bfb2b963a7d215abc07bacb651c3e78e
SHA1 1d82c852a8e0055d7a72e7da0ef07ef649e886e4
SHA512 e3e2106791413efa9c41cfd5b68efa69ccf6901d3ad708801cd0a387fb1618c52c73602cbd4bd18589a28f3ca2dee8af24b1c2fff6518faa9ca212fd7efa718a
SSDEEP 192:sxR0RDbh/fcs7SDde5lSzzoD8p4Q/g6+WNIYCyEOUGKIgIJ:sxR0Vh/fcs7Sc5l65/5IAas
TLSH
T10032C8166E28993B8CCBD20DBA65BF53D6F96033A1941E48B7FC861C14E67DD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 a4138a37306b64aea0417a2a8b87112a8c11d4cef8aa787a0dabf2d7407bbaff
MD5 3bcedc9e9a0aac9b9251afabb8e5dcb4
SHA1 d9e980630bfc4724591a197dcfb41b25acd0d271
SHA512 83f5479456ca573819a81ca5d1586691011292e173d5e639974f4548000ac3958027249f6cd6b32739ed5f1eba0c46eb3552a3b08c9516d2878a36e534b45bb2
SSDEEP 192:sxR7RDbh/fcsC/ADde5lSzzoD8p4Q/g6+WNIYCGEOUGKIgDsJ:sxR7Vh/fcs2Ac5l65/5I8as
TLSH
T13C42B71A6D28993B9CCBE20DBA55BF53E6F95033A1941E08B7FC860C14E77DD520B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 9be548d00325524e9f081869e403f452841c2d33db03d220352bed678c45da84
MD5 787b98357c2f6cd5157f2290e5b3c250
SHA1 2c7a62248af36d19e8771b9a5154fff4b48f0fbf
SHA512 4385055d6b5902c84a2761d6b15e2f74ec17b58609d8450ad3a20ab619845b6d159512e3a8083398c55441fb149da8dfc6ebab7a97f653f5f414dd5bbad6e41b
SSDEEP 192:sxR7RDbh/fcsC/SDde5lSzzoD8p4Q/g6+WNIYCyEOUGKIgDWJ:sxR7Vh/fcs2Sc5l65/5IAau
TLSH
T15B42C81A6E28993B8CCBD20DBB65BF53D6F95033A1941E48B7FC860C14E67DD620B40B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 cb6c3f9aef8a092de2162f8894994cf0c8f005f9b7f0fb8bc71f19befc964f99
MD5 f3a04111e808b3cf252ef199e088ab18
SHA1 8e08de8da0caf12420bb569d721d9bf7512944e3
SHA512 d90883cba2890351a9a4eb00be3dd967cb1f71ecc4e9429d4b2712e9b79687a941ed7f1bda32dc36edc9c109997cbd7b3d0d5ff96f25ff519929da7f00f7058a
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvjroZS/:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0V4
TLSH
T136B2EA2B600DCB7F5F800AADAC197FD76DA802CB97589D4047FED94C02C77EA92194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88a78015-9324-4e13-a0dd-4c0a3b65ba7e\index-dir\the-real-index
Size 120B
SHA256 ff05ea2819a455bda0829748bb73f2f19660da00c7e7cd449b6d95ceb5b6e751
MD5 b939f7157a75fae5818635d3e9b73824
SHA1 264d4efa2bf6645a74f960489a5f7ad4f770b048
SHA512 a2c1a3d6a7edde013bd11ea4eacc26b67ead4e62fd77b3612d646ea8380e5b0ef7e96d0f0bc39dbe650c31a99e478778f517daed2763f897fc4d4ec6bbd54cba
TLSH
T1B8B012444ED41891CE0A01710577711427350BFC08154B0360DE1027D8E12EF9045681
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5da21f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88a78015-9324-4e13-a0dd-4c0a3b65ba7e\index-dir\the-real-index~RFe5da21f.TMP
Size 120B
SHA256 93565afd7a0e63741fb473d5c2f2164dcca99540b503641c06a21a2d2a5392f8
MD5 6da8c41e7f0dcda127807cd05d6c6bff
SHA1 4f20c4fe2ee3a5627ee086c9870032a4ffdfbfcd
SHA512 0d710b5121fe846338dc0b0aba17f4211c4ce5576eefc9a810cacc308b5cc56ed91c92caa52fb0b52efaa71f88c8f77f78a6a00c2a2f9ae842f5bcf2fec44318
TLSH
T133B0127102D00CA0CC0E01701163D20433260C180464830370DE045B48A1AC84081545
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 84fd871884fbafe877514a7efeaeaeb316c927302b00d5a4a9d933084748ac83
MD5 28715b2ce6a75745e7f692dd00fb60d1
SHA1 9920c4099835e57b401dd0a0b01153ac5e2aba0f
SHA512 25e7142fa3f9439161c0a4401cdfaa332570e88e48d76ac1553a315724058f6a82fc5c53cf027839ee3a9a37f80b59a42001c794c8bddb4913086822b15f5898
TLSH
T15EE0C0FB2DE32814FC1FE3DD243184E802057874E905ED5F1056D1D300F1303241AC62
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 420686660f35a624749b780d477297d6b17eb28bb6e71a8364ee74f46224101a
MD5 8138a7aae5eacc2bc0acd584e8907f05
SHA1 757dd67d0f2be3f028994d47630f510e5ebfe8c4
SHA512 5fd2571035b596b96e46a7aa27e802bad6e0a69edb590c4eb651d45308d12be38e7eb9d829c83bca53cccc6ac12376ad47610fa60d1828db85bc6845eda604de
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHWLa2Q44eWIdFgWeK4rgEec+W10m/Hd0db:CbEBVj5JAdSp9/EgTK7j6dJOHWLa2Q4P
TLSH
T1D8915A04343A0650B87E760CC1B99C2ED5C574723619E62B3FAC42960F6AE47ADFDAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59fad1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59fad1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 e3afd5726eac061de6f2f54d461961bdb259fb3daa66f0136ffacd891f9ade1a
MD5 780d2d30565d15f8e5286acf8fc93a46
SHA1 c0443ade435a031a25704f82c630b507d2fb3f4f
SHA512 6352526a0c52147587f9c424a15d5677024563f988dcd60edadd62eb96c0f774f68e3097a6b46102cbb2be2ff8b5b5d21c7f35844eb47e1ea2987851eec0b60a
SSDEEP 768:AR3MbziFs3p8+p3bd66j+4BRv86aLIWeIjao45:AR3g58+p3Z6n4y0IjZ45
TLSH
T1DAF2CEB2E8A58D734CE5C348B5873A43AEF49163D2C40ED498DD6B0E119B2AE570B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 b060a3ae91ebda66ae814784b46d3df0fc0c0ad56fd83800d67ad2f42d7685ad
MD5 1b0ed8859bbcfe060411afe59afec850
SHA1 1670b650327b913e8cae27c11edd42e7c06d1c25
SHA512 21b91fc2eabffbbbf66aa8c5782227e2876e4c2930c87cdba594225b6dc553031c1943beaf7dde4e331445999c801e723a3f4b1907a3dd39fb699d6f9ae71bd7
SSDEEP 768:4rv+4UNbdu3/b8iFs3p8+p3bd66j+4BRv86aLIWe5:4bsbk3A58+p3Z6n4y05
TLSH
T15603AE72E8A899738CF6C644B1877A437FF8549396C00ED4D8CD6B8D529B0EE130B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 5a351b64ca90ab319f0876c51bb5f383c655aff323644fe9eae73fcca923ae52
MD5 105d3f0c2e962facb8f05da70b0678e5
SHA1 65dfdb634ab089728040d0a396c939ec3ae0174e
SHA512 e88d3e1671dc620000e048ee6a95d65d9e122dbbb0ac44d4883184e664127107a56dd489c11542e71669fd544d0fca54ab9a15c93f22bd65b52ad0f772a7ecb1
SSDEEP 768:UR3/bziFs3p8+p3bd66j+4BRv86aLIWeIjao45:UR3B58+p3Z6n4y0IjZ45
TLSH
T161F2CEB2E8A58D734CF5C348B5873A43AEF49563D2C40ED498DD7B0E119B2AE570B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cfb03b4102d05743d5d13bd18b30444ece402157f8e8845edf8920ae34d71967
MD5 27bb73ffca37a55b56aa636b84867b9b
SHA1 d729bf8692d4fe7136571081eb1af9c0f3cbc646
SHA512 c18257d3f1960e64b7a89d6d5efaec0bdd34eaac8574e1d56e36284527c1ca6fc8227e4fa05fd88391aa8f67581c65fe7750a952e5ef54b3bf33764b7e2047ef
SSDEEP 768:AIFQa3/wgsbziFHp8+p3bd66j+4BRv86aLIWeIjao45:Ara3b8+p3Z6n4y0IjZ45
TLSH
T1B603ADB3E894C9779CF9CB48B6863643AEF551A3C2C49ED4A5CD6B0D11571AD030B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 961b97da31bcc126a2f4ed5e953b9ff916b7f62b3ec1fd87ca7f82a358944b9d
MD5 087a401ff94775b25292ba1ade694bb2
SHA1 b03fc3d51a364561b65232508a07ebc4f56ecf26
SHA512 7d5e25dd618aa411b2a4c66fc3a3ec226050c057cfd0d2896cee37082db62e4276643eaaee6f02aa300a113353d1603794a153540c5701cfcba3fab6a2428f90
SSDEEP 768:Irv+4UNbdD3CczNp8+p3bd66j+4BRv86aLIiY2bwCl1:Ibsbp39L8+p3Z6n4yy0ww
TLSH
T1E903CE73F99899339CF6C644B2467B437FF851A39AC00AC0D4DD2B4E419A19E630BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d83a271b-b3e2-4d11-89be-d46a942855fd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d83a271b-b3e2-4d11-89be-d46a942855fd.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download