7f12380c2d35b3df7026d2e0c3dff098c04e37e74f22ab4b19d517847670eeb5

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/07/2026, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 4KB
Sample260728-amrebsthnd
SHA256 7f12380c2d35b3df7026d2e0c3dff098c04e37e74f22ab4b19d517847670eeb5
MD5 3909c2f316f2b47ca2dd1761b5bd79df
SHA1 ccdecfb2d275e04c0782a40639819427aceb0421
SHA512 6f7a02a25400b3dd220019305f1bf868a2a733a446123b9fea61abf7b8d987683cdbd57b661af99c87c9813d719552512c2e8a9e775eb4e409140faf620b5eeb
SSDEEP 96:TfvSBeUQbvEKJVeYbFUFBPxXS5yFRlA54U7yiyUx7xBFp:TXqeXThJVeYbalxKyTlA54UeidxdBFp
TLSH
T1C2917426A245AC3EF32647BAE7F53B963C568451EB435751F1A8313E8242C3E283B9D0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4348	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134296716121441166"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{E5930314-206E-4D4A-B1B5-9C7F17BF696D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe
1192	msedge.exe

Suspicious use of WriteProcessMemory 50 IoCs

description	pid	Process	procid_target
PID 1192 wrote to memory of 3112	1192	msedge.exe	84
PID 1192 wrote to memory of 4348	1192	msedge.exe	86
PID 1192 wrote to memory of 4652	1192	msedge.exe	87
PID 1192 wrote to memory of 1508	1192	msedge.exe	88
PID 1192 wrote to memory of 4652	1192	msedge.exe	87
PID 1192 wrote to memory of 4652	1192	msedge.exe	87
PID 1192 wrote to memory of 1508	1192	msedge.exe	88
PID 1192 wrote to memory of 3952	1192	msedge.exe	89
PID 1192 wrote to memory of 3952	1192	msedge.exe	89
PID 1192 wrote to memory of 4244	1192	msedge.exe	90
PID 1192 wrote to memory of 3952	1192	msedge.exe	89
PID 1192 wrote to memory of 4244	1192	msedge.exe	90
PID 1192 wrote to memory of 4244	1192	msedge.exe	90
PID 1192 wrote to memory of 1368	1192	msedge.exe	91
PID 1192 wrote to memory of 1368	1192	msedge.exe	91
PID 1192 wrote to memory of 1368	1192	msedge.exe	91
PID 1192 wrote to memory of 4544	1192	msedge.exe	92
PID 1192 wrote to memory of 4544	1192	msedge.exe	92
PID 1192 wrote to memory of 4544	1192	msedge.exe	92
PID 1192 wrote to memory of 2676	1192	msedge.exe	96
PID 1192 wrote to memory of 4712	1192	msedge.exe	97
PID 1192 wrote to memory of 2676	1192	msedge.exe	96
PID 1192 wrote to memory of 4712	1192	msedge.exe	97
PID 1192 wrote to memory of 1136	1192	msedge.exe	98
PID 1192 wrote to memory of 1136	1192	msedge.exe	98
PID 1192 wrote to memory of 1136	1192	msedge.exe	98
PID 1192 wrote to memory of 3012	1192	msedge.exe	99
PID 1192 wrote to memory of 3012	1192	msedge.exe	99
PID 1192 wrote to memory of 3012	1192	msedge.exe	99
PID 1192 wrote to memory of 2196	1192	msedge.exe	101
PID 1192 wrote to memory of 1344	1192	msedge.exe	103
PID 1192 wrote to memory of 1344	1192	msedge.exe	103
PID 1192 wrote to memory of 1344	1192	msedge.exe	103
PID 1192 wrote to memory of 2192	1192	msedge.exe	106
PID 1192 wrote to memory of 2192	1192	msedge.exe	106
PID 1192 wrote to memory of 2192	1192	msedge.exe	106
PID 1192 wrote to memory of 2476	1192	msedge.exe	112
PID 1192 wrote to memory of 4756	1192	msedge.exe	113
PID 1192 wrote to memory of 4088	1192	msedge.exe	114
PID 1192 wrote to memory of 392	1192	msedge.exe	115
PID 1192 wrote to memory of 392	1192	msedge.exe	115
PID 1192 wrote to memory of 392	1192	msedge.exe	115
PID 1192 wrote to memory of 4492	1192	msedge.exe	117
PID 1192 wrote to memory of 4492	1192	msedge.exe	117
PID 1192 wrote to memory of 4416	1192	msedge.exe	119
PID 1192 wrote to memory of 4416	1192	msedge.exe	119
PID 1192 wrote to memory of 3820	1192	msedge.exe	121
PID 1192 wrote to memory of 3820	1192	msedge.exe	121
PID 1192 wrote to memory of 3820	1192	msedge.exe	121
PID 1192 wrote to memory of 3936	1192	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff871f1c188,0x7ff871f1c194,0x7ff871f1c1a0
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,5112020148427613718,11595403663017764907,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=3088 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1724,i,6716012085132079770,6809492654510817677,262144 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,2734359801495715190,3114095931717792061,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,15945654035064728878,18093038144619008308,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,6753280296370146188,1390119317730781267,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,2580194376884271295,6083153305780844993,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,10993312862406694690,4351581331429779196,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5144,i,5515030296979138884,10981009652747681427,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,15013084082970111882,8069583706956526430,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5592,i,18251056599606885956,6436772511647314878,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5096,i,11188680425418897727,694553316164718350,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,9886612152988350542,12925557690139143284,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,9886612152988350542,12925557690139143284,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3544,i,16798244861854129552,13709249377521728452,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5884,i,15280663502768938296,9785673556242821713,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,9557740560295403638,13951143662544919177,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,7711303356389032418,4176663185641272506,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,16990761897471971107,11253900461256767696,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5084,i,6142864843265212757,13485155680296187011,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=2060 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,16989450601459303202,7874613380746963597,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,18019140481163969252,12223938264949743342,524288 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=784,i,13055792725664368864,6839190377650772674,2097152 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4376,i,13877269952879543067,17582487304044591496,262144 --field-trial-handle=2304,i,7229969352873966956,18441575268498771232,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3936

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:840

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8bd193269cbc0101b18807144d6cd741576381f849ecee6df4fd3079b1e2a2ea
MD5 7f4cc8bd47cae9e9cfcbdc3a9dea31d4
SHA1 6406135db9fdcf767dc9e78333ef0cb8dfd551a1
SHA512 894acd81265a2f42a77360eaacfcdb7e50c7d9b0a2718871318cc1ab538e27cb24b8d3dba4cdc1a6de030a8f0012aac3b2f7e8fbaaf939ef83c5f7ce1469a61f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7S:fwUQC5VwBIiElEd2K57P7S
TLSH
T1A2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 557B
SHA256 0a3cd6543b231b97f72c3a33f678267954492d88ff5b23adee0ac96bdbba7eed
MD5 183610b2cdf8ee264c6ac111199138c3
SHA1 650937eae7e322c2be41bd1e995898e5a8f05e8c
SHA512 b6dfa215eddf0b4283b925b801288ace3d7acef120bc8439cf6879aec0bcb2fd659386493e88074ee41da34391c326b817e0bcf3571ecd17b3a37cebc798a5fc
TLSH
T149F08B69A3C2C2654281508F8B64730DC1A1FA09EBCC9D993F0CB68C780100063BD1F5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 37fa2849b263b3a0960f2b4d8c90d624eac9bbaf7f8e71cd15b3d06ede63c1c0
MD5 45e1eafdfeba6248396ca85befc3f815
SHA1 e94776f980de7571436ede3b77cf300852fd5050
SHA512 bf636c8e01591d0d74aecf0a660ad4c01967f7e0a1dcc73c8c306d449e69747de7eef1743675456a402ee72de3652e03dcb275f58ac53643c75f30529e7fd5de
TLSH
T1B0719475064EC663E3A50A7252D13337F5FF85D6F6239E4A21548C762A18F11861CBBC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b002.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b002.TMP
Size 3KB
SHA256 e723342cf6a490f344f2d0fbac8d727a9536590d76213173c8b363f5039c4fd6
MD5 e81c18f71be1e5289bfea3b8764524bc
SHA1 5f88232c2481fd4f99ecbb2cf91b9befde4efd18
SHA512 d8c58d844848877e47268ab613f53afe32425f766557ee38b6d2030a15a6de7b6cea5d661b9c6f25cb74a8a1066303a8dd7fef2d01d2de59762a5bbaf08843d0
TLSH
T1A671A575064EC663E3A50A7252E13337F5FF85DAF6239E4A20544C762A18F51861C7FC
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 b58be8c573632bf6f81452afc1ca277c52c81a945ee1e5dd1f7185d200903588
MD5 05f29cf7a947cd34995001a0eca48b5f
SHA1 96f7416786d58b08f2c5577a6fb0108034c77f57
SHA512 c4b63a80dc3ed65cf83b4bf318edd4a5b303bcc22320bf41ea6b0b63583e718254e8318dd98d45954ecd3dabe3047fd038681f92e52f355e196c29f36af10232
TLSH
T1E1F09EF7C3E495AE8A0152F05918AE17CE2D0542831C7C5AC5E4AF1B83E2074D40189B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 863e55435c5803d6cd9b894c0ce21e33f0d3ccf7113411823c040b88d8406987
MD5 39b710e60988ea40337e7a92e61b6ea0
SHA1 dbf7e4c038f756864d17b6fe98a9e569139d03c2
SHA512 855039b4ac7c1942e353e9a40079d3bb4ba1729fa0af5ddbaf752864b2866c4a69ea9f38a831ffc0d8e9a852d9131e751c0e4d49183e52905265014185e76f5b
SSDEEP 192:sxZu/yM/jK1Ml8UQVkL/f7sZyS8IdpHjaHW6+WNGYID+mwEIg5WJ:sxZu5qeL/f7sZPl2HbGcoc
TLSH
T1EF520916AA345977CCDBD209FA45BF53D6F95472D2901E48A9FCCA0C04E7AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 2b2929ab43a8e677ffe02b3866fafd01212f6b2c1f3ddd645d11357503975cc0
MD5 577217d202967827e567ba74bb516c0a
SHA1 fefc6bd121e56ac9b94c5631fc7a6d885d34ae55
SHA512 03b9d2070385f4795e156dfd2a437ecec3d94f072a63ebf7734aa48f87de5050b682390f3cd2110e8d35e9dd20610f1ef10664058d5351b1f24244e825337850
SSDEEP 192:sxZu/yM/jK1Ml8MkL/f7sqtS8IdpdjaHW6+WNGYIkDWwEIgrJ:sxZu5ML/f7sqUlcHbG8o9
TLSH
T1FA42F916AB345977CCCBD209FA45BF53D6F95472E2901D48A9FCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 04347b67a6085a32e11a4306e4d4007b59d7f4687dca4c8380c684e207e501f6
MD5 3423e2de4f8d7a11396d63b09db1cf39
SHA1 30891e0c3e04cd08f9516fc48c9276a04e18ce58
SHA512 8a65367c517149a485fff460474ae1f5876773a7ada79233407ca5065b19b0eecd1621e29e0695cb838b96541cb89d0de9c0318cdd4c90d4704e1eb9855b97df
SSDEEP 768:rrsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9AroXV9:rrsqxXlWvJD6Tu1ja54LAs9LXr
TLSH
T1F5D20B3B694CC77E4F840E5CEC26AFD76ED801CBA6988D5447FA890C02CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 07a849d22d8e4351111be20946fca6bfe1f30e8bab88b211033ddd223f765ebc
MD5 0ccbc51b92f201366e86b35c8c70e9c6
SHA1 5751dd72832f41465e08bf713230b1616fead211
SHA512 3fe41c27c56f8fd7703050b44e1aaff0c9d8b21dde38217ad7998d41680fb88d58ed0b747909d0c4b49822731ac3955446e93df82bf5d40991c40d678ade507c
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTylDIRK4A0TyRCIfKPKcfyZ2IfKf6cc:KYbaKYIKeDaK4AKiCQKPKOK2gKf6X
TLSH
T1C1C10006327A1652383D2998B26685770F423AA3301CF47F7FB964A54F66E124CFD4ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594a0f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594a0f.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 840ed060d5951a25ea75eb2cf90789088ff27254ee833b4175c6c274f5c622cb
MD5 b74959748d83aefa94aee2a763f47b0a
SHA1 1a55d097dd79eeae6c5640fe88dca15cee385202
SHA512 d3e2d032d35a5b4700faa5d95063260bca271896c9e68d102b08533bcbbe2d4680b7fac51919174c92ceeafdc87010371438e2f009dd8463eae838b49f144525
SSDEEP 384:zZcIhsNV6pdCW0b6LFd2VRNzdTLnQOObjI9G6w7yUV:rhPdbFaHzRDQ29Mx
TLSH
T12E926C319C385C779AE6A516F4873A135EF8912BD7C93F84E1EDDB0C06DA9AC0316815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 d05fd01b76e632676dd37dabca20ffb910fd3ac14716404a0bc9620cf58f7cc0
MD5 8d3f252985bf884d65942f274b5e59a6
SHA1 3f64f84382af8fe2bb68e4b09c2538a9168f9b2f
SHA512 5af225f5d958469a49a83a5b25dc7a7dd9709cdd111f4fb8f6c964cc5927000467e2931e8cbf06b9eb824edc4da48059244dd4a62e09ad1a5567f1ec556ef70a
SSDEEP 384:biFiZcIMzsNv8TUNTUlIl6pdCW0b6LFd2VRNzdTL8QOObjI9G6w7yUV:2FQwqwg0dbFaHzRoQ29Mx
TLSH
T1B9A26D339C64897BEEE69A11F98B36138EF8917BDAC97A94F2DCDB0C019749C0306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 0a3fdef5db6242c46d257e1e12d48e1dad94ac398dab0017aa87511bc2f16a1f
MD5 c51029668993dc43812fa61ead4010da
SHA1 8ae9601481412e51a5d491bf167e1c880d82b748
SHA512 fee8cfa3c9fcdfff80f0554a34cbc1583f2e89c866025f2441239d357c697061221d81af05db691525bbfa8a7a83b2a94cadc5f4819979de1f8f1bd8d31d8eee
SSDEEP 384:bZcIhsNV7pdCW0b6LFd2VRNzdTLnQOObjI9G6w7yUV:DhmdbFaHzRDQ29Mx
TLSH
T1FB926C319C385C77AAE6A516F4873A135EF8913BD7C93F84E1EDDB0C06DA9AC031A815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 94b4dcf78dec1ab683fbd01ae74496c4da3cee1953e9b447e3adf9a8246f39bd
MD5 3fae1f32266948d69c864a666c4320ec
SHA1 ad7789210faad779085cb6aeff7f4379cfd415ce
SHA512 d43b77c9d0771e5a841f8d9cc35b197f149e4ec9e8bf0c0531e72f47cc3e0eb737127c8d7f957bc621dadddacdc567603931ee0aba027ac814c00e1c7a0f7745
SSDEEP 192:tONx6JkRtQmiUyjwfW+RNA+Fd10JoLkRh3+RRU6:tONx6UrBfW+RNzdTLM0U6
TLSH
T1D602D9356D382C7B9EF26D0AB58777135FE8216BFA852B84D6E81B0C01D765C2347826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 41f3c37155c27e95ac706690210d535fbc8c0fe6219c9aee80195e5e919feaa1
MD5 9994ca72358df55dc912271e1b4a80d6
SHA1 f011e899aba56738271bf4fb47a9d0885b8d72fe
SHA512 331cbed2d7a58b9d3f2e674469d86381fe66c8cdccbe26ae56c37c07f2c4e399a2037725362a1d1666d4e5fce5ec0367a417c27c190f1e03730660b498c4fb03
SSDEEP 192:PONI6JkRsQmiUySwfdi+RNA+Fd10JoLkGwPKVcBqacU6:PONI6U8Mfdi+RNzdTLeQU6
TLSH
T1FF12FB316C385C7B9ED2A856F48736135EE9512BEF897F84E5DC1B0C01DB59C130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3fe89580-0447-4388-bd1f-ca706e4f2303.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3fe89580-0447-4388-bd1f-ca706e4f2303.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 db03dd03e62919a334e4b594ce93c5f0b9423e0d0277b23717842b193d688e38
MD5 f794e0dbe9227fcd3d0e073a3ce9f8a5
SHA1 7ec260707e3a6a3fd0d491f7c01552ef3acc442b
SHA512 352e7afb3290d6e4d704967468278de868af43bdf39af0d4d38c967272d9359618e667ee34f049d22d8a896a1c737a3b168bc0abc4541d5899fa6021c60096ee
TLSH
T1AC41DB59A6FA1148B3B76E5A9BF6A96E447B7C272F0AD59E00010D4F0A23640C962737
MD5 SHA1 SHA512 TLSH

Submit Download