0b311448aed5b76921d50efeb6c4851f931f900a3f9ed0530fe85c5ca6915204

Analysis

max time kernel
898s
max time network
731s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
29/07/2026, 14:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 2KB
Sample260729-rwpershh45
SHA256 0b311448aed5b76921d50efeb6c4851f931f900a3f9ed0530fe85c5ca6915204
MD5 1b8f83c737739141fc19ee8f689ab960
SHA1 68c02fb3c17ac7c1594bc55b26c2fea45fafa620
SHA512 b09c458c97bd1ef7caf29a01c8ac37db11f1a1101a93e63b01d747a02e01ee641b9e96f316d01fc57b0c03b9becc037ff07217f5d927be54dd10e317262f882a
TLSH
T139512FB787530C3A8D6608B372325B4DD9E1B59A7236964431B763FB00C2118CEB7BC6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1300	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298091861023130"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{A227E389-6FAC-4C41-BF87-29C16CC69B87}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
6116	msedge.exe
6116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 4744	4252	msedge.exe	88
PID 4252 wrote to memory of 2812	4252	msedge.exe	90
PID 4252 wrote to memory of 1300	4252	msedge.exe	91
PID 4252 wrote to memory of 2812	4252	msedge.exe	90
PID 4252 wrote to memory of 2812	4252	msedge.exe	90
PID 4252 wrote to memory of 5896	4252	msedge.exe	92
PID 4252 wrote to memory of 5896	4252	msedge.exe	92
PID 4252 wrote to memory of 2840	4252	msedge.exe	93
PID 4252 wrote to memory of 3376	4252	msedge.exe	94
PID 4252 wrote to memory of 2840	4252	msedge.exe	93
PID 4252 wrote to memory of 2840	4252	msedge.exe	93
PID 4252 wrote to memory of 3376	4252	msedge.exe	94
PID 4252 wrote to memory of 3376	4252	msedge.exe	94
PID 4252 wrote to memory of 4720	4252	msedge.exe	96
PID 4252 wrote to memory of 4720	4252	msedge.exe	96
PID 4252 wrote to memory of 4720	4252	msedge.exe	96
PID 4252 wrote to memory of 5312	4252	msedge.exe	97
PID 4252 wrote to memory of 5312	4252	msedge.exe	97
PID 4252 wrote to memory of 5312	4252	msedge.exe	97
PID 4252 wrote to memory of 5780	4252	msedge.exe	100
PID 4252 wrote to memory of 5800	4252	msedge.exe	99
PID 4252 wrote to memory of 5780	4252	msedge.exe	100
PID 4252 wrote to memory of 5800	4252	msedge.exe	99
PID 4252 wrote to memory of 1332	4252	msedge.exe	102
PID 4252 wrote to memory of 1228	4252	msedge.exe	106
PID 4252 wrote to memory of 2384	4252	msedge.exe	107
PID 4252 wrote to memory of 2160	4252	msedge.exe	108
PID 4252 wrote to memory of 2604	4252	msedge.exe	109
PID 4252 wrote to memory of 2604	4252	msedge.exe	109
PID 4252 wrote to memory of 6116	4252	msedge.exe	111
PID 4252 wrote to memory of 4948	4252	msedge.exe	112
PID 4252 wrote to memory of 4948	4252	msedge.exe	112
PID 4252 wrote to memory of 6040	4252	msedge.exe	113
PID 4252 wrote to memory of 6040	4252	msedge.exe	113
PID 4252 wrote to memory of 3600	4252	msedge.exe	114
PID 4252 wrote to memory of 3600	4252	msedge.exe	114
PID 4252 wrote to memory of 4368	4252	msedge.exe	121
PID 4252 wrote to memory of 4368	4252	msedge.exe	121
PID 4252 wrote to memory of 5872	4252	msedge.exe	126
PID 4252 wrote to memory of 5872	4252	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffa6498c188,0x7ffa6498c194,0x7ffa6498c1a0
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,17195851866467485448,9326195537183092434,262144 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1860,i,819214738311157471,3874397799030775915,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,12893168917818924913,11340004946668602766,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=3304 /prefetch:13
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3536,i,4944649044245271864,11618254780966385961,2097152 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3540,i,15686044792015205923,5505400095412901954,2097152 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,6206073819023472328,943550514990610921,2097152 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4268,i,2707013246165773689,10652740764172299910,2097152 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:9
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,16506687333778784095,3424712796299500242,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,4088711692800643931,2596804064167324928,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,5961956253746609904,12832540604055151860,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,5961956253746609904,12832540604055151860,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:14
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,11408898240880612931,15156682155109939300,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:14
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,11541053572617138543,14381807280953955292,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:14
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3628,i,922290731332471003,11149006295870572962,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,517921187141530825,1950215941792501627,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:14
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,2665808458770563072,2599030411950029538,262144 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3716,i,6137626304624800816,9153511279751913335,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=3844 /prefetch:14
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6588,i,2739282925977803839,11515486842257097201,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:14
  2⤵
  PID:6040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4168,i,5076474152194923796,13025592488197297756,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,5862626440809566727,2942481111839660154,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:14
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6840,i,13453324158416730193,9625011876309126514,524288 --field-trial-handle=2232,i,14574546006933735697,16799242950055654820,262144 --variations-seed-version --mojo-platform-channel-handle=2880 /prefetch:14
  2⤵
  PID:5872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3396

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6112

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:804

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f7ee6e73fdb0095657d8acafc9c3142403b61517e4a69c6e6ade723add14f652
MD5 c3fbf3dc9f6d841605169bed848037f5
SHA1 734587f25bca25cc5760de7dba71cc3430668d96
SHA512 bfdfbb713fbaf38ee423304b8ae3924c21ba1466d81353d94972ab3f8835c4f612b546836d9726fd889b0105b28093bfaa8e3c0a065a95fdcd2c85b7ad5fa97a
TLSH
T1ADE07DDC04C8C27FA2F0644B81FD774CA2A43A1AF7DCA98A1F0889877181140F3E6690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 602a3e381579e136e8ca15d50b7de98f86b2b8ec52771225759acd90e3bb76ba
MD5 8a9b51418b98a9b44d556f5c0726b1df
SHA1 a3cb4dfeac16023e265b540856ba6a7d75a91c81
SHA512 beb4fab54f1c92c7aa81d70b2d8b34af5d2abb32cf4503175f41e0a4a07f02f2fb531b29e79e1231fd2024e5126d9cf03a194b4fcf921c40c5f8e45012d4098c
TLSH
T176E020D809C4C36FD3D47D47427C531CD3903A0AE7C4A90917048D96B04126163D6564
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2ec07ff4acae9b7fcf495402cc46b2ccafab4d577ddf30a278410ebbd5669d82
MD5 c6db5dbb43016fe101a1dc0bc2cd15f1
SHA1 e6ada14d741f9c31cb7cc5f2d3aed7b6077cd8db
SHA512 a9d492e1df9cc01bcbbd09501d288886212887e7cc1fc410696a3687779df538b8f9e14dc47c26f333c659bd63b9095a61d0a0afc993793c8f4b4f1f59e71576
TLSH
T1B8E078DC05C4C25F52927857417C971CA1903A0AE3C4BD8D1F4485C57081340F3F35A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 485bb3ffcb737dce331c9f2436b506000f1d1592f4e33a900d4193c90ff5c32a
MD5 c7e3d17a89f73d05fab1c23810b229e9
SHA1 64dde2eb13729dd3896197f9295127ab0ebc5123
SHA512 0b67dca0aea92666dbd24d226ced59ed4b37b43ce84a4bf8eef695638d553cad74116f56f9ec948b61ebac14182aa46ff8afe2d2de6a1eb1400f6fd457a2e7e1
TLSH
T11E51515D43EB29C1D7A4AB71ACF190DBF2718C8A2787AE377CD4E1749B12324D394081
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a86c5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a86c5.TMP
Size 2KB
SHA256 c0b5e26b2be15469cd1d2606309608766ef51df17a6ec0966bde9cd2aa69fb41
MD5 951d0f17004558881fd9412f4561904d
SHA1 50df7c1466e1c227329679a8836fce065e57e2e1
SHA512 7cad5e84740a218f4555a682381a9f310cb489b26861ce2ac86e54df045c63cc34fdf56739fd74113abd5917a73b34fa6e52087ecd9fac18e853dcb89272a740
TLSH
T1C051405E43EB29C1D7A4AB71ACF091DBF2718C8A2787AE3778D4E1749B52324D394081
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 940ef53be70f6d6938b04eebb7d7798dfa4f8295e0a0c5b847406472ba33655d
MD5 441efa3076cb8bf66e4f9163d3f71764
SHA1 11be155ebbe33cac808a425681a00cc09a25a2b1
SHA512 d03d29829b4d534c5405937008eaba2b74118cb9d8e29bf460909287d21e6378e6061e24be81fbcde5b5ff2c7be573476e5bebdcb12a500b253d5307be1e4ca2
TLSH
T12E31AEF7C7E89A3D8A0146F4B7152E2BCE2D0915432C3D5AC5E4AE1BA7E2871D18099E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 49015502e33c980d577c70acf8f276a62817ed90e1ad93e54c6970fa15a4702a
MD5 e2011e3dc127b1348a944fdd121ec55f
SHA1 f944e82599e792957af1e4c6b86e628e0b66e152
SHA512 44e5ece591a06cdfc00d524d463cfb823b4b4eafdd95e699a69e1ec97593b282afd575dd5c94caca322957f2f295f56892c6d2d83084ee0c645e5b56b580a0fb
TLSH
T1E141AEF7C7E8963D890156F4EB143E2BCE1D0914832C3D5AC5E4AE1BA7E2471D14199F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 80e1a7928447c5e41def3d940add07e2bec04bbadab3615f4a214dd6a61bdf04
MD5 0992c410734d826673ed04f812046fcb
SHA1 ca130efc4d957d49150021117f8615444b716e27
SHA512 3c9eecc527db5d23d984783179c0f43da84ef4eb58ed0d66f3d87c7e6497c4c662955924b24f45ec3405d03133237bab02baa2e3dd600e78742cb75b282b86f0
SSDEEP 192:sxRS/ywF6KOMl8wbB/f+skeDde5lSrzoA8p4A/g6+WNIYCyuOgGsIgIJ:sxRSblB/f+skec5lPN/5IQ0s
TLSH
T13052FA156A285D7B8DDBD20DFA517F53D6F81533A2905E44AAFCC60C00E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 430663c76460e4b33c89bf55976e887a7fcce06c8b64ab4d13a72c7b8e10a392
MD5 b2cc54d481175298115d6f682121e11e
SHA1 7c4835c649eb994e6cf33cab6516afa1fbbc47f0
SHA512 17dcf014ef5e084a1673c56a169cd9f0b623b20276980f43c46b8843b801e2cf9a0d6b6cbb6ecbc4466ce8b3f88369fb50c2157ca8d6352c90c696ce732b2c4e
SSDEEP 192:sxRt/ywF6KOMl8UQabB/f+sb9hDde5lSrzoA8peA/g6+WNIYCVuOgGsIgDUJ:sxRtbqMB/f+sb9hc5lPj/5Id0E
TLSH
T14D62EA16A6285D7B8CDBD20DFA517F53D6F85533A2505E44AAFCCA0C00E67ED121782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 6bee2b17413f3ffe997ef841d7c522ce04028293edaafa3289ba16c16374ab13
MD5 76c0042d59f0599564742626472e7247
SHA1 45980b639337507b25d565457a166b0af5dc07b4
SHA512 83ce13ab3be9b938279fb4d4169d735cbb42668db4be9cce49a75d205df6e5231c1fb257372c2044c3c22108766dc60674b08584c2174f188c53caaa16acc6e2
SSDEEP 192:sxRt/ywF6KOMl8wbB/f+sbeDde5lSrzoA8p4A/g6+WNIYCyuOgGsIgDOJ:sxRtblB/f+sbec5lPN/5IQ02
TLSH
T1B952FB15AA285D7B8DDBD20DFA517F53D6F85533E2905E44AAFC860C00E67ED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3ecdefca156637aa48e22b7610f3aad6bbe2cfc7de87551116f51c067d6fd078
MD5 31e1e3d2c6ff249e358ae831e44a6dd7
SHA1 9c1f6165470638fa564c248f782fad23d727fde7
SHA512 4be525d1424ae8f5174dc1a13d8f0e1e6155d0648f41dadf1aa66b8051f7226d73194d2a285ddc3395744fda4959a48bdcef0bc01fd1ba3b7250208bb37446cf
SSDEEP 768:j/8vrQWgQ+fB+8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCQqqMrov4:j/8vrQWgQ+fB+u1ja3VqXA
TLSH
T15FC2EC3B640CCB7E4F844EADEC29BED66DD801CF97588D5447EA890C03C67EB521A4DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8501c937-c5c8-47ed-b42c-68f4ecb0579d\index-dir\the-real-index
Size 120B
SHA256 73234aabd24e082e3b403d1316645e235f1f0b27c2dccaea2f6fcee57cc5bf46
MD5 a17d292ab3d9ce7b1b809a08e87f3ea0
SHA1 93c1c1a99e6971ca32745f5c2b7ac3e46c9a08f3
SHA512 7fb06c0016720fabbffba91f23e35238da05be91ffa577ac83a810aa88ce9146abb395b7ad8b196acaa19c3858ecc0a3416fd0628d0d7c6ba25c32a23e777067
TLSH
T15BB012098C580861CD07027109777168273707EC0E210B3320DC112BD5E509A9116840
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ec8ad.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8501c937-c5c8-47ed-b42c-68f4ecb0579d\index-dir\the-real-index~RFe5ec8ad.TMP
Size 120B
SHA256 f85f09be3c79c01b6720f170c9449b9e0b7017278cef8b9245856308ec429718
MD5 163162db6a1e018dbb420fb070f77b03
SHA1 e3730f5b8fa6a3e57ed53d97898772b9cf2bdad5
SHA512 84e323ea1832fad77dacb12bfd52c444ed7130f53a865be83f5b486a016db694f6c0630507c904bc471d86b74e41a2861d9861e2223129821c7758edfa4a16e2
TLSH
T142B0121A55800C70DC0A06702413830833774C5404204333B1E9045B49710C84941404
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 5f3441255b8e5ce03e50e5ab85395b368cba466b027614e5e7edcf5ab36ccd91
MD5 fbfceb2ab9e7337ca1009585d0baa699
SHA1 43406777a07e0cdec30657c09b401e816474b410
SHA512 1cc8fff390e8b1763c7a971c2132208213eb221a82f34043fbd3c79473a1eec6086ab29a07f88a60c8b83ef4eb21aba1fedff164f22fe2f8a83c1b205dd6d1fe
TLSH
T110E0207B3EA72C20FC6F97D9147054AC040578E8C949ED4F546BE5C764B23563406D33
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4d1cda768a0654ffafa231802487c88e2c8637a3472290a949fefc87f653003e
MD5 08a327c433b8d91dd432736d0bd078b5
SHA1 479059264dc881f3dc06f46ecba1617da6ac2ad2
SHA512 a9b9130792f15d6810865ae11132600b84eb409c39549fd76b328fec02c60b05f1298b703e9005365c68729e132b5b14622215ce4773d8f832e72779227461d8
SSDEEP 96:KRbEBVj5J1WdSIg91K4EgT1c7j6dJOHgRkQiOCYWm7LgYYK49gKYcY4rKQ1OpuKQ:CbEBVj5JAdSp9/EgTK7j6dJOHgRkQiOI
TLSH
T1F491BB50367F0241787D690CC1BDA82A82C2B0763159EA2B3BD8816B5F67F079DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5b3d44.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5b3d44.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b78be91ce363fe250586263a81dd39382e3b3d8cb83ea0461ed2cd934540eaea
MD5 9c285f128a521724a0960b0ae2b545b9
SHA1 32d7eb62059282a7c274f08ed7d1ff0c7f08f8ae
SHA512 7b47430bc38af08074bc8fbd69c8b8b2f712f85dc319d2672246274ed429f6768904fb0981aaa32e7670cfbd5dad4ba11c2616036b9cb9f8cce357fc429836b9
SSDEEP 384:NZcID38N8MofCmL6u8QZfytf9xhUp48UEipi9+As3bW466x9ejDn4HCwjEYCGRvw:VD3Ljv4p8+p3bd66j+4BRv86aLIWMMj3
TLSH
T1C0F2AEB2EDA99D739CE5D645B1823643AEF45263D7C01ED4D8DD6B0E01961BE030B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ee1bcc43895173945540865b83af735db0f3c68cbc5015dbd514a742b07723e6
MD5 8122e4853aed95c30c9620e606a65bf5
SHA1 a1da0a5a735bf19e90294525006d96f0a2c1b486
SHA512 1fdb34470ce48d43ff564772fbec3f911669aeab8a035f1b2563d9410383071a3f3c63d9e94d393ec6a993afd3b5b0ebe2de5280af3f5a63654bf3f0a54bcf18
SSDEEP 768:aFQn3DwgXj0p8+p3bd66j+4BRv86aLIWMMj3:Bn3M8+p3Z6n4yy4
TLSH
T1A103AEB3EC98C977ADF6CB45F6463602AEF451A3C6C05AD4E9CDAA0D11961ED030BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 bc3cf8373637d913b1fea827ab1fd6d8bb31b567eeaacd44485b9bed60026f02
MD5 79870bdbdca00a1081e1bf084331c68d
SHA1 1f2845dda4f4f046ddc548afd3c52fe7527feaa5
SHA512 460e30ccdfd3bfa2bd62af98ab4252fe5736a6acc89b44a5e07413f5600392af27708d9d84d87a90bfc8e0803765465bb62fcb3a23602f428f4ab1b07a62527f
SSDEEP 768:7rv+4UNbdQ3qjv4p8+p3bd66j+4BRv86aLIWMMjZ:7bsbC3kG8+p3Z6n4yyG
TLSH
T13013BE73F9A8D9739DF2C644B1877A43BFB851A3C6C00AD4D8D96B4D419A0EE130B836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 cfb3ba9ed4546434aed0a28b1f0518c5877f51af78e3b3a8b040c54d30e75093
MD5 a2904ac1b5c21f7749185aa9143a6a85
SHA1 67b204b2c7b1c64e877f22388004807514242bb3
SHA512 6ce670c646a8846114b055d8d923b319c62a7da9b7cddc7ee39d7063e41b82155e96d4b277316c2553e733a8d11e14b481ac5b3f03dbb81a789545b66c74f40f
SSDEEP 384:lZcID38N8BofCmL6u8QZfytf9xhUp48UEipi9+As3bW466x9ejDn4HCwjEYCGRvw:dD3Ijv4p8+p3bd66j+4BRv86aLIWMMj3
TLSH
T170F2AEB2ECA99D739DE5C645B1823643AEF45263D7C01ED4D8DD6B0E01961AE030B83A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 db881c935f0d5f4054c8c9167eaf84a51d6b2080806aa39a511970eaf80f0761
MD5 2c69de568a82e977a6ab9e783fbbc62a
SHA1 5d6f754ba592fc6e5f44bba6189b8819114f2e9f
SHA512 3cca1fa5f752a55f5877f49cdaed3faf89f76e527b4e94987ebacafa73559a8b82dd4a87f9e78a7ed71a2d2f2833a3343b2ad7a90efd825b6340f3e9822274c5
SSDEEP 768:Irv+4UNbdD3QWcdNp8+p3bd66j+4BRv86aLIiT2bwCl1:Ibsbp3iL8+p3Z6n4yV0ww
TLSH
T1DE03BE73F9A899339CE6C644B2467A437FF851A396C10AC4D4DD2B4E419A1AE630BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

37efa06f-5c32-46ac-900d-58ef06b429ad.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\37efa06f-5c32-46ac-900d-58ef06b429ad.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download