8df34860aa5da18e489d457d3f70c88c73cb04e647bc7c9a74d7cf4948a5b011

Analysis

max time kernel
299s
max time network
297s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/07/2026, 03:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
IT9248358009143.html
Size 21KB
Sample260730-dvzbpaycpd
SHA256 8df34860aa5da18e489d457d3f70c88c73cb04e647bc7c9a74d7cf4948a5b011
MD5 4d2feeefac722d5c3c7f8beb00b7832b
SHA1 74bfa298ac1764761c011b30369acda4d656bee7
SHA512 1caf5d6c9584b6b28ac208c0f338f0a48d7c34cb17783ae09ccdc02fabdd71f993ca44e36ecbde8c33321d89a7e54b20897116deac0cf59836a258fa09d390c2
SSDEEP 384:Tm/3VFMc3FFm/oMaWYXJM11xF9UvaNkdd/ifVqvmnZRT0/tf1HnuqvORu:RKvaAi9qvmnZRT0ldHnuqvp
TLSH
T13CA2F96AC4860C275D0767896FCB92D31678C503AB468B25BAFEA34DBF410CC9F93758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4424	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134298552337331591"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{CD6199CB-B704-4426-8933-B9357A753D2C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe
980	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 980 wrote to memory of 3916	980	msedge.exe	85
PID 980 wrote to memory of 4424	980	msedge.exe	86
PID 980 wrote to memory of 2596	980	msedge.exe	87
PID 980 wrote to memory of 2596	980	msedge.exe	87
PID 980 wrote to memory of 2596	980	msedge.exe	87
PID 980 wrote to memory of 2464	980	msedge.exe	88
PID 980 wrote to memory of 2464	980	msedge.exe	88
PID 980 wrote to memory of 4764	980	msedge.exe	90
PID 980 wrote to memory of 4764	980	msedge.exe	90
PID 980 wrote to memory of 4764	980	msedge.exe	90
PID 980 wrote to memory of 4944	980	msedge.exe	91
PID 980 wrote to memory of 4944	980	msedge.exe	91
PID 980 wrote to memory of 4944	980	msedge.exe	91
PID 980 wrote to memory of 4800	980	msedge.exe	92
PID 980 wrote to memory of 2976	980	msedge.exe	93
PID 980 wrote to memory of 4800	980	msedge.exe	92
PID 980 wrote to memory of 4800	980	msedge.exe	92
PID 980 wrote to memory of 2976	980	msedge.exe	93
PID 980 wrote to memory of 2976	980	msedge.exe	93
PID 980 wrote to memory of 2420	980	msedge.exe	97
PID 980 wrote to memory of 3520	980	msedge.exe	98
PID 980 wrote to memory of 2420	980	msedge.exe	97
PID 980 wrote to memory of 3520	980	msedge.exe	98
PID 980 wrote to memory of 892	980	msedge.exe	100
PID 980 wrote to memory of 3740	980	msedge.exe	109
PID 980 wrote to memory of 5040	980	msedge.exe	110
PID 980 wrote to memory of 4168	980	msedge.exe	111
PID 980 wrote to memory of 2396	980	msedge.exe	113
PID 980 wrote to memory of 2396	980	msedge.exe	113
PID 980 wrote to memory of 4880	980	msedge.exe	114
PID 980 wrote to memory of 4880	980	msedge.exe	114
PID 980 wrote to memory of 4872	980	msedge.exe	116
PID 980 wrote to memory of 3784	980	msedge.exe	117
PID 980 wrote to memory of 3784	980	msedge.exe	117
PID 980 wrote to memory of 2260	980	msedge.exe	118
PID 980 wrote to memory of 2260	980	msedge.exe	118
PID 980 wrote to memory of 1580	980	msedge.exe	119
PID 980 wrote to memory of 1580	980	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\IT9248358009143.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbecdfc188,0x7ffbecdfc194,0x7ffbecdfc1a0
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,11975924531680099586,4838678748495685173,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1804,i,3999840573725798654,13888476042330478476,262144 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:2
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,16313050362815119669,707653353577076738,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,13398965487767831955,17731383479771524060,2097152 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,17047349542951905480,6980907164191188110,2097152 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,5004040586066988983,17455885348212571983,2097152 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,1454999829288913017,15666850219337942295,2097152 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:2
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,410251157601784028,84391104961611135,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,8671986519162558148,11635496383673288786,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5801989768377763953,1634107855175906588,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5832,i,5801989768377763953,1634107855175906588,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4200,i,1665961625844197980,12054010394160845803,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,12915684412720497791,6873010913055857601,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,10666531113584621956,13102749937128026232,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,15052996020525627053,7125898210150344154,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=2992 /prefetch:8
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,13568478446066112812,12307905492036186465,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6128,i,736459026824219635,13323597086076853950,262144 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3396,i,4101743304498087005,1735009375807332161,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,3629324238703310089,5837161786938838643,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,11197207551034243857,17928747764265963148,524288 --field-trial-handle=2352,i,13991743776314295724,15902970030658548428,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
  2⤵
  PID:1580

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3068

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

7fc6103e-97e8-4164-9f36-c62ee6772809.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7fc6103e-97e8-4164-9f36-c62ee6772809.tmp
Size 8KB
SHA256 429133c859948cf97a85930f5f4e0e927c094d4f4101f4a8a5a1d2cc895dec0e
MD5 98cb0cbca0c1072fcc4c6ed475ed16c2
SHA1 87641c4cea3566e9ec10fae91599daf6572241a5
SHA512 3a5e3a0b6f9f2c96e8086480100082e81bf05f2c3c4c8decac38404946376b6a0f05a64dd0349244b406c0594d2111efc04720b3f7569e798ad1f5b8e6714c59
SSDEEP 192:hONL6JkRSQmiUyjH++RN0OmheRnX9VVc5qtcU6:hONL6UO2++RN0OKq94HU6
TLSH
T1F1121936A9289C7B5EE26544F48732135EA5513BEA89AF80D1D92F0C01DF69C134E926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 deae8ba3a07225fe9f1490e4968fd83f8d308707a88a6d3d541d8ab416841ddf
MD5 1fcf11901014bf515178c91bdb7a6c5c
SHA1 4746b018067d9671617515224b7697b27fd2fc5f
SHA512 6059830103275d34e1aa4dd4e8d4177b6c2b684b2b3ad5417753387a227c838c0b258e662c78853cf649656ebd762f5d160c10349cd19ac1953380bd6572c660
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7p:fwUQC5VwBIiElEd2K57P7p
TLSH
T16EB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 93f5729a1ad74c6b8d3ba4aa898e0955b26a37173817ce3fe85ac77ff5d6eb11
MD5 029e84c942efe5e2f69b8de2e51116f4
SHA1 c05fe11450d4d9de9eff0c4f004b4c992e87c1f6
SHA512 5eec6660176a87477e846b2de697d1fd8f84c6ee15bc491ac2b3bdc1470c25fa09d0c27cdf628f12af179eef12db2d006814e80752b4cb67e926107eeb175cb8
TLSH
T1E0E04FE485C9C37EE244654742A9978CD2B07B0B96C8AF9A1714C8AD7243984A7D26E0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c602614b1f3d0334df04453683c33f9a10780ca3a247d2ad9db0ca04ca96aa07
MD5 630c4cc6aa47306c52895cc2b5114746
SHA1 03f0a5654167a4c9f59f0331444738c56b13689e
SHA512 32c467ba5a1b8f7411b4c825ab055c2a40d927ec479427189477e70181075a0b414921422dc1229a084c26df730303e5992e1d107e6b27d788d6d053a4006d52
TLSH
T11171A2BB410287AFDB2DA2FD60DE71603C70A4D9F9335D569E5047363917B0142CEA88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5844e4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5844e4.TMP
Size 3KB
SHA256 7121b14385ee71129f693c844a94367ca2be4483dfe276da8e39ab74be74bed8
MD5 76f42f2a82ccf51b0504ac3a76e2e9ba
SHA1 2f0f79f40f56f76d16e9ef51392097c654b80279
SHA512 56488934096cfb1805266d55f1aad47be71ec5526433fe7a0afcf8dd31c93aebe45f8af5bef254e2c26ba89faca139f6e6010572bcdeb309497c44b1af061634
TLSH
T1377191BB410287AFDB2DA2FD64DE71503C70A4D9F9336D569E5047363917B4142CE688
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 949B
SHA256 e0e5c39c897246d8eb36bea6587a66ad56244794f84b412def13ecae3286eeb7
MD5 6c58d14e771e544f53c36ba3e2778725
SHA1 5bed9a50495ae60283d652f1fd3ac554a4d1d683
SHA512 ab541ddf1d46e5f38ce7416514dc1bf6087b035aef5bfb415c2a2283df9815bd763d4486ca47d0bae3466aa6200c5c8ebe956f8bcd8cca38da721a8110f1f245
TLSH
T1B8117DF3C3D5856E890117F06A24AE2BCE1D0606831C7D1989D4EF2BD3E3479E10199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 69120f2c6d71c695e478141d6705382155dce8d014ca0cd116c855c5e2cc6c81
MD5 6f74a3fe7dd00b48fcd887518cf5e219
SHA1 8fe581939079cdbac73512cec1d990723edb2191
SHA512 c7a740ff1ecc53ba07c5dd4998c12807fc778cee234eb221dff68cc5de3459e8fc41e8c5774473c1a0f03333b4e20ee0d378dd427f4697e9e69f14c44c10adcf
SSDEEP 192:sxZFRzyM/jK1Ml8MkF/fwsXlx9IdpdQHW6+WNGYIky4DiIgrJ:sxZF1MF/fwsXlx+GHbGyO9
TLSH
T1C942F6166B34997BCCDBD209FA457F53D6F91472E2901E44A9FCCA1C04E6AEC220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 20aee28ea692b9deefc8cc6fe914402c258d6cd1dd6f2d6aa4a0a2626f469117
MD5 4c6441f96be66f096a389381d4a021fb
SHA1 defac5c33ba895ceea1e7c28f2832f1719e734a1
SHA512 59b4de3bd20e00d13f181b8a9215f40fea748a4b43f7f61b1c80282407a22db3219baa938977df1bff703b21796fb7f7110e208185018d3a9811e389c71ea165
SSDEEP 192:sxZFRzyM/jK1Ml8UQhkF/fwsPtWx9IdpHQHW6+WNGYI8p4DiIg5UJ:sxZF1qyF/fwsFWx+wHbGJOi
TLSH
T10952E616AB34597BCCDBD209FA457F53D6F51472D2901E44A9FCCA1C04E2AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 36d9ca31b4958a8488ce53dfa0562ab1ab3183baaa9f5fe3c9693a4feaed8dfd
MD5 daae4174892d95c866748837c6086645
SHA1 27ff393b7119a175e735a59b14193b071728d8ab
SHA512 08c6420bd2b27bdd82fbfaa89c28051b1f7a6058d3aaabae94cb551cf596a6d9d4bffe676334f51b9515da74c401de4ce7f3c8ecf40d3de55f6cf5225a99d3cf
SSDEEP 768:kWsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OVk4Ll6AR9zroH7kkM:kWsqxXlWvJD6Tu1ja54LAs9AH7kd
TLSH
T11FD21C3B694CC77E4F840E9DEC266FD76ED801CBA6988D4447FA880C03CB2EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c80c6e237faa08c20141120c8487547ed693b588bb625eedab9471db5c2ddc02
MD5 3b7294d813393f01b818361fc8387b50
SHA1 ad26e4f868397a2892239488efbbb2fa3f397940
SHA512 7969de7d219a8ae5590f689b266cf4773c98d849a56e1708b10c67d40181631fc1fb34c8e59704dd77e9891337e75c067ebfe0261a0139939625ae6939f61e75
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyZ+I/Kjiojy5EIfKdmsBQ:KYbaKYIK6+EKji2qEAKdmKQ
TLSH
T1FC91034A763E0212383D6898B2A786374F8239637018A46F3F7940E55F6AE125CFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe58e087.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58e087.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 f3bba4ff023327b9ea9b31dc428c22e60f63f59307cc23f6b8e5881ecb0be3f4
MD5 d59b0e8b6b6a347bdacaa46915eb246e
SHA1 01c9fa93bdc842225525c9d54408c4d3b206372c
SHA512 257e2db63c1758ec1418d6c7b18b0814400365226cca994e42904b95a5b68e282375933ebcbaea300c4e6028c253b6758a1c36fb25909cce47636a9da4e97c85
SSDEEP 384:tsNiXHWsbyViVRN0OKq9EHOObjI9G6w7bh:t5WdwH0OB9EH29M9
TLSH
T195726C36AD388C779EE39615F48B35135EF451BBC7882E84E2DE2F0C06DB59C130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9d1a85bb844d659f8a6ea8e66afac33a35f83c77b94aef92d277d21be33094b0
MD5 301e7c9ce0c312391ee8fee25e252043
SHA1 cb5f8b620c758338805f37b862ac2ffc2766bcf6
SHA512 2fcc54ca5047e20972cd6076c697ea06537cb41c493d749485e83532baddb1542b4452276768a02086e221de3cd3c336987babffafe703e3b3d350a78809fd66
SSDEEP 384:OiFRzsNJ8TUNTUlIlaHWsbyViVRN0OKq90HOObjI9G6w7bh:lFhCwgmWdwH0OB90H29M9
TLSH
T17F824A3799688C7B9EB79B45F58B32139EF451BBCA88AE80E3C95F0C01DB1DC130A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 35d5666f870e4552819b9bff88fd04c2ab1419f6e7b705db968ffba89a1d5394
MD5 9e055683a2353ba109357c137ca1f6eb
SHA1 d4d8ccc7b1717446617b99295ac2782679dbd559
SHA512 ed4ffcd4be127026622de3aca9e30f76d10534df306beadeb5c0b5cd042ac94e753bfda3d6812dff29545e667e079eca906f7d3f807d94d414a0bfffbd242a86
SSDEEP 384:OiFRzsN68TUNTUlIRakWsbyViVRN0OKq90HOObjI9G6w7bh:lFh3wg3WdwH0OB90H29M9
TLSH
T159924B3799688C7BAEB75B45F48B32139EF441BBCA88AE84E3D95E0C01DB1DC130A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f317e817e628fa9a6135abeaea00b968361e7bcc96d976b44cc20f5643ba17e9
MD5 f9c162d3a0349114cd98046721d93a48
SHA1 32d6fec84171004ccd2471d0fd44eaeed3d17418
SHA512 d3bb1797821c0ce609cd8293608094746e2d60bb91f41bb57f0955b7a2bf03d4b97be00ce27f621e5e4ae8b217dabd718f398971c76bb891842663cff628072c
SSDEEP 384:OiFRzsN68TUNTUlIlaHWsbyViVRN0OKq9ZHOObjI9G6w7bh:lFhjwgmWdwH0OB9ZH29M9
TLSH
T1A0824A3799688D7B9EB79B45F58B32139EF450BBCA88AE84E3C95F0C01DB1DC130A915
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5f47ad87f85e0be5da8efe6c380ebe05f121ea4a288ef4fc5efb02c06837e9a1
MD5 a2db3476ff12371a2f8b0bbfa1c7438e
SHA1 4f5eca9d0c29104ab4144984be4145e8757d699d
SHA512 4e8f3f90c7c1d8e407cd8e59a192d80ebd0244f92ebdc938333138f373abb068f035f21937987d63cf3aafeccc65380f97f8f7de1d35b189d992d583e3d5a80b
SSDEEP 192:tONr6JkRtQmiUyhHW+RN0OmheR2h3vR5U6:tONr6UrWW+RN0OKFPU6
TLSH
T1CE02E939AD381C7B9EF26E09B98B27175FA4207BE9896F80DAD41F0C01D765C134B936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 28a7568dc0ede4db7703ce60feed2564e78fbb157c3645e08065722d682ab6b6
MD5 a9660cfa2111c9f0b083f144783cf444
SHA1 50255c2aca77d0a2d3b74df484f4a760fc48ca96
SHA512 205f5dab972cef67a2fc97bc7419b9dacf9bb2bd660369c1c422a83abc7316b16f44fd691e29fdce22e0d5736efbc2bdace9bd60b1abdc36532100dcd34ae1c6
SSDEEP 384:GsNiaHWsbyViVRN0OKq9EHOObjI9G6w7bh:GCWdwH0OB9EH29M9
TLSH
T174726C36AD388C779EE39615F48B35136EF490BBC78C2E84A2DD6F0C05DB59C530A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 08b767bffc2ada873009604cceabc498dbde32420389f0b3833bf5616e87bf5a
MD5 91f9fa1f3e80eb8f308abe0c1d8ca59f
SHA1 0a4756f0f01de898a2f760bdb8ee6ebae49187f1
SHA512 ed1d3e3d7610ff91539e6be282b26f3219b79cf5bd45f98f810d064a5e73e8dd2a7749a56e157acb17409dee1e075f321fb823beae452577068a925177f4d674
TLSH
T17C410B58ABF91118B3776E5A9BF6686E887EB8772F06C45E00110E4F4636F40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download