hxxps://www[.]toryburch[.]sg/

Analysis

user interaction
yes
max time kernel
898s
max time network
733s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
31/07/2026, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.toryburch.sg/
Sample260731-dp2jvsbh39

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4744	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134299411411690494"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{D718F04B-9A71-44EB-94D4-5CA6AB3B820F}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4320	msedge.exe
4320	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 4524 wrote to memory of 3976	4524	msedge.exe	84
PID 4524 wrote to memory of 4744	4524	msedge.exe	86
PID 4524 wrote to memory of 1652	4524	msedge.exe	87
PID 4524 wrote to memory of 988	4524	msedge.exe	88
PID 4524 wrote to memory of 1652	4524	msedge.exe	87
PID 4524 wrote to memory of 1652	4524	msedge.exe	87
PID 4524 wrote to memory of 988	4524	msedge.exe	88
PID 4524 wrote to memory of 1116	4524	msedge.exe	89
PID 4524 wrote to memory of 2716	4524	msedge.exe	90
PID 4524 wrote to memory of 1116	4524	msedge.exe	89
PID 4524 wrote to memory of 1116	4524	msedge.exe	89
PID 4524 wrote to memory of 2716	4524	msedge.exe	90
PID 4524 wrote to memory of 2716	4524	msedge.exe	90
PID 4524 wrote to memory of 3488	4524	msedge.exe	91
PID 4524 wrote to memory of 1892	4524	msedge.exe	92
PID 4524 wrote to memory of 3488	4524	msedge.exe	91
PID 4524 wrote to memory of 3488	4524	msedge.exe	91
PID 4524 wrote to memory of 1892	4524	msedge.exe	92
PID 4524 wrote to memory of 1892	4524	msedge.exe	92
PID 4524 wrote to memory of 1532	4524	msedge.exe	96
PID 4524 wrote to memory of 3204	4524	msedge.exe	97
PID 4524 wrote to memory of 1532	4524	msedge.exe	96
PID 4524 wrote to memory of 3204	4524	msedge.exe	97
PID 4524 wrote to memory of 1840	4524	msedge.exe	99
PID 4524 wrote to memory of 1160	4524	msedge.exe	103
PID 4524 wrote to memory of 4276	4524	msedge.exe	104
PID 4524 wrote to memory of 568	4524	msedge.exe	105
PID 4524 wrote to memory of 3964	4524	msedge.exe	106
PID 4524 wrote to memory of 3964	4524	msedge.exe	106
PID 4524 wrote to memory of 976	4524	msedge.exe	115
PID 4524 wrote to memory of 976	4524	msedge.exe	115
PID 4524 wrote to memory of 4320	4524	msedge.exe	116
PID 4524 wrote to memory of 1148	4524	msedge.exe	117
PID 4524 wrote to memory of 1148	4524	msedge.exe	117
PID 4524 wrote to memory of 4824	4524	msedge.exe	118
PID 4524 wrote to memory of 4824	4524	msedge.exe	118
PID 4524 wrote to memory of 4188	4524	msedge.exe	119
PID 4524 wrote to memory of 4188	4524	msedge.exe	119
PID 4524 wrote to memory of 2636	4524	msedge.exe	120
PID 4524 wrote to memory of 2636	4524	msedge.exe	120
PID 4524 wrote to memory of 2228	4524	msedge.exe	121
PID 4524 wrote to memory of 2228	4524	msedge.exe	121
PID 4524 wrote to memory of 4308	4524	msedge.exe	124
PID 4524 wrote to memory of 4308	4524	msedge.exe	124

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.toryburch.sg/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffe784bc188,0x7ffe784bc194,0x7ffe784bc1a0
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,10058720137776228975,5106051663923412578,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,9372425732208247545,8843869991488466189,262144 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:2
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,16967021899396360538,9414098602124672796,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=3084 /prefetch:8
  2⤵
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,3541792296095595778,9794347455773104390,2097152 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,947038347354223988,7431715732707128104,2097152 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,10792583308017945305,10853479604320508443,2097152 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,17307528803206946110,15504567213085879061,2097152 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,10697470736181095109,10929446638947000308,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,13942214942682463698,16453230110151088701,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,654905922758490770,4540641955794354102,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,654905922758490770,4540641955794354102,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5812 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,17847838363861072997,15362424707173722144,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9336280895564070163,14955974369327880138,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5916,i,13754045532996804599,14558503749629276796,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,2405411527565299962,633819850071781288,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,1225721115425900573,18373182339479096873,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6188,i,9048412493648644947,7254091240849413877,262144 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1532,i,14922519737971778383,16153701041191742797,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,8085629552217560654,1055131553372335798,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1032,i,8520665219430778446,14317846844211737402,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,7725671680941116867,9884637227052256706,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,8180626431217148830,17080744548416970153,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:8
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3392,i,15213090660070831241,11387240088668140197,524288 --field-trial-handle=3048,i,7392082212538515742,12198830049984277939,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4972

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 05210635590ecfe61f0ff004344f0d07b5a87e284e29db76f0bd61e97f43da5d
MD5 f3021567e2b276da7e7b2413e95d0918
SHA1 2925767ee01df1ce973aad0d342ba0f82a41cd81
SHA512 5b21fac88299defcd3a29d897631cfc4c2389199b22dd9059a42d23770fa290b889a287add6c819d88e1fd4c377eaeb1334a84e81ea1e94cb895145f971870b3
TLSH
T1D1D09B207A48F441C745017195059F553B2654542057D90AE165585D6CA519493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec09ba5da501666cac506a8e17a37a0b19f2d9712ad11c5ba4ad14b3ce62e7db
MD5 e1404f4875306f456785e26a92aed547
SHA1 053db7b2ab0b6a59f2b44973d8f1751505d230ac
SHA512 a6ccf97239d40b1773848dd7f6ee31e91a3f8b90e05f43c6d7b13ead4ba9896a88cb2a9ebb06880b10b5223c52e29e192ba9e6e80528cece8415c817c164e52c
TLSH
T137D09B203A88F441CB45017195049F553B2654542057DA0BE165585D5CA51D493D9682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 717c5e3fb68080904d559aa400f6a34ce02145d71da46439fbe831279e34d826
MD5 d8812218e7885eb68124fb85de106984
SHA1 fb40adeed4e4c45426e63516c409d8c101e576db
SHA512 b698eec98ef8f39c8026a2ab4ae58e63a1b0bc63aed666dfba6e10558800e85a4c32dd477c7d5d24f1514a0d0dd0097f38b406346a8c63bb1a2e22722f9f9ade
TLSH
T19AE0209B9689C566438097C7C37973D4D175F207DEDCC87D3208E29D7400404875D39C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 832dc7cbf7c186cbe8a2a67b6a859f05d00ee7cdfd8d3bd379d7adb5898b3c4d
MD5 0ba105bb42be50874f65fcaf128e0795
SHA1 cbdf6c6740852f631af52ec73e90595e6e4ece76
SHA512 10a37a8f429571e12fabd6e5f5e3166d6e7dc83b0223bb7b12a695b10e986227ddcdaab9b4b57eef538017b60e905f731507fe1064c3c8a70fe6537d96553146
TLSH
T147E0268404CCC2AFA380A4C7C274934CC2A0364ED3C9A91A2714D49C3043044A38F6D8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 af7dc58f6e4c3a185e90615de35a6322aa1171e7c20108fc14660cd765342ef7
MD5 0ecdc5d4329a28c405946513e222596c
SHA1 9d6bdcab846463f559dc102e4f8c7af480ba2531
SHA512 7b4a8b70ebc0ade1b2297c29aec1123763f1f92e5b2608342b2ba368fd9f494eed3e583d5897f694820e8025b7f60d098409954ad1040f1c188d6f53643a2656
TLSH
T15FE026C516CCC22EE340A48781E5634CC2E0364F93C8E99E1748C89C3081060A39E99C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d561523a97ca21f05e10b5f98a33978db01d6fa9a55479dd4d8f127e9489a448
MD5 825ce8c55101c971007c0c0adcc89f62
SHA1 0b912ccbcd1623e3b3431b2d7e69a068f6569177
SHA512 933832aeb1abbbea62bc432acbe4f487f8588be958bcc0219d1167f6358fa3051c1efc0d2c2dc1c6976df6f83892bd155b62271afefc2faba1be713218dcb6b0
TLSH
T1F6E0DF8489D9C63E9350B58781B8938C83A03B4A92C86D6A2700FC9C3441080A38E698
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 acec99fb038c973f846b48f96c5b396c84fe2e8bf60ba79c937229029c5b5249
MD5 6463ae60d4058690af64d2d7073c0e3e
SHA1 3c7e7bf46f750c21e859a62cbb2abc4c2e672463
SHA512 c37b5cb2cbfc9365ff86b86c0fb75ed91f0ccd8daec5710e1be559477c9c149f36d37c77e6a14b2887efb7b6b320b716b43a1156780254a6543b24783988cfd9
TLSH
T1DB71F9E4C1C207E3E32110F1FAE006837D319AD65A439D962E6405BE59E77E2F57BC48
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe595673.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe595673.TMP
Size 3KB
SHA256 aa40d813d1f33dcba56fb12e538ed3f33a4cc65813152da8966ae45061a6049d
MD5 f10c6ac41a98e2ce2077f4a3d7500978
SHA1 92c6427be9540396b06c7f9660263d154e6f4d45
SHA512 8fe200fc7f59774715ecca800c5a33a31914435efaacca661e95a3a9d13ef3590ac5229c49f2fa84201b26fc90e1949979b8febbb78ddf7893f76e9f7439d73c
TLSH
T131612CF4C1C20787E32014F1F6E006537E328AD65A439E662E6049BD98E77E1F97BC88
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 3bc13ed99521d833cc62a87a6201d6d2ca7c9bc6761ba540a5383118e058a373
MD5 6c13f4834ccc20b82197e025fa6b1005
SHA1 7e5b38d60a35407556cc430fa200bb392c37998e
SHA512 4c9f1c62817daa002e3ef2279526c99f9f4ba1179fd4947094bb8c8770f3a70f62b5c0c02a8a8691a698655c974f19f2faf8ae157a4b63b34cc5bc5a17e16c37
TLSH
T1AD81AEFA87E4852DDE5152F0AA157D2BCEAE0D20431C3D2AC9E5AF1BABD2470F10158F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 68cf0a19b28490c189f3d5db7d5bfbebdcc7f69c03da5f27dd8fce8d447d8d33
MD5 72f878370537853e8c1b050f48aa4950
SHA1 e34bcc48587b02ce3dadfdc88d08603cf72c4f65
SHA512 6c2894627663d91feea084c30861994d6d74229ac7003afdaa17818ea9b5be3766017c6208eb17d20eaff1b02210d62b5a147d1473df3a6dd2ad817fc53a4e0a
TLSH
T1E7619FFB4BB0862DDE6152F0DA057D1BCEAE0920471C7D6A89E5AE17ABD3070F10169B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 be896782a549e7c128c588652348aad0b2233c68a61bb037d558a0d3627b0a51
MD5 6f140286605e7ec2760fea93f0b27c9f
SHA1 7ce691df5a325dabc2a60d0d2c4f2ba07f04a093
SHA512 05e59c6db14b5ca376bfddf4ae6b373bfae9279d61b8c5b29b423be8abc453d64ebae81a0fbc07d050d390001e7904d8544bc42cff52acb7f704c859a53623ba
SSDEEP 192:sxZ5R/yM/jK1Ml8Mk2/fhsNNsIdplUHW6+WNdFi/YLwwh04IgrJ:sxZ51M2/fhsNN1KHbe/C9
TLSH
T1A442E8166A345977CCDBD309BA55BF53D6F90562E2900E44AAFCCA0C04E6AED2317C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 917ad9fdea2a4034f77797ee74e3cbaeadef0cc739cd44f41c0c87e54b5fe00e
MD5 edf832937f4b8796902a2f8421ff63d2
SHA1 89b94f27324f79ecfb2f62c8a0a4d4848460438c
SHA512 22fb7170f4d105da1091322d6ef99552d82924084f363553316a6681bbd042e10547226a8aa621c5a639529f3f1ba70f086b4b7d58fef7e5115a5c920ec0af4c
SSDEEP 192:sxZ5R/yM/jK1Ml8UQZk2/fhs6rsIdpfUHW6+WNdKKZYL7Dh04Ig5kyJ:sxZ51qa2/fhs6r1cHblZueO
TLSH
T12652D7166A385977CCDBD209BA45BF53D6F54572E2900E44AAFCCB0C04E6AED2217C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 8f4109a403e5743eb71b7a93c558008174f908a87c04f415e68caeb5c2ef345c
MD5 ee8ba2f5782b789d138b964c0df63d4c
SHA1 cc5fa7c3aae8fffa80f511ef3bc2981bcfa4f7b4
SHA512 a92e4119f7bda7c14d27ce4860d3256cc043df0a358301e72f13cdc36ed9eb46299b8f4ad50f6613a61be5e9b994b02b0f839f97c84c67170a6caa78014af41d
SSDEEP 768:uQs6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNBro9k:uQs6pD1WvxzWju1jahILIsN69k
TLSH
T112D2FA3B680CCB7E4F840E5CEC2A6F967DD801CBAB98895447FA454C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 48e60e15e4a25e757720500a69e8cee44ea534865123010ecfce0128fe3cb43a
MD5 c3a7703a986d45547d8f8db1e04986cc
SHA1 5caa1588f54b4f084c495a8c8e935565938e6388
SHA512 dc91a9dfa849bf65977e1a49f0222552611e276a04d6401a401f5fd75de0d066eb5c750c2af272f8c4efa1569e8c1a8c792f6c5a64b852cab6dca91417764557
TLSH
T17CE026BB6EE76830FDAFE3E7287094B50241382CC805BC4FA86EE6C751B13557846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 bd54e1ea1545c37e2509c83bb9b31d88da6b0a9db9a96ddeea959ab67d511a08
MD5 e30873eaea8ec16136a7dd63ae71bcfa
SHA1 34eaddad180aed71cdc94f4c6555a7f783151f70
SHA512 a0aa85335714dfc37d0fe5821b24a7d3a4facecd504e61d2026274db673b956c96c1359257ddab1f959d3d2e94ded6df968017bb40b0515a7a4b71c48e7edb29
SSDEEP 48:K0PY7/VpdktpmPImHkKzBb9k3f0oGVIyqwF0AO6egaCbzInogKA1oGgk4whLmQtv:KUAAKtePubCKs8e+nCKQU4
TLSH
T1EF91F41372BB03022C3E690C975597678A42B5A37028A42B3FED40764EA7E204FFD9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d2010d0-afea-477b-acd3-2f9b1e0eb9fb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\2d2010d0-afea-477b-acd3-2f9b1e0eb9fb.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 0640897458acce49e666e0fcf8c2a8ad27faeb31d72a58a96af5ec5f099cfd8a
MD5 2452bb08645ce8c52bcec8ebe75e43f3
SHA1 036c63e32070e3735c1e6f3a69daaefbbfac25dc
SHA512 56b8b6c7ebaa8a3ba6007faeb0d57246c46d0ef02e66a50078f024a8c181cc730dd39199a5075fb02bf7b8b728c9544c0010a533daa8e66003dc1e84e8082e0d
SSDEEP 384:OsN56b0l1Ea99dFMsOMC3OObjI9G6w7riw:OwNDy329Mmw
TLSH
T1B7724C31A8385D7359B3A112F48B3A135FF481ABDA992F84E6DC9F0C05EF5AC5306D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a48b86115e5862ffb570063b6db3ca55c72642be3ef2622f4de2c3c9794bf7da
MD5 11021dfae62e406be0c475942630d59b
SHA1 0cce1cdb96584827e10314d11c59a5840ad5e44f
SHA512 0af45a5726b41169846d7609ca3448945fc9b698924a1ef5932046d2a1bbb1c1845225189fcf5e602cf847020115dc8fddf3257203b404b7ff4d46b9888b1684
SSDEEP 384:7ZcIhsN52b0l1Ea99dFMsOMC3OObjI9G6w7rj:jh4NDy329Mv
TLSH
T18B927C31AC385C7359B3A512F4873A135EF4817BEA992F84E5EC9F0D05EA9AC0306C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 87143747d0b222e6a2ed869cbad5b1a65e81cc314d8ea99dce11f44e8eaa9097
MD5 d95584857e0fb6df3968794ea372eb24
SHA1 408c2b0834ae6faeda1e0018317b4030247f47be
SHA512 58dd8e861dfdef7f6f13786512aa021d65e37cf431e77bb71f0bed947870068ab3f4d8932ed5d3afdd60ac09c8b69ecabcd09606e6e6e2dadb83fe7cf87ea70a
SSDEEP 384:uiFiZcI0zsNb8TUNTUlIlhb0lDEa99dFMsOMB3OObjI9G6w7rj:FFQIWwgcNDx329Mv
TLSH
T17CD228F258E78876D9AE5703B7BE2D134EBCC167F5955A40B3989A0CCC960BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 dc957db038c2bec397983c63ed3298b74aedb2a3cfe8296b935961f9046215af
MD5 03acdb9bee46ec3984843ecbc9517781
SHA1 5529638dc5d6592db14f0fa0d25354db6e2560d6
SHA512 03c0db283c05825c0f014e7476152c6a5f1fdb8dcbca93ae2556129e4194cc1fb2096d17ea6ffe294e27d35c41705be4bcc4b90ad4126df87ea7b5c3747e4511
SSDEEP 192:qONC6O7+3hQmiUyCgGttb0b+FdFh2SgGIPU6:qONC61KGt99dFMEiU6
TLSH
T17A02D8356C786CB75AF3AE0AF58737135FA5112BE9A52F84DAE81F0C00E765C2346C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 33af56835868f06e784d39ecc10614960d9785a08e2b9c6c20842d5837954f0c
MD5 5b8fb66ad7fc3a9e551a144fe2d3cb86
SHA1 5c63887ca03eacd3b77098ae34c8566e5cfec673
SHA512 6cf7940498d039e3897dae28446a82300fc08ba62aab9e319367ee6197c47fe8fd30cbf259ba10abe16d381209e264abe655a552a25624fe37484b59e2f477ae
SSDEEP 384:xZcIhsN5hb0l1Ea99dFMsOMC3OObjI9G6w7rj:ZhNNDy329Mv
TLSH
T153927C31AC385C7359B3A512F4873A135EF4817BEB992F84E5EC9F0D05EA9AC1306D1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2a1aec6fc577ee36078657a38b1f34f34003fae49bad1ccfd3fb6d9e913521af
MD5 76d3cdd02ed51bbfa9d21cfbce81c25d
SHA1 5458e9e721c9a02b2c1e8609d788cfb041f7e818
SHA512 b57a6307f6c7ea17eafd8b2a445daed7e687a8f339b866d337341128ef1614041381ef23335a75cd45e302aa2f96830833f3e30818c7c3c12815c5a31eb1f9e9
SSDEEP 192:mONE6O7+38QmiUyzgEttb0b+FdFh2lSOh2lRcNYq9PU6:mONE6qREt99dFMsOM83U6
TLSH
T1F512F93568786C775DF3A546F48736135EA5426BEE9A2F80D6EC1F0C00EF66C234AC1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f6a2bfa650e91dacf98229c360c348f85501e9ce4e9f1bc7c87fe77f3cf086c2
MD5 112c3d138ec9f5fc15ee8e9a9dad5e2f
SHA1 7ca7a04f1b559a7fc7968bef25a2622efdb1babe
SHA512 62d81493d919eaad03de9070b9c4b223066b1c50cd81e4ce4e901b47791615317af69d1728bad07e45dbd52ad1775ff3b36405b1b929d4440cb7c3f105bfb9a5
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter~RFe592178.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe592178.TMP
Size 392B
SHA256 94d9edfaad8dfdf33a87adfe77e12c0ffe85cd7a4c049a1654a22b304400dd54
MD5 7abb8254eb5e2f7ba2e66935ffc10e09
SHA1 226411830ba79ef4b7aa6a759f7a3387cdade7b2
SHA512 ef407c8969c9d6ee27d255d470d1a5822294ed11e76eab7346fd476a818cc57a821e410ea68abd30e1582b0f805d0432da67d4ccb9606535dac062915b484d42
MD5 SHA1 SHA512

Submit Download

ec592492-0899-4624-a2e8-a8a12f7d754a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ec592492-0899-4624-a2e8-a8a12f7d754a.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 caff067fde8c49f2c0ce7e831342533f9473215033a7cfb35bccb13681013955
MD5 36f455a8c92072a0b313d90827d650b6
SHA1 eab15d61817c3b3b8ca92bcf034401cdb258954e
SHA512 a8cb39270da5e075076646660552239bb0388b535b23624c448801b48dd8c52bf77eda5f699bd99a58a60a9886b4e155fdad726bfa1cf05812eb94eb7938fadf
TLSH
T10741E95CBAFA1148B3B77F56ABF7A86D487BBC672E06D45E10010D4F0662B41C962733
MD5 SHA1 SHA512 TLSH

Submit Download