6ad3cd143fa8f179cf00e6b1e8e8dd42a2b05c546107cec3222e4056f1d3cd98

Analysis

max time kernel
900s
max time network
736s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
01/08/2026, 02:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 33KB
Sample260801-c3xmdscd45
SHA256 6ad3cd143fa8f179cf00e6b1e8e8dd42a2b05c546107cec3222e4056f1d3cd98
MD5 738804676805022c445ad2b06cb8fc43
SHA1 21869b001eb09fd91e9f4694ddb09b9207803585
SHA512 b261921eeba6db9457e181ca1eb52efe8caa8bf0be04073cb9e8b2fc537882751ca42f94d7caadcc752a76e5f9a5f5abcfd0c1ea6a89e1d137e0b264d56d78a2
SSDEEP 384:vf5PRZPFUhPwfKq3ejIId09fg+nNOOrHwm07JTcc5mrmg/PQ:n3yIId09fgEN+dJQrmg/Y
TLSH
T10DF2827671F16033504780E6BB66636B2EA2C543CB5E4110B2BC0BA85FE7FC6D92369D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4232	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300254255990327"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-552508041-2681165170-3229858294-1000\{32AD1771-B6A8-4F48-B759-44F1E401B7BA}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-552508041-2681165170-3229858294-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5952	msedge.exe
5952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe
3368	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3368 wrote to memory of 4760	3368	msedge.exe	89
PID 3368 wrote to memory of 2476	3368	msedge.exe	91
PID 3368 wrote to memory of 4232	3368	msedge.exe	90
PID 3368 wrote to memory of 2476	3368	msedge.exe	91
PID 3368 wrote to memory of 2476	3368	msedge.exe	91
PID 3368 wrote to memory of 5068	3368	msedge.exe	93
PID 3368 wrote to memory of 5068	3368	msedge.exe	93
PID 3368 wrote to memory of 4780	3368	msedge.exe	94
PID 3368 wrote to memory of 4780	3368	msedge.exe	94
PID 3368 wrote to memory of 4780	3368	msedge.exe	94
PID 3368 wrote to memory of 3524	3368	msedge.exe	95
PID 3368 wrote to memory of 3524	3368	msedge.exe	95
PID 3368 wrote to memory of 3524	3368	msedge.exe	95
PID 3368 wrote to memory of 5596	3368	msedge.exe	96
PID 3368 wrote to memory of 1120	3368	msedge.exe	97
PID 3368 wrote to memory of 5596	3368	msedge.exe	96
PID 3368 wrote to memory of 5596	3368	msedge.exe	96
PID 3368 wrote to memory of 1120	3368	msedge.exe	97
PID 3368 wrote to memory of 1120	3368	msedge.exe	97
PID 3368 wrote to memory of 1300	3368	msedge.exe	99
PID 3368 wrote to memory of 2068	3368	msedge.exe	100
PID 3368 wrote to memory of 1300	3368	msedge.exe	99
PID 3368 wrote to memory of 2068	3368	msedge.exe	100
PID 3368 wrote to memory of 2440	3368	msedge.exe	102
PID 3368 wrote to memory of 5540	3368	msedge.exe	106
PID 3368 wrote to memory of 5060	3368	msedge.exe	107
PID 3368 wrote to memory of 2008	3368	msedge.exe	108
PID 3368 wrote to memory of 5804	3368	msedge.exe	109
PID 3368 wrote to memory of 5804	3368	msedge.exe	109
PID 3368 wrote to memory of 5952	3368	msedge.exe	111
PID 3368 wrote to memory of 4196	3368	msedge.exe	112
PID 3368 wrote to memory of 4196	3368	msedge.exe	112
PID 3368 wrote to memory of 5812	3368	msedge.exe	113
PID 3368 wrote to memory of 5812	3368	msedge.exe	113
PID 3368 wrote to memory of 4200	3368	msedge.exe	114
PID 3368 wrote to memory of 4200	3368	msedge.exe	114
PID 3368 wrote to memory of 4956	3368	msedge.exe	115
PID 3368 wrote to memory of 4956	3368	msedge.exe	115
PID 3368 wrote to memory of 988	3368	msedge.exe	122
PID 3368 wrote to memory of 988	3368	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x238,0x2c8,0x7ff8c845c188,0x7ff8c845c194,0x7ff8c845c1a0
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,16358420914582494050,12641370050814997948,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,8730617324227772272,14669909343108551456,262144 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2148,i,11464893346037594914,16924245370687419916,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=3096 /prefetch:13
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,14606283624106137522,4512134975243436950,2097152 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,4665100939395243389,246695299091564848,2097152 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4280,i,16388669692985522846,6668725276750698257,2097152 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4312,i,2029535952082564437,5125907457235366019,2097152 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=4600 /prefetch:9
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3760,i,15798974956857664965,13167424259758594395,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:14
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,13505531172523317080,5054989871472442965,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5332 /prefetch:14
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,12571548709509922919,13189919948150904410,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,12571548709509922919,13189919948150904410,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:14
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,11994233032178486406,4072716739281481165,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:14
  2⤵
  PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,7866578495849941070,622511608897625884,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5064 /prefetch:14
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5140,i,13240647414961009686,17477821661561637928,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=3792 /prefetch:14
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,15097835146273686923,1705774499616828274,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:14
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6012,i,5611487511448214152,4039674543849348224,262144 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=812 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5692,i,6764076521786433497,14577048446790037741,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:14
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,10691185731296154627,9316329449954966025,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,4954926517947478353,16068570489116447999,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:14
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,9176310823488217176,14351082188804410480,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:14
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,9042338711826769786,4071140235344291624,524288 --field-trial-handle=2608,i,18183396507123409229,5737114357328791392,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:988

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4788

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4544

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5620

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
MD5 5e53a2cd139f0cce4f8ceab3e015f7da
SHA1 1bd884dbaaa352a724c53bfb8f4bfad2623c93f5
SHA512 27cc4cb62f9aa4af6b521efd824b001f3b689bae2ffe57263da18e2bb22d0b13ba656141d7e6ea1d1c202d5f461a44243a00d604f78bd5b04fe6b8512e260ac1
TLSH
T178D02B1463108D04D441F13214D13311B1110833A80C96440050E1284CB634206738DD
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
MD5 46a6445fd2c83830bb8c6e03f85bafc0
SHA1 46b07e35efbd47692fdc81ef0e82e2964da2831b
SHA512 800f82b05756fd6fab3fe29924147f0b86afeec21da661e646b431c6ca03903eb45bb09803f5cdaf3d2d1bb16f95d0f2e53a1f9ddde57505b0f3e1580c384ed1
TLSH
T188D02B1063208C04D441F13214D23311B1010833540C96440150E1384CB634206728CD
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 709fc34cb88e5946a29fb3346abc91ea39c8653023a2c4febd4c9b3542979e57
MD5 965c3ba5f2ace9068637ac48ecf1ca77
SHA1 69c6e4c769834b85c70e42bd2419d561ec636705
SHA512 eeef35de49f593869e4a589511f4e49316f3804f2b728a9ebd76eed1f3007a7d2d4fa8be05791e8c72cfef89046aab954b9473080c68f3d3e2fb8abaeb4d0598
TLSH
T14FE0208444C4C35D7F02E98BA36D934C81D1772F9BCCF90D17318CC87142840F2D6961
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c4ea1036d0930c3a2a91d8ea211440d7b9d179ef82ae3bf20020a906bc2cba29
MD5 84b828732a433a38ee3af1ee7e453780
SHA1 19bbb016ce7441d4c1f01e6d3841f843772f18b6
SHA512 edeb0ff1153bd5204bb3b4b99b54330db80f9a8913c1043ea636002dcdebf35989105064a9bf17802266079375e11eb14d2b40d0cf193634361a676b335bb145
TLSH
T11BE026DC14C9C2AEA612ECC7B26C570CC2C5372BABC8E91E2B0484897141044A28EAA0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 aa3056e885aeb5c363f9c55d012d7ee581d0ef325e41708fec325186010209d2
MD5 c066b8464368c21a3c4fc889d876c79f
SHA1 b87ca877f7352119c6eb4609c4ff866deda501a8
SHA512 a578e86b5fcc3237f25b098f918a088d84afcdb920085c0096ad2d8f86b635a1364a824d0ccbcd90906d5c5e982c3d1ca1b1cb35561d8161ca06f102f1b2d4de
TLSH
T1DE513FCE5325ADE9DB6295B1D0E5501936F6B5AB02839FC048B33EF05E22F4C00EE463
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe594ffb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594ffb.TMP
Size 2KB
SHA256 0ae666eef071935349ee1e5f9df0502eaf091477cc8f439619f36b85bd00b7ec
MD5 ccea8b9c0a6f6edf5920844229bf86bc
SHA1 a729bc1d0e441fef532cfaf311bca5ad7068b171
SHA512 202ec3071e56bc66f876850f05cf0adeb9a83868d5f89cea7255591e06746e3fd0062968df828c3b5c5fb63a8cc1df83049b989160fb6822df34b2af2deb009c
TLSH
T193513FCE5325ADE8DB6295B1D0E4511936F6B5AB02839FC048B33EF45E22F0C00EE463
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 98550877cb15c8e9fde95e11d6cd7f03c3dbc9342638ff16e6c777167aa7c2a6
MD5 d430c9af645d5bd87438250f2a9606a2
SHA1 b29cb2f190916ea1c48ea85628de3fb410155a32
SHA512 bb1f9974df0daa09265673ea389d4e9f176bb219685bce3fb38b32259ec6d7b7dd563c7e28423588f746e3423c56d9dbc9dc9ae96aed70246d40616960edcaeb
TLSH
T1F951E1F7C3E4867E891156F0AB146E2BCE2D0915432C3C5689E4AF1BA3E2471E14169F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 c678bffbc4dcce7dd63d1c370b1dc5a07a78294d43b4deb2c51845ef61e73b59
MD5 700bfe234f1f0a17435c6c3398dbb470
SHA1 68685d4b1659c6fae59e21984c8b79f10d0152c2
SHA512 8c4063c4817c37d338e94536303d938b67711dbbfe409ea8e4720f22d6ba7e38415443a8166023243345715cdd224b48b9ee69f8de71e90241febd916d5c6080
TLSH
T17F51BEF7C3E8867D891256F0AB147E2BCE2D0919432C3C5A89E4AF1FA3E2471E14159F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 254eeed81c076535f6089bc338cc2d6baa02413f43f3fb978eecb621937f6ea7
MD5 67faabea8740cc435d10fef74a937959
SHA1 6e1925c69bc437342212c87fc5af410664218f96
SHA512 35aabe8b30c222d3d95552d076abcbfde5b91524e0db6fce0b8652e8e7108dd5818c9a8da79a741b49501684dada94fb73ab0d999840244edb7c9f2b4fea5567
SSDEEP 192:sxRuRPb1/fqsrh7GaDde5lSjzoD8p46/g6+WNIYCyuOQG7IgDpJ:sxRu51/fqsl7Gac5lAr/5IQH3
TLSH
T1C232A7166A28A93B8CC7E20DBB55BF53D3F9503265D41E58ABFC961C04EA7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 083392163d1106a0bea3f9df3ad7f0a11e3153f2e870f0e3237bafd165dc6576
MD5 28b8ef7c450690d0d32b7ba0b50a3f0c
SHA1 a6e973e4cce2a9d22ad981e2b40c60250d4f678d
SHA512 ee406a7c3a1ef09a9baa61ddef25e427a969fa0e13a912269b645880b678c341d02afec44d6041b316d071c047a169f45d07c58500f0d7301e518d1e0d87d512
SSDEEP 192:sxRJRPb1/fqskh7GaDde5lSjzoD8p46/g6+WNIYCyuOQG7IgIJ:sxRJ51/fqsm7Gac5lAr/5IQHs
TLSH
T1EF32A6166A28A93B8CC7E20DBB55BF53D2F95033A5D41E58FBFC961C04EA6DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4eda6a876891187ba08d2c39e73a12ff89a0cc07f3811478843a16a27b8a23e4
MD5 03099136aeeb015de3fe094a23ec21c6
SHA1 90bcaf23c1e463e2b16275c6ed8198d3c7d6ee95
SHA512 946dfe2d89b9ff84d1a000228b9ce3f11b2bd055fea4b661d5fdd8b040c161ca2c350e736c06d81f54c46737d318876d23329ff4f956bce6c173ecea34ff4641
SSDEEP 192:sxRuRPb1/fqsrh7GEDde5lSjzoD8p46/g6+WNIYCSuOQG7IgDPJ:sxRu51/fqsl7GEc5lAr/5I0H1
TLSH
T13742B7166A28AD3B8CC7E24DBB55BF53D3F9503365901E58ABFC961C04EA7DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 804c4c08f5c0cb15e4d612bab0d51e9813073885e11399c7a9a20a5eb2f5907e
MD5 0b9dd8255925c9c7c0799ef4939c4e2e
SHA1 feb6b434c208c4e99df55e20ea6f9f662d62f2bf
SHA512 2715099dc9939d584d5921c260ad99097c43d0b56a730ab775cfa2c1cffb098dd532b0ad1c8073b24b90348e9ae419f623da243f7fcd12101f17693f18afe8de
SSDEEP 384:jjm+vhKfCtgQCFf4+KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVmC9qyRvcroZSL:jC+vhQWgQ+f4+8F1+UoAYDCx9Tuqh0VV
TLSH
T158B2EA2B600DCB7F4F800AADAC196FD76DA802CB97589D5047FED94C02C77EA92194DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b801df1-e72e-4886-978d-e374fab73bdd\index-dir\the-real-index
Size 144B
SHA256 af4e65fcab18791bc81792e5bf115e592ad84c7ab37fd12edff954aad266c693
MD5 c78f279a3378f4854a6c2f377138ffcb
SHA1 09fbeaae5e7d1ac26f8f6e1f8fe841d3aab8d62c
SHA512 de13499f4fa6685605fb522a29ea53f687f7d38c3cf49c73e458d15a14ee1a599bdc0ae4a473d24118756d3d6db96d9d2fbf0fdbb733d045fcc1b0a92beba1fa
TLSH
T180C01201CC5B4565D80729312177616827330EFD496B7F3B20DF586BA472959D0CBB05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d91e2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3b801df1-e72e-4886-978d-e374fab73bdd\index-dir\the-real-index~RFe5d91e2.TMP
Size 144B
SHA256 4aebf297c01391ba35046dab93955f726a3041fea44d0946e1c4f24a070cb029
MD5 6495b1f9c217efb698b72adb67742bd5
SHA1 3cb7aaf2e0fd56604d5bf6155fcefae7d1429db2
SHA512 806a0ab96bf2235f440809c817ebc88f2de32b4813d20e8ff9f555550d6d0f48e73a23dd5ea509ccbd1261636c5e3d800e658c5f8b0dbfc53907282663ffad5b
TLSH
T13FC01213C55288B0C40B69B010438218227F1C240426FF3F60DE087F58B14C8D0CBA04
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 800384c8d455e6c1a5de81c27f41bcd2010f78a5121b166d0991af7d25c5cb29
MD5 7d738b362527b4f425e7d341a92214e0
SHA1 6c39bfe67a402b9ee2c8549faa39aa8cb824581e
SHA512 22d3d98db2c8508967bda066d776d691e88d70ce945494ba730ca1a3cdc1f1416dff1453e261d025fdef1ca0af164cad35d0c608756b9300afbcae7a7e0609fe
TLSH
T15CE068763DE21854AA6FA7D224B044910001BC68C512FC4E0425768720A23AC2806C13
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

1f298f20-e94e-414e-b2e4-75fddd9b0479.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1f298f20-e94e-414e-b2e4-75fddd9b0479.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 ef0bd3833536a414a24a335b6695b36f509fda2eb0b8957d6e1dbe275ffe3837
MD5 2707dece6ae61ae3c545889b723d7c5d
SHA1 833495e1d6f3267886720c5bed912a66d61937df
SHA512 a661403607fb96b7e60b081c055cd25e6e81844e4b7bd7eab4e308fa4ad0bfe204ac22a531b0e7a88ae5b50d04a8a9d05e9783a52e18aabd2381edbc526ccb71
SSDEEP 768:Grv+4UNbdR3z+whhip8+p3bd66j+4BRv86aLIW68:Gbsbr36i88+p3Z6n4yo8
TLSH
T18603BD72F86CA9338CF6C684B1877A037FF8515396C01EE4D9DD6B4D019A1AE270B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 313b0747ab0d37c0ca53bd396a9f6b47e79fd488b03638a06216b913759a1127
MD5 77a1f75876322813f76254bdec6221de
SHA1 2e7d65e248195a3270472609e8f167ab3e56ec87
SHA512 368f3258bf162d949fd2a6ce9fc3fd0b7fad5207fe86ee00ea7fe19854bf7b541378e1d710c4a052f29888cbd8bda9f231623dbf43b3d3f7e0f8e43ebdebb421
SSDEEP 768:yO36+Thh0p8+p3bd66j+4BRv86aLIW62ewBKZOu0M:yO3HHC8+p3Z6n4yo2evZVT
TLSH
T198F2BF72EC68AD738CE5D68476873603AFF45163E6C01DA899DDBF1D009626E170BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 997b709bdbdd13af96f39559b7c3cc7e1c23ef947b2c494333d8c13e8c212597
MD5 53f773405a81b3b399cf2ac3308071a9
SHA1 c155470cd09df9be120a735296071244df8442fe
SHA512 7393b287d570980e068468b962b2af379f52bd8ac24f84105b2fcd89d54c2aaf02a043e8df5fa0103ecff5a160178d6f580923d4bdcf2c2aeb43130eb19e7803
SSDEEP 768:CFQk3Dwg++ThJp8+p3bd66j+4BRv86aLIW62ewBKZOu0M:Zk3VB8+p3Z6n4yo2evZVT
TLSH
T1C703AE73DC98D9778CE5DB84B64A3603AFF451A3D6C029A4DACDAE0C109729D130BC36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 e6caa3992c2fd0e22a8a7b58af5099b27280d5d21fdfb8c2f21e2bcf9add160a
MD5 23ccd3a952a83891757b8633d90ef8d2
SHA1 cfa1b0b6133f2009e7e9ecc9daad3a7a9293dcdd
SHA512 a92272711b320fdb893ff51f960b3315f204c593d0368b4f92889eb9cb587661fbf72cbd0acdd8b1183b52283eeb8dad2636109910b97ac4459a8524d39998f7
SSDEEP 768:Irv+4UNbdD3XcuNp8+p3bd66j+4BRv86aLIiP2bwCl1:Ibsbp3LL8+p3Z6n4yx0ww
TLSH
T16F03CF73F9A899739CE6C64472467A433FF851A3A6C10AC4D5DD2B4E415B29E230BC37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f37a1647-3f1a-4ba3-9aa7-313c938bbc14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f37a1647-3f1a-4ba3-9aa7-313c938bbc14.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download