hxxp://standardproducts[.]co[.]uk

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 04:31

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://standardproducts.co.uk
Sample260801-e5cfcadf69

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3192	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300322986602855"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{24E1FBB6-0590-4256-ABD4-7C6AF9D4DD6D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 3684	4400	msedge.exe	86
PID 4400 wrote to memory of 3192	4400	msedge.exe	88
PID 4400 wrote to memory of 2200	4400	msedge.exe	89
PID 4400 wrote to memory of 2112	4400	msedge.exe	90
PID 4400 wrote to memory of 2200	4400	msedge.exe	89
PID 4400 wrote to memory of 2200	4400	msedge.exe	89
PID 4400 wrote to memory of 2112	4400	msedge.exe	90
PID 4400 wrote to memory of 4024	4400	msedge.exe	91
PID 4400 wrote to memory of 4024	4400	msedge.exe	91
PID 4400 wrote to memory of 4024	4400	msedge.exe	91
PID 4400 wrote to memory of 4728	4400	msedge.exe	92
PID 4400 wrote to memory of 4728	4400	msedge.exe	92
PID 4400 wrote to memory of 4728	4400	msedge.exe	92
PID 4400 wrote to memory of 1520	4400	msedge.exe	93
PID 4400 wrote to memory of 1520	4400	msedge.exe	93
PID 4400 wrote to memory of 1520	4400	msedge.exe	93
PID 4400 wrote to memory of 2900	4400	msedge.exe	94
PID 4400 wrote to memory of 2900	4400	msedge.exe	94
PID 4400 wrote to memory of 2900	4400	msedge.exe	94
PID 4400 wrote to memory of 372	4400	msedge.exe	98
PID 4400 wrote to memory of 1536	4400	msedge.exe	99
PID 4400 wrote to memory of 372	4400	msedge.exe	98
PID 4400 wrote to memory of 1536	4400	msedge.exe	99
PID 4400 wrote to memory of 2796	4400	msedge.exe	101
PID 4400 wrote to memory of 2240	4400	msedge.exe	112
PID 4400 wrote to memory of 2240	4400	msedge.exe	112
PID 4400 wrote to memory of 2240	4400	msedge.exe	112
PID 4400 wrote to memory of 1332	4400	msedge.exe	113
PID 4400 wrote to memory of 1332	4400	msedge.exe	113
PID 4400 wrote to memory of 1332	4400	msedge.exe	113
PID 4400 wrote to memory of 460	4400	msedge.exe	114
PID 4400 wrote to memory of 460	4400	msedge.exe	114
PID 4400 wrote to memory of 460	4400	msedge.exe	114
PID 4400 wrote to memory of 4864	4400	msedge.exe	115
PID 4400 wrote to memory of 4864	4400	msedge.exe	115
PID 4400 wrote to memory of 1012	4400	msedge.exe	118
PID 4400 wrote to memory of 4980	4400	msedge.exe	119
PID 4400 wrote to memory of 1840	4400	msedge.exe	120
PID 4400 wrote to memory of 2256	4400	msedge.exe	121
PID 4400 wrote to memory of 2256	4400	msedge.exe	121
PID 4400 wrote to memory of 2256	4400	msedge.exe	121
PID 4400 wrote to memory of 4728	4400	msedge.exe	123
PID 4400 wrote to memory of 4728	4400	msedge.exe	123
PID 4400 wrote to memory of 1576	4400	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://standardproducts.co.uk
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x264,0x7ffef897c188,0x7ffef897c194,0x7ffef897c1a0
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1892,i,8861296827005787137,6955904927941411050,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1756,i,4689311983111223275,544508357529211997,262144 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=2456 /prefetch:2
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,5099604875722788305,9594448274552467241,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,1275999885080655944,13904660273183558871,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,2307742334420962262,16258430234157535761,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:1
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,8470158611688971849,18087229752246086278,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,17288032247185725165,16614605658107266725,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=3376 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,17451159838492977606,8899044118354992508,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,17485969125899549699,4629325952698319635,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,6239185205234657461,10280004570054574743,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5828,i,6239185205234657461,10280004570054574743,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4448,i,16898861251972606411,12834448030217130022,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3700,i,3200812251784514462,3455368946496781605,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3472,i,11059558571537400357,9481599289168583623,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,6817149053190726043,10713673291727272690,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4164,i,9693263872036651373,16415884071612596655,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=768 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4160,i,16381481499364668751,6228889549794455140,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4152,i,2574699004781314057,16211900291575501500,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=2020,i,7821644232059770837,2151042523445989095,2097152 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=2788 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,9241368313155108578,15447843009536020733,524288 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=6360 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6148,i,3096612580205316521,3054171702494643240,262144 --field-trial-handle=2460,i,5546379925586425503,594081657585680703,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1576

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4736

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 222e25d725f16e6ab34736213b94f49af55e226d8f60dc4d0226a5d8a363d667
MD5 23d88cd1e24b3861ca3ae124958c9325
SHA1 df98e31fe0377f3c5dc7657b47ed2ae394358c3f
SHA512 35f3980b241049f754be56de74bfcd027f78a880f38ff89fb23dd50f2b6e79af64df8d6d4ffba7d8b03b2b2c0da71e1db63c9e27d25bdc1730b8a02b12180e7a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7k:fwUQC5VwBIiElEd2K57P7k
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1a7662be6fc2ac809d64124b601c52959f9269300b0f427d5a16374d0e09c14c
MD5 2e0004795bf69af98cd08e13786f75d0
SHA1 71b01ff59c2ad4a28bf7c1c019593a330a70389b
SHA512 bdb28738a539750a855833134f5cb2e19848247918801e7aeaa43f0a1adf38731e0c194a08b2f019b605ba7019eb1b1e8ac08dc1c5941c3bfd05fa7507f09140
TLSH
T1FC813C38C51D64A5E3E127B281D50016B87D81CFF813FE8541A0BB7717E131B82AECA3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 794c234bcbebd003b12d46445c60ebe177da04226f2485312d6cdcdf9c30b23a
MD5 4d0889a4dcdbb5e71d71dea6b76d7143
SHA1 66be457751e44588982514a584b5e315a6485b7c
SHA512 592fd86741b61cb3bc317b48f2afa425f171d34dd564f553322cce4a1674ded0ee2c92f46cf00461768b207c8798f25821083b8b959f962c8116b2298a7c0ca4
TLSH
T187711839C50E88A5E7E1133291E20157B87D86DBF803FE8552A0BBB757E4713829ED87
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 2a6d4829d53cd3dba00b7df17005187305ead1a3e8173b0945e8f62ae5fb8e6f
MD5 a28d5eb8a6c7236ea36ac135a4b7560b
SHA1 d2997a2bad45d590113b89137335c8002db92509
SHA512 e86e636233d69ea97d0dc7fb8eae7acff75851e94c113f00ef2ba0d2f3a8bca91190ceb72763d2b474e1a54c1b6040782d59781776a43d113a8b1766dd56f31d
TLSH
T143812B38C16D50A5E7E123B291D10512B83D85DFF803FE8641A0BB7707E931782ADCA3
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a4e6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a4e6.TMP
Size 3KB
SHA256 200fb5b5e16d1ac530ec8be60e76f30bab3546bdee9e52fe88bd35286ade949a
MD5 fc99fe63a4acf6475c0702583dd855e0
SHA1 0f12a65787e1b557cce6c7894150561134712d4b
SHA512 1d9599bc39a6071346e37b3154128887c80d0d184bbe8b5c43a2d3a8df9983531a2ae148eaa04dd83169bb9a3def44d21c28ca50af19b414fe1d98dd9f497fd6
TLSH
T1D3712939C50E59A5E7D1133291E10157B83D82DBF803FE8552A0BBB717E4713868EC87
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

10777557-5d46-4f0e-be0b-f103af41a0af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10777557-5d46-4f0e-be0b-f103af41a0af.tmp
Size 2KB
SHA256 6125bff115a707eb744ea1229f1d04d0271c86f0a4e8d9a84caddb4d1fad291d
MD5 5c128124d730ca2ca222c7e529bf6030
SHA1 004c432084b33684339a5dca0f9b23bee0aa6cb5
SHA512 0963d53a925f0e15bd5fbc9eab64420163401c1778f41bb9240630591806d4272b777fc457fc4a60b132de01aa41153ac16dd998edcc8afd6321dd9155cb419c
TLSH
T19C5189F387F49A2E8D2152F0EA256E1FCE1909154218386E85E5AF5693E24B1E140A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 621071557ff8664b8cdc5e9d5f18adac39f0108ed0a9b52f4448841886ba2bb6
MD5 a16d6b17a5bb75ccf3baf372ff7f24ca
SHA1 396c87e0fac330508c52c92ed24b4cb0f564dcf1
SHA512 ebdd1880e728a963924dcb00772d29ad28a0cabdb62633a97a4b8ae4c018ad3faeefc714ba3268a620da038e0638cf76bbc2504376e140fd22741348d4f0052d
TLSH
T19D5199F397F49A3E8D2192F0AA256E1FCE190915431C386E85E5AF26D3E24B1F100A4F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c1bea026ba747489209fcd1ebad15b05a3fcacd80947154b6676f81be35abaea
MD5 53f20b8fb19de9158bafbda6ad09990f
SHA1 dfbee7476a7e471d70bd7dafcfbbdd3df5ae33d2
SHA512 37c949011731ea2a8113de9a1e8db974370a4314886829e3824d7c1bda1f8a6a5fcb45a5bda6904848b871ae124b0c9c30685d344e6e99acc07532abe996375f
SSDEEP 192:sxZV/yM/jK1Ml8Mkf/fKs0TGqIdpJHdBO6+WNGYzcCqIIgrJ:sxZV5Mf/fKs0T2JHdZGm9
TLSH
T16C42D751AA34A97BCCDBD209FA457F53D6F50473A2900E48A9FCDA1C04E6AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 310c86a85b7daad900af1eaf85efba51a87e6a927b08262959d618f6da5f646c
MD5 420ddf653e5cea86a89e1149add08b1b
SHA1 1cd47a68a82ded5c8a17f909d02e569dfe5f0ae5
SHA512 4f3991309461b983f300d1591c5ea776a05f758e346297d99237d481fd6d916e231db72812e78d1e3cac98018219e45364f53f1d4ddd884c80d1ff849a0599b7
SSDEEP 192:sxZV/yM/jK1Ml8UQqkf/fKsDrcqIdpWGOHdBO6+WNIwuxYzJRqIIg5MJ:sxZV7q5f/fKsDrkiHdZOx0q
TLSH
T17A52D952AA349977CCDBD219F941BF93D6F5147291900E58AAFCDA1C00E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 d3dde82758e76c52bc9104f62b79df8dfde2d8ef6f3408c645a4d7509702d5bd
MD5 9a79e347e412ef4536ff26ffb828ac91
SHA1 1b780b2d07fcff25f1328299d0c996376ccbf902
SHA512 7ab4932071c95178cf6557856277f1e45d54573df616b450b80827e3a5db53013d6a8b2a0c4f12e63f2caf97269b7936e291fdd0195e491e2bc5e0c279dc5cd7
SSDEEP 192:sxZV/yM/jK1Ml8Mkf/fKsDrcqIdpWGOHdBO6+WNIRJJYzQRqIIg5MJ:sxZV7Mf/fKsDrkiHdZKJpq
TLSH
T14052D952AA349977CCDBD219FA41BF53D6F5147291900E48AAFCDA1C01E7BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 4ba6290b3dc26de82428869f54368ecf529ff370e26e1a24dfa8a12d0976c85e
MD5 75f096d34aec0c4698b32f42098e08e3
SHA1 f0c4cd2b45a24a09e2f92564e84c668f3b15d76e
SHA512 1fa30f0f06670e1dc6fe2022906dfe140d122c47d76013e1308a96802d44e2a4dfa24ce7ce33a797bb22891cccf7cc0bf62061a7b524569bc7f182dddaaff202
SSDEEP 768:uRW7kf0Wvqida8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjRroIlSimY9G:uRW7kf0Wvqidau1jaa5LA3jqMDU
TLSH
T11DD20A3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c1f43439bda4cb60b6b9dc264670a39b137f2e4c5f06dc2e124aa0c40bc32830
MD5 f49b0366acefaf985acdbd65ce128060
SHA1 e74f9bdc6a74a9bfecc9c59585321ccf05e4b464
SHA512 9778ada60f04c275a95c5977fcb1ef2a487e090c1f09201349ef1441110940f0f30276db2429d5681a771a0a6777a580e91fa7cc692849f8a95d7e0a26378a66
SSDEEP 48:KfSVOyIQA2aQL9IZy2KYTWVce7I1KcEI7y1BItKC4Agoloyvz5RRuDBa1IoTuKh9:KIbCKcWVce7KKcE2WBiKC4RgAKH
TLSH
T17291921AB13A1201387E6D58A26B85775F8332A33114A4EF7FB814A60E66E114DFDCDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ba199504-3b13-4ff9-a870-a7cd7c823e95.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ba199504-3b13-4ff9-a870-a7cd7c823e95.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 09c3f5a5863cebcbba5f7a731aa5caea2db8869853da6401ac789dc053a73375
MD5 c5a9b8266b7184dc1c33c1341d8156cc
SHA1 d4ed051318da47f41d37ebf130270d354160782f
SHA512 2803bcdd8960e2b2aae1be6232d639336dd762abb04f8c843cad5d622b9b72a8a841d518d87e2a705e2539571c7442f1d1aed5480579322d8b27110bbd1fd875
SSDEEP 192:sLsNcKQN+T+bBb1qQmiU1MB74aGBPKRV+FdGy5gk+2NdNTqDU8:KsNcKYbQOkzd5L+2xIU8
TLSH
T185323B366C74AC3A4EA2B255F4473A139FB441279BC96F54E6EDAF0C01DB29C231A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 4bc53f8179a485af68237e70770251da648e6afab8e34357b02eaf926008eaed
MD5 c72df2f17e048926691245508f605a3a
SHA1 7e6825e9e515c89e0d558ba4ffbe1c370f6b029a
SHA512 548a329e944ef757ec9617d461196ca19c7a4107eadac2acab015b32d19d8bdded1eb36098dbc5b20abd18f9a20f1e4c50cf4acc1958a1ac8dc7fb8a6e0d1690
SSDEEP 384:6iFiZcIgzsNU8TUNTUlIlzYbQrkzd5L+2gInTKwBODNZOCV0Q:xFQ8lwgO6WrlgInewBKZOg0Q
TLSH
T1F6D23BF248E7983ADAAE5703E77D2D034EBCC163B5846654B7D9AA0CCC561BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4132c5cd4b03ad43bef30425ba89e0919c8c778f6eee1e7cf1341df08c411aef
MD5 059943fd85338b72508be7e71d264170
SHA1 7dee8523600d7d949e5cb90dd29816a220f18645
SHA512 bd60a8bbdb0b9877316f18e641efb4e235436b5259b9b1af79eb973ba1cb622e34ff8655f43212c494187351b22fa140ab089b98e4db5c44e9e2934f19a590aa
SSDEEP 192:MONT64BAQmiUy017W5GBPKRV+FdGy5LaDVvPSU6:MONT6eA3hWcd56NSU6
TLSH
T1690209356C787C7B9EB2AE45F58637175FA8117BE6D05B44EAE86B0C00D764C2303827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0b27309e8678ba0b08225889ce3823bd17f20ef5beeaa3f7e388757d5448fd08
MD5 ac479a1a7660c4773d5789b1a8f59361
SHA1 87a1fc0ce667d79a1fcc9ebe2a607389277c6fe1
SHA512 dade302a9a708474fdf3108447435cc1013558d046ff898b6a10c34960643329b55279e9fe8e8fcf7bd24d93d816a3cfa30e1488020ff45f31c07137ae1b825c
SSDEEP 192:1ONt64BaQmiUy/7k5GBPKRV+FdGy5gk+25WwTqDU6:1ONt6eWekcd5L+2dIU6
TLSH
T198122B355C78AC3B5EA27541F48736135FA4422BEAC5AB54F6EC7F1C01DF6AC230A416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0589d9aac6437632b0ca77f42fab7eb55106394b286841d88873636ccdf45d9b
MD5 2d8857823a79ee5541eaa78eb2d3537c
SHA1 ebfddcfe6e3496c2f15351486f83330e260274b6
SHA512 1e8832f5f7ea09a98338ba441e30fd0ca6ae1ccd5f3e7c4b026d601476683977505c8c9c212b3a779a3a83513147bd53e4f8d53ba4d909f33984028fbf0b05e8
SSDEEP 384:cZcIhsNczYbQOkzd5L+2xInTKwBODNZOCV0Q:KhQzWrlxInewBKZOg0Q
TLSH
T1FC928D315D386C7B4EE2B245F84736174FF89167E6C42B68AAEDFF1C0095658130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27a25a92-3e11-4a1a-918d-11d9b2abf5c1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\27a25a92-3e11-4a1a-918d-11d9b2abf5c1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 60dadb7c9d37101e3600b0745f8cd9a260f42ea5e31429ff254f3db53b63a34a
MD5 b5b5974f226be0455c25b68183ce352e
SHA1 a3fc010b8cd7227b43959502eaed2962cf7be308
SHA512 0c51505fa9e52d2487fa70dfec82f0ef03266d9e52ff4e2e35633fb25e0b952b9b01bb680e699efad393b96d254713279a3eb9eeeba8cb262d4b1bcc1a3413bf
TLSH
T1E241F35DB6E91158B3B76F5AABF6B86D487F7D232F07D09D00010D8E0A22B04C8A2737
MD5 SHA1 SHA512 TLSH

Submit Download