hxxps://www[.]swisstransfer[.]com/dl/019fc470-d6dd-73bd-8988-633c29763c44

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
04/08/2026, 01:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.swisstransfer.com/dl/019fc470-d6dd-73bd-8988-633c29763c44
Sample260804-bdlm6aae29

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1256	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134302789215193013"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1788976790-1541110888-1636651838-1000\{9CF3BF12-5498-4A31-BD4B-C7F4956A1296}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1788976790-1541110888-1636651838-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe
728	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 728 wrote to memory of 872	728	msedge.exe	84
PID 728 wrote to memory of 1256	728	msedge.exe	85
PID 728 wrote to memory of 2136	728	msedge.exe	86
PID 728 wrote to memory of 2136	728	msedge.exe	86
PID 728 wrote to memory of 2136	728	msedge.exe	86
PID 728 wrote to memory of 3032	728	msedge.exe	87
PID 728 wrote to memory of 3032	728	msedge.exe	87
PID 728 wrote to memory of 4880	728	msedge.exe	89
PID 728 wrote to memory of 4880	728	msedge.exe	89
PID 728 wrote to memory of 4880	728	msedge.exe	89
PID 728 wrote to memory of 4132	728	msedge.exe	90
PID 728 wrote to memory of 4132	728	msedge.exe	90
PID 728 wrote to memory of 4132	728	msedge.exe	90
PID 728 wrote to memory of 4708	728	msedge.exe	91
PID 728 wrote to memory of 4708	728	msedge.exe	91
PID 728 wrote to memory of 4708	728	msedge.exe	91
PID 728 wrote to memory of 1428	728	msedge.exe	92
PID 728 wrote to memory of 1428	728	msedge.exe	92
PID 728 wrote to memory of 1428	728	msedge.exe	92
PID 728 wrote to memory of 3956	728	msedge.exe	99
PID 728 wrote to memory of 3956	728	msedge.exe	99
PID 728 wrote to memory of 4768	728	msedge.exe	100
PID 728 wrote to memory of 4768	728	msedge.exe	100
PID 728 wrote to memory of 4684	728	msedge.exe	103
PID 728 wrote to memory of 5492	728	msedge.exe	116
PID 728 wrote to memory of 5492	728	msedge.exe	116
PID 728 wrote to memory of 5492	728	msedge.exe	116
PID 728 wrote to memory of 5652	728	msedge.exe	117
PID 728 wrote to memory of 5660	728	msedge.exe	118
PID 728 wrote to memory of 5652	728	msedge.exe	117
PID 728 wrote to memory of 5652	728	msedge.exe	117
PID 728 wrote to memory of 5660	728	msedge.exe	118
PID 728 wrote to memory of 5716	728	msedge.exe	119
PID 728 wrote to memory of 5888	728	msedge.exe	120
PID 728 wrote to memory of 5888	728	msedge.exe	120
PID 728 wrote to memory of 5888	728	msedge.exe	120
PID 728 wrote to memory of 5908	728	msedge.exe	121
PID 728 wrote to memory of 5908	728	msedge.exe	121
PID 728 wrote to memory of 5908	728	msedge.exe	121
PID 728 wrote to memory of 6056	728	msedge.exe	122
PID 728 wrote to memory of 6056	728	msedge.exe	122
PID 728 wrote to memory of 6056	728	msedge.exe	122
PID 728 wrote to memory of 4024	728	msedge.exe	125
PID 728 wrote to memory of 3664	728	msedge.exe	126
PID 728 wrote to memory of 5116	728	msedge.exe	127
PID 728 wrote to memory of 2912	728	msedge.exe	129
PID 728 wrote to memory of 2912	728	msedge.exe	129
PID 728 wrote to memory of 2912	728	msedge.exe	129

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.swisstransfer.com/dl/019fc470-d6dd-73bd-8988-633c29763c44
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdf3d5c188,0x7ffdf3d5c194,0x7ffdf3d5c1a0
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,3672729914847916090,8732201465789619918,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,12860320626672626752,14327245976109132161,262144 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:2
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2316,i,2613956651522188923,15149521089050794282,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3456,i,14829583712188968206,6576093854560696015,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,14090498111561845728,890622578762577349,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,14456355705738934736,14138733381176082447,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,2143840907522746686,15517694313880349782,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:2
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,3472272530779683969,5608455683939713400,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,13857707543504473711,4744565038002780342,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,1284610708234557441,1115223831350236910,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5760,i,1284610708234557441,1115223831350236910,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=4412,i,11057543237068306596,10072437530155709901,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5788,i,2844740153837607929,17763791787563241236,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5780,i,6583076125422581984,10368224490996315130,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,14769338873602176177,16286173305968443530,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
  2⤵
  PID:5716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6720,i,4823931058965338517,15356451945161933004,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --init-isolate-as-foreground --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4416,i,4905954990808104657,2067918736410527779,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:2
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --renderer-sub-type=pdf-renderer --pdf-renderer --pdf-shared-library --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags="--ms-user-locale= --jitless" --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6924,i,3455925456932965617,5533554138013207307,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7084,i,5514171720940320110,896867956683398304,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7088,i,17961416712096207372,2781861209917442825,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,11262322771084575014,11517126913451249264,524288 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5164,i,17071697562457506310,18377960292652909577,2097152 --field-trial-handle=2324,i,11424538898554735581,3436325710035714347,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:2912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4852

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 8c605a069294252273e8780cd3583a8ae688781cd3bbfb104da743dbc8ec3349
MD5 a8e7775101a6fb7a72b1d795773346ce
SHA1 b9799ea7687f7095b06e80335d2c8a7bf7ff83c1
SHA512 e8db48802db3fbad8d233a135d79e6cfdbd9060a89d8c721205583699814479e9913260c391aba1592a96d4083787169edc78efabcd0d5d7fa9451747cc76d14
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7o:fwUQC5VwBIiElEd2K57P7o
TLSH
T1ADB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6d0f88884e23b1418c456620b79662feebdfd970ca9325ba2981c94b3b0f0b2f
MD5 7060eae8ec426d15de2849b1f7d261b4
SHA1 b252d90b9d7050d0b9b7c03141d9d3b7cae404ac
SHA512 8791005fae20dc1dc5dc5b0086efe814e0b1e36781ef1931cc1fc699fc4cb34d62ab3f9a83f4967824f3bb71aef6adc6ad457ab7a6addcba99f9e9b473eabb4d
TLSH
T118D01222BE08A415E65BA271A502C7141F5954A124938651E224D86CD9F84D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5fd0dfd3d3bf3e7005f86201a11a7b14e5b70a804c20d2fab2dc7e18e83479c7
MD5 59dfe5a6038e1ae4c00480b3fa70dfbf
SHA1 d8b171ed62e85a9877f2b32db7bf807cb4576c47
SHA512 0cff21ef0bd37ce3d4f98e7940c908c3201d89cc50406b17dab09361007866bd0951b42f1ffce2eceef6f25882ea83f6afe53c995d82bb88973ce086556c906e
TLSH
T1BBD09730FD10A5A1D22A0071001006001E1404B220A782D1A024181CC9B8040C2EABAA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4d517b88a0fb88494276c126764235de9ee52961c86cc4d3abaf517b10a649a8
MD5 dde9ea8dd9c7e315ef614ab3476af02c
SHA1 e03e201e89770d15b4040d579c2cce8684959a2c
SHA512 410e016336529d709de957d44e67238e4f6592b9ce6646395a9e45ce592e7810b4cb6b1b6df5d8b26875a6aa235b77d41c0983ccc055556f8b8c02224093fdd1
TLSH
T16DD012227E08A415E65BA271A502C7141F5954A124938651E224D86CC9F94D49696387
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b5

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
Size 118KB
SHA256 d7aea6da82ee07e0a1146ff204e53975bdf886d5a713e5ef5022f1ae1ef8b498
MD5 81872281008261b135460b989e2840ef
SHA1 eb1123cc2ad4c1439b6fc2fdb4d706cc9d2d2d33
SHA512 80b4c8abe57e6d5c218576680dfdc3a5069831ea4ba10997618489b1e35bb0f8cb19faf12d5fd789a3c4d4d04d96daa93b7b8c26207ae3f76f8b7e5acccd6e94
SSDEEP 1536:b5/e5wFsVy4AvUaMV5wBnFb/YD2RzVgiBl0dOiWJ6shP81M0:bBCwSVzAvUaDBFkD2huiBloOi7iq
TLSH
T108C38EE0F5F10D28FC82C677883C2D8E1B8AF37A35669864D5212A07F5C81965BB71BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 65ff08d2bd03131d1e7ad9e3cf39cc8fecab7c59adcf0cf6db93eb0dd695e801
MD5 4a09d5bb52986fb63bbd591dfc6ed905
SHA1 2f2ed9809c1b2faafecf377f72564646abf1a04e
SHA512 8aace8392479b0c460b9de705529172ca63c25ce57e9e16bcb77a9aee7c704ccd791b2e8c632c6e479c16680dd15877c0574b093c8973716e8e0f2ccc6f7f075
SSDEEP 48:pD5S+g1pWAztYyJMWw89YsaCJPdsij7AZMIURsiNIZ7UIvpflaaHrePqbvV+mwYM:1g17JNYsaOPdF8nURFNUrfsMV+X3n
TLSH
T167A1503301B6882EEFB349B1ABC01F89B03566E5F18B3EBE509C74BD991A7D2415425F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596f89.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596f89.TMP
Size 3KB
SHA256 08741bb56e3ae08375dd605b51976eb7bfb511d30c49e3293189f82bf2de171b
MD5 f29b95e3a529cbb5c1c2f45a2a0d4ed1
SHA1 98a4e49d6fb7f11c20eb79636cc7eed1ed2b3f6f
SHA512 44a9dd0fb2243afd406fd72c4bc77f884f766b8a6b20eaeeda4a6da1845c8febd7094254b483ee950d6ecf2be7e5db729b1786f23c280f5cd8eb72f763719aab
TLSH
T12B71C6770172406AEFF38DB267C10B89B0368AE4F59B3E7E506C74B65A183A3811905F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 d4e3b9a712bb4fb68be9691711d8ed1ec87e53c8ea0a6d26ae442157b605c192
MD5 58bd5d85c074a95394ab0b72c6d625a6
SHA1 168804c12c4b023746c5232f4b91540d8613bb29
SHA512 b1362efca9f8d83850d1678041b95b26ffbd05830eb125402ed8b6618dbd9a8818ec89b517d65ec23439fdd68e5d53506d32919d4fd9e0f1687389ccedf965b8
TLSH
T1EE51EFB783E0876DCA0156F0AA143E17CE6E042453AC386AC4E5EF5FA3E38B5E10165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 ff630d631c7e1918421243e9338e50b0091c73cab6ed8845421a1e47ee7805c6
MD5 aca2b34ef1384dad1dc05f0e7cdf5e5e
SHA1 9a36e833863303c4b30f07474abd653bf016b234
SHA512 4fbf884d21eedc62cb5d5e509b27dd49754ae3c93d03f05c09425fff8cba9fbec4808ab3a9be9939025e459bf9f9ba656e6775bc67d1821bcd6eaed0886fad17
SSDEEP 192:sxZSRoyM/jK1Ml8p9Q/f6s7WpV+nPVWIdpdziDHW6+WN5ATvIYXYPFaOwsvirQIQ:sxZSqWQ/f6s7Wv+nNGHbETXzO5LJ
TLSH
T19562E711AA7469BBCCDBD20DF941BF53D6F9142692901E54AAFCDA1C01E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 32ae263ca295698c71050a2e7503e9d3ddc9f93cc77d25445b41ac97fe961f7f
MD5 7669f56f52f5c88722f12b5c77b17e88
SHA1 bbaab269d99d996a18d539cafa95fcae5ac32d06
SHA512 36150052522a98f05e6916e7c3d6f8a96d693c22d08ed28bcec79b8f53e650586f8cfc44daeee20cf1ad9c762eb0268cdbea91f123030cdcfe8aba6749ab7c32
SSDEEP 192:sxZSRoyM/jK1Ml8MkQ/f6swXlNVWIdpwDHW6+WN2/s/YvCcvIVQIgrJ:sxZSqMQ/f6s+lvKHbx/M79
TLSH
T1EB52F812AB74A977CCDBD209F941BF53D6F9047292900E44AAFCDA1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 32ae6469af3033d0757482cdf6ce5ffb89e3650e4752d5cf0974d8f4c9cf6cef
MD5 eeb899c5f49d64a3d6fbb6faaca4db8c
SHA1 926a58cd9c0077d1850abfe1673b02d7310f4b61
SHA512 0e313a4bd4ef1cdefefdcc3529575940ef038dbe7599c6f53453b2b88fef3b0ab97a073706f328be46ec2117fe400019a5649cecf5e60b93ca560255e1930bdd
SSDEEP 192:sxZSRoyM/jK1Ml8M9Q/f6s7XnuVWIdpdoDHW6+WN2vIYXYvh2OwsvIVQIg5DJ:sxZSq1Q/f6sbnuIHbETXdO57j
TLSH
T16252E712AA7469B7CCCBD20DF941BF53D6F9047292900E54AAFCDA1C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 23719d541d4e4f40f11a9e3cdbd186516d19673dfa6361c927300eb34b8e2ab6
MD5 3715ce6f164df8a7dfb46ee992ae71f8
SHA1 c13bf2bdd7c96148a2cf8a2d56fa86cb8757cda6
SHA512 0547781fdbeb102e91816015bbe20cfc9728acbe8983256c78345e4deffe39cdeffb0ae46dd8ed1febb465de473fe5261ed16e3be284c7b1d9768728bf16dfec
SSDEEP 768:2IseJ3xWvhfyn8F1+UoAYDCx9Tuqh0VfUC9xbog/OVYcLly0pp1roTS:2IseJ3xWvhfynu1jaVcL88pOu
TLSH
T192D2FA2B680CCB7E4F844E6DEC266F966EE801CB57984D5487EA880C03C76EB51275DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 580cf8a7bc55681dfd40ae99325cbc12fb4880573d4016cb3e3267ba52c2e028
MD5 dd9eec12fcbe0b7f6e4080a31665fbbc
SHA1 cc3cfe36ea961c0499118648730288793dca9641
SHA512 efa90ee4dffb60b28d581262d04ac1dd06085c2957c3b8b6cc24a216fc07b8377db93cecc7e59c413e1beb90af01dc26fc539d7359af9b1b28b164c019cb3bd1
TLSH
T1C3A0025181AC0DC5E56802B8B17A21C862906C501182621140F501B4E95C5654512704
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5931f3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5931f3.TMP
Size 48B
SHA256 6408f7862669fb145fff22924a28f53b2a2dc603b2f8f16f4eb124173c4164ff
MD5 20bcad1a83c23c5f30ae85c7bd6bde1c
SHA1 f083e6419ac2522ff0617e158444fa88ed32a105
SHA512 86f62c47a4ee863c230a67a7b1b4af50aecd65fdc59d4df178f4b01f59a9d5a3d8864761b80a162de002eb868920ab6479aab91ed68ae04dcff2630eddf6e214
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 9fa370442351a315ce500acf9f39ad14e466a2f455465558c917fbe4d36bc1b6
MD5 b9948b4a797693d39bf1c40c0d4fdb36
SHA1 aacae39b8ca12662c2cff9e819f5e34dc17a2a57
SHA512 33c10870a9684dff617ec2200ce3d138d8f8d2a73fee56b58d712eca160a8d9ae96986fd721d4b6e5a394b4ed007f3c4b34f9fa68f5477108d05ce95ce480d9a
SSDEEP 96:KYH+Kggmq+YKXKAO72K4ET2sKvKC6IwKpyqzeKUAmg:49Hx5P3Pklg
TLSH
T180F15706313B0651387EAE8CB2A296370F8235633018A4AF7FB885654D6EE155DFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 9bc1e618e0329fc4eca373f8c335b9c1521c92bff993af4c278fd96147041e66
MD5 8d51cba8a74497eba405d19c8ffb0dcd
SHA1 6733734e54490ddc055f0c98906bbf6098862fdb
SHA512 8c87a20b6e065a3a36839da68e41d2b854782231225a0291e92c811105b68e7cbd73149f1976071307990d6db923630762bab71ae269c89714f3362d080dfb96
SSDEEP 384:lZcIisN19QAn7VjCMP2+dUxcuD9drvYASB5kYvoaOK+Y4MkHwRR:dinCkuLi5vS05VK+Y4MkHWR
TLSH
T1AFA239B0E8E59CF75095E0C9A582F2132DB45037D5C89A0CE6F9BB3A318F6B8171A426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 54775b1ef8518b423f8bed383e3553e46b086ea1db7eeac7a0cd2fcb71792fae
MD5 4a9cb83675e0fd43eb4aeadf336a0540
SHA1 f31b1fa7528e83da1f68a23978a60f5140edc282
SHA512 d736b9706ade9885ad916339a5b98b558247c18f0a99eff20fd5e3d3ca0f4c7ed0bd25a6c4f2961f00612ad489fb30c2a5e212d68e73ff1945644252786bcaf6
SSDEEP 192:uZ2m+xasuheOwQxMGsN8wQdB1PnIKM7EVK4QmiU1k2wRB4MTcB+FdLIxfUutl880:YZcIhsN8wQAn7VYFMu+dUxcuD9ymwRR
TLSH
T148627D71ACB49C7B99A3F186F08637035FF4C027A6C46F54E6EDAF1D01D96A8130AD1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 bdadad69fbf835d662d7db26ea5e543996b5234ce4bf6d911710e9d4b681a8ec
MD5 da96a01ddf1b1e717d8a3cc0b784d88a
SHA1 84ad12d1660f5caf75a680469e9a93bca64accc5
SHA512 9fb20eee2690351144fc094485cb74e5a9b0545f80b80cb01b495c689c00069c2fa696cae99eb69a0a513485ca08ddf47cc4192405b74609508f28611de43b48
SSDEEP 192:lOND6vMtPQmiUyxSThTcB+FdLIxP847ywEPU/u:lOND6UtR/TldUxXyxPU/u
TLSH
T1DC020935BC786CBBAA63AD4AF08A37171FF4516BA5D01B54EAE82F1D00D764C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 a898c2f7d627ce0ea14d74dfdbca28b7e95940083f30f76a5a707c2fda61f95c
MD5 996c8e75546a1750e641fc796aa52168
SHA1 e78cae7b15e338d8333851dfd4413fe5730b1f4c
SHA512 4357ff8ea20b1f47bf54518cca357cc28e82157dbcd142f9c586199ce2a57852b3b196771d22e31a6de4ab5964ad44ec48f6d88562393c8e6cc70840663470c9
SSDEEP 192:ug2m+xasuheOwQxM1sN89QdB1PnIKM7EVKFQmiU1O2wRP8BMTcB+FdLIxfUutl85:RZcIisN89QAn7VjbMP2+dUxcuD9ymwRR
TLSH
T1DD727D71ACB49C7B99A3F186F08637034FF48067A6C46F54A6FDAF1D01DA6A8130AD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 9KB
SHA256 cf518122155870543b7cd5314b964ed39a1e2aa173e477c1022e09151cd271ca
MD5 1c9341f3e75edb8ce4addad25f795a3b
SHA1 a7fbb3f0d38069069f07fb1de6606fa2748f3a11
SHA512 f2a33853077a008ea5a1da593cc5e54113e4193694dc87d77d10a0957ed990f30c2d15ae74c1ec06e97147ef2ea25ef08119046342ca029e4d3e6e6de1215c0c
SSDEEP 192:fEONV6vMXKPQmiUyTSw8hTcB+FdLIxfUutlc80IyHqdU/u:cONV6UaR13ldUxcuDhymU/u
TLSH
T1CB121B35ACB49C6BAD53A546F08B37175EB0826BEAC46F50FAEC3F1C01DE65C130A916
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 0cc8fb9274c764200685b834fc741cb13320699c3e347d1c28ced8832d9c8161
MD5 787dfa848d454ea3ea9b1b73c86e21a6
SHA1 34bf897eb588e8deb066d03c4e1e53dd545f26de
SHA512 b8b07eefa2070059a068128005398e9d26688962f2edafa22d95b3d32b3395d758cb8c355314f95d054d9b57e4598bcd7fbbc5a919fe4237e52d97000cabd99c
SSDEEP 3:MsEllllkEthXllkl2zEkl1YFal:/M/xT02zn1Ywl
MD5 SHA1 SHA512 SSDEEP

Submit Download

c10ff269-1b36-4a47-b21a-44d6549c5de1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c10ff269-1b36-4a47-b21a-44d6549c5de1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ef616f76db6ca414540e9977a16f80564c90f12ccf69a21825c4bb346791b805
MD5 a01c8b4522720c6dcf9784dd92e15d9b
SHA1 da70bb9b7d277c9276f7dacbeaecb0ad8d4be60e
SHA512 5e516acf4d774f414c51eb2442b7ef7ee27ad4f30b2da347dc173f52bf4f205d22ab1d4ab5c85e9bb2f816291e55a3766412d164d228b1fcf8a864318003a783
TLSH
T132411A5CA6F91108B3B77F5A9BF6A4AD487B7C772E0B959D10110E4E4A22B40C8B2737
MD5 SHA1 SHA512 TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads