0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7

Analysis

max time kernel
898s
max time network
823s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 07:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
resources/public/index.html
Size 383B
Sample260804-jlavmavaka
SHA256 0e3df7e8abedbf3619ed39c5ee87a9299b7f03ab61a9ec9c525912ab6800f7c7
MD5 e582b9106fb430459c697d4c5a519c25
SHA1 418242c0ee36e592982e3569c6bbb78f7274546a
SHA512 dcc2c76bda2f6567f90161911ab49600cd7896ee5607a4bfb842439189745156941c20d32b09d64b2554f1184b413f0b9f7399ec10013452cd45b791a39c96a3
TLSH
T112E0DF43C0E18809D32182700CC1F15D4BA2F6DBA7CA6D49B98A20898FC0B90CED72E9
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4264	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303045243176777"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{2EDE5499-8E7F-470A-8F32-54D16035E800}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1816	msedge.exe
1816	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe
5804	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 5804 wrote to memory of 4152	5804	msedge.exe	88
PID 5804 wrote to memory of 5764	5804	msedge.exe	89
PID 5804 wrote to memory of 4264	5804	msedge.exe	90
PID 5804 wrote to memory of 5764	5804	msedge.exe	89
PID 5804 wrote to memory of 5764	5804	msedge.exe	89
PID 5804 wrote to memory of 2968	5804	msedge.exe	92
PID 5804 wrote to memory of 2968	5804	msedge.exe	92
PID 5804 wrote to memory of 4184	5804	msedge.exe	93
PID 5804 wrote to memory of 4184	5804	msedge.exe	93
PID 5804 wrote to memory of 4184	5804	msedge.exe	93
PID 5804 wrote to memory of 3172	5804	msedge.exe	94
PID 5804 wrote to memory of 3172	5804	msedge.exe	94
PID 5804 wrote to memory of 3172	5804	msedge.exe	94
PID 5804 wrote to memory of 4436	5804	msedge.exe	95
PID 5804 wrote to memory of 3640	5804	msedge.exe	96
PID 5804 wrote to memory of 4436	5804	msedge.exe	95
PID 5804 wrote to memory of 4436	5804	msedge.exe	95
PID 5804 wrote to memory of 3640	5804	msedge.exe	96
PID 5804 wrote to memory of 3640	5804	msedge.exe	96
PID 5804 wrote to memory of 5656	5804	msedge.exe	98
PID 5804 wrote to memory of 5900	5804	msedge.exe	99
PID 5804 wrote to memory of 5656	5804	msedge.exe	98
PID 5804 wrote to memory of 5900	5804	msedge.exe	99
PID 5804 wrote to memory of 4648	5804	msedge.exe	101
PID 5804 wrote to memory of 836	5804	msedge.exe	105
PID 5804 wrote to memory of 4068	5804	msedge.exe	106
PID 5804 wrote to memory of 1308	5804	msedge.exe	107
PID 5804 wrote to memory of 4480	5804	msedge.exe	108
PID 5804 wrote to memory of 4480	5804	msedge.exe	108
PID 5804 wrote to memory of 3724	5804	msedge.exe	110
PID 5804 wrote to memory of 3724	5804	msedge.exe	110
PID 5804 wrote to memory of 1816	5804	msedge.exe	111
PID 5804 wrote to memory of 3148	5804	msedge.exe	112
PID 5804 wrote to memory of 3148	5804	msedge.exe	112
PID 5804 wrote to memory of 2856	5804	msedge.exe	113
PID 5804 wrote to memory of 2856	5804	msedge.exe	113
PID 5804 wrote to memory of 4564	5804	msedge.exe	114
PID 5804 wrote to memory of 4564	5804	msedge.exe	114
PID 5804 wrote to memory of 5856	5804	msedge.exe	122
PID 5804 wrote to memory of 5856	5804	msedge.exe	122
PID 5804 wrote to memory of 1360	5804	msedge.exe	126
PID 5804 wrote to memory of 1360	5804	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\resources\public\index.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb1129c188,0x7ffb1129c194,0x7ffb1129c1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,13403019869377831440,8703476171778744846,262144 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1828,i,1520224590547462565,11752279853330591672,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,14266504670657449567,10236062762000983686,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:13
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3328,i,7526831281389044755,6949089338187373295,2097152 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3380,i,17986619872691128926,14805934731376639156,2097152 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,17346894854544956811,16326142010948722389,2097152 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4428 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,720836716318593378,4909872700033201688,2097152 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:9
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,180365207438501573,14772254658462818614,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,4842088879004005293,7568151870846153149,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,7602518594953971613,2426487532192833035,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,7602518594953971613,2426487532192833035,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4672,i,12551263029771724655,10401065099957146501,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4676,i,3170344789017866535,1428165875672283378,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:14
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4660,i,7858847013607468459,18186947975441435277,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:14
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,13773929050651467128,6844719456179080303,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4636 /prefetch:14
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,9362819072963828761,925999354046356480,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:14
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5392,i,13282695703187474663,7364731593279629505,262144 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=4036 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,8868126322756286198,5487834672098420529,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=5732 /prefetch:14
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,17240082252897145828,15599982972887127141,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=836 /prefetch:14
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2420,i,15152081286944980343,2049773203914725629,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:14
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=836,i,11053226725474443806,12598480623067648717,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,2075608343488898529,429516045999380789,524288 --field-trial-handle=2208,i,11008540392178914694,7178793679104214416,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:14
  2⤵
  PID:1360

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3948

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5876

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1756

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6004

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b0ba3bdfc9b5572a082b7c3981b5b781e966d28d705732403258d71543312fc0
MD5 3c7a015b84261abbc92ea2b898ef15e2
SHA1 ffd132485fc999a156d13ae117938d730ca1d9aa
SHA512 978f6a04a2f2a882e2c0da1632be087078f0f3fc2db75c6f66b9dc6932ad4c106f5dda3437280daa6925eb6e9b86ddac20639265818c637691674ef2e059d6c8
TLSH
T1DAE020C407C7C26DA604648751BC834DC3D07A0EDEC4BA952710CD4972C147467A39E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 40f03f781474b21c16d7ebc63d95f4c93432c84935d9efdb7312b5ed8802a407
MD5 863490b72f352078bfefa757c28f11e1
SHA1 e10a95a0b19810cbefe57358202a3a65e636660f
SHA512 6c5fe835a82eb9d03c84a5a08bdb5b1cf23cb0feb9c091043caa095e4926425d47380d8b88b27189ab1db9b8edcf868530baf2f2ede02d7e45f9329a6c2ed987
TLSH
T17DE026C41BCAC22EBA54648B517C478C82D0360FEEC8A9ABAB24858C7602444F7C2EA4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 84a167c6161f959efc9b07bdc906177c93503afa88e07fd1a8be00cff52a23c4
MD5 0b4a3045292b51c3a2c458b1d792b75d
SHA1 9d46f3bce9b97fa5d4e7feac233faaea9419194b
SHA512 ed61375b7ebae4d69f48adb1eeaf15bd07618c6210524310f4a35b756621ac5016184f6b7d2d830491df6ab43fe60c7556704c36b12a460ab52ccb8bc5438d01
TLSH
T1E3E07DC806C8C26EB609748B516D571C82C03A0EDEC8E9CA3708C48D7B41144F3D2EA8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d5ecb83a9fec9ef6f05c30905814153a971fb5ddf5823d2a49784dbe95122b07
MD5 7b83a950e0be5fb8da2d217f522af15d
SHA1 176a749de77bbedc20e104d497132d830fb9f235
SHA512 a922d0aa4ab3f249465bcbdf1746ac9b99fca67aee33c79843c7dbb47a40d048a0b19cc9ff4e85ea0d25ab964512f735e2d8c3d98ff01f6b2f9a81a7a940614b
TLSH
T126E026C806CDC2AEB601A84752BC770C82C0360FAFC8A99E2704898C7242548B3C2EB8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 e48fff88009b1f89d8b9cafdd133166f844bae15821db85843d57ed618ba4404
MD5 f6ab6b804f61b9d6b804d293c0242611
SHA1 cad85db5659206d1c533a2e636aa8969334c098a
SHA512 96a59243ef75b427efe67bf209b4d72b686de73be808adce6edf01279f4800b278b8576f4a3e55a576f6cb30fbe4e4d68c74c5b62c2c0f195c4780408dd12206
TLSH
T17A613F6513210591EB286FBBB1E294B433FA849B792B7E215141AF7A4CC7FF161E0363
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1464.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a1464.TMP
Size 3KB
SHA256 91a1fcada8b0273e579ba155fcf4233236726a93d91d32e9b225b9efe3b05167
MD5 a310e4f2703c70f85b7644af975d678d
SHA1 f0ea5cac907871ea47014cf76fb80ab72b58511a
SHA512 48ee2e90a6a088f4211eed97d9906aa5491bff0e2b22b47a3604fc94d8dfaba3327cab004b705279c7fc09a4198abb6cc2b6d913f71e4f64044eae75c206770d
TLSH
T155613165131105D1EB286FBBB1A294B833FA849B792B7E2150419F764CC7FF161D0363
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a766e7d5ea840b3fe81b62603c3d80e021d693e99fc4a430e5af250128e09f49
MD5 4f5923bdcabdbc36fb129f27c1cc6862
SHA1 542c22b66a074f2674f95aef655cb22286bb4368
SHA512 817bd8f592b98a2b9da360f14d264079131c5b40d28c8428ec004a6f56238db86f1bd81e539099b958242bd9028a15284a1c91c74cb7f9338959d5f591418862
TLSH
T18E41BEF7C7E4966E890196F0AA147E1BCE2D0915832C3C6AC5D4AE2B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5c09294facd57a6e9a3dc38b06cf2f71a0bda6c4aa1e4e5fb26174f10c4c1113
MD5 be538c8e33f4062fa9f628236127c62d
SHA1 3d1153901c6afccd0f0a6b12e36907e9a024eede
SHA512 b2c069a64a633c79ddd6c24e9b950378f4d167548807786bcc72853034a0bee6221db89a75ac5343d67e4b12f95e0e822f18cd447ebd5293eac097a2644985cd
TLSH
T1DC419EF7C7E4957D890196F0AA146E1BCE1D0915832C3C5AC5D4AE2B93E3471E14165F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ec8748a501c9eca65049471c6c69546b49cab395864ab2bf26ebe9480e73c65d
MD5 37ccd1ec366ac440ab5bc5973e1482dd
SHA1 6cb9fa004d21f2acd8086d44a29abd91f19af8e5
SHA512 1976ff21f4c7976f65ba50d7c3ff9bbb9a9133e62a1efc0933b6e36b9c9df3b2f6efd26fd69f40c3adbab2e4484d16f96ce788b4607fb0c5c1c48b536c77f348
SSDEEP 192:sxRortRZ0BbpV/fDksHTLprQ5FAzoA8p4ob/g6+WNIYn83hOGqAxIgDDJ:sxRortnkpV/fDksHPM55b/5ITRsA9x
TLSH
T14532B7556A38A93B8CCBD21DBB55BF53D2F9603261D42E58B6FC9A1C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b0356beb876eb10f814faf6b58a60c46b994b77bc515e2f6c096b22200cdb893
MD5 7e2674744153f06ae248d0ecc2ae043f
SHA1 f310fbe7f10fe54dc93079da0079a89d8df49a2e
SHA512 97b69ab330eb3073cc6f2cbd8d3967b1414105171a9bfc8e75d2d52b6a13c2e7af5e70dedee9ea51ed7d063d55d05a591d59e94ec0e19ecef9cc393666bd0292
SSDEEP 192:sxRortRZ0BbpV/fDksHTAcprQ5FAzoA8p4ob/g6+WNIYn8HhOGqAxIgDFJ:sxRortnkpV/fDksHMcM55b/5ITBsA9b
TLSH
T1C032C7556A38693B9CCBE21DBB55BF53D2F9603260D42E58B6FC9A1C04E76CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 13f9f2e74760c4d609fef32294fd36af32580e73f48eb843524fa7fc36d99270
MD5 edfa75623374b46f17b9c3392b9a00ae
SHA1 b5e64fa1076ebf102e37714d98aac1780aa1865c
SHA512 3c30620020fb0c6ab26a62954492a4ae0b4be67580308fe6da3af3755beff9e7bef9f2390760502288e2ce5db48d5a0fc5d88d09541aeaffcb67543aa427e728
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP2rohMY:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0Vw
TLSH
T1BEB2DC3B604DCB7E5F800AADEC19AFDB6D9802C79A948D4447FE990C03C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 360B
SHA256 95f10a793a36bad9f7d15dd9c2b27d3f248f41695f00c9034183d0bc1cff10c9
MD5 3591dff1b719cd97242c0769c215acc6
SHA1 ea39fe76b4623a6d22a3b287ea3b7f329bce6f62
SHA512 31117e786861d319f56853e571671835ae50116f71f51d8961bd18a808772bf17bbfb1e6054baea9063e0d65aa71dc95ab064f49a7ddfd2892bb9648f2842035
TLSH
T184E02B8ACC938653C92638770AB6652D333B0BFE2506AE3650BE541E9D6667D4141709
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e56b9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5e56b9.TMP
Size 360B
SHA256 e6460091e683db1e2b6c36d4fb508673ea81766ba688663ed74922051c59177f
MD5 b6ff8c90f1b6da3b9123f8583f71a52e
SHA1 a92864951dc2b4f612a15e356b23039f30af9776
SHA512 f5500a743bc481836fa01e9f64cfc28e599ab02e3866c9c615f64e2010cf8afc96a8ebd8d17a6e6505138a0155584a217d20d35a686710779965ba8ff5e73c42
TLSH
T141E095CF41D15E52CD2769361517912E333F0C352515D61750DF985F5D327BC854560B
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 9e0c540edf61fc07e9b6849887f3d512e25e32b61adcacc21a912d3b9b3e452b
MD5 f77d28ab03a37e3562e8d8ba93c1ccc0
SHA1 527cd0018868df575f8badb12998e8dfde96fdb7
SHA512 2c872d8d835bce6637cf5376263eeb58eb85789a0c95b978513b6cedf1b30fd2077135704bafec0db302a7fc3b84b2c55e0c836bcd257a36c5e9794ba966ceaa
TLSH
T11BE020773EF72804ECFFD7DB1831649105507454884DBD4FA815E3D714B236434AAC61
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b3b909ea-a81e-4bd0-a4bf-80bc0bc2f2e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b3b909ea-a81e-4bd0-a4bf-80bc0bc2f2e4.tmp
Size 11KB
SHA256 edb539adb4d44f2d6d2088a37599b1fac1ef7cd7069f47cb88bb340102e35099
MD5 48048288aa29b765e82524afcb9d27f2
SHA1 ed10523e49e072d9921541de1c970c0288fa71c6
SHA512 bf0f0db2cf56b2c93db4c1efd3a1608468eb5114a27abb992530a39240327cc977d6cb23e63bc2fbfc38624cbba8a1dc66ac8334553f5f0d7e2eb58baae5bd47
SSDEEP 192:sxRoGtRZ0BbpV/fDksKTLprQ5FAzoA8p4ob/g6+WNIYn83hOGqAxIgIJ:sxRoGtnkpV/fDksKPM55b/5ITRsA9s
TLSH
T15232B7156A38A93B8CCBD21DBB55BF53D2F9603261D02E58B6FC9A1C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1a74a655-7781-45fb-90d7-f9b7239a4f8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1a74a655-7781-45fb-90d7-f9b7239a4f8f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 5199b54963ca0c7d675c0792e2406aeed4c34b2594d9e09fa2a1c7903c0bdbf1
MD5 1d8be50d82b5b3517fe2fac13604d9a8
SHA1 3adc020811fb53cf26a7e6b3251fa6354f31f0ad
SHA512 036e97cedc5cb996d6a9b39ecd77f551d31fa94a5ec8c818f3dde0dfe78dcb5fc2f3fecb12b8dac94e5c96fab626c49781e47a4973bde58f30eb28a849bcb820
SSDEEP 768:Mrv+4UNbdi3+3NlDZIO0mfNzc4ReyIsPMeVH1S5F:Mbsb43+ztc44bsUEH1W
TLSH
T12113BF32A8389973ACF6A686B54776537EF85127C2C81EA4C9DD6F0C0A4B1DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fb2cba3b50df6b4b262b0c6d48b7036536c8c6809432d8de14138fbdd951ae08
MD5 17103e8980952a42d57d2e699c1d7e68
SHA1 e8aff5dcbce1d2d4ff642bbd21dd505d799cb2e4
SHA512 5280ed258132971d09cc7d4cee3c9f5ec6ea8b1022673bbca74e79471eb062d7a9f6557cf6b20813852fe27f14bab1684100f33059dcdc8dac280609454621a9
SSDEEP 768:SF39VNlDZIO0mfNzc4ReyIsPMojKgqmULO:SF39xtc44bsUfgRULO
TLSH
T1DFF2BF71A835D9B3ECFAA682F9423652BDF59127C2D82EA496ED7F0C050758D131F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 f443025204ac6287021a6dba3343949c3d532f1876308f1fb6af344be78d941a
MD5 b160e307c24c9fcffa13969716a3d63d
SHA1 4a821cde232140184f90e6b6161cce62e6956825
SHA512 9d71112e675b710b1164cfee001bd644f955649aac0bba76fee6a59e2dd26cb438962c200d6a2911bca3bf682f13c7e769dce3bc5748cf4fcf9311eef6468002
SSDEEP 768:VFQB3dwgPVNlDZIO0mcNzc4ReyIsPMojKgqmULO:0B3L6tc44bsUfgRULO
TLSH
T18403AE729864D9B7ECFAAB86FA463252AEF55127C1D46EA4E6DD6E0C01071DC130F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4a6e741cd88bad7537b0f2ffba4e25b33e45289160c56f746572fd9a66f9ff66
MD5 4b564a85e2ae494a9d658371ee59c752
SHA1 2b98d5ee34adb08141929e146df7d1239773e222
SHA512 1d17d080e25bacca62744abea6ad9af43806be604436f112ef16e064ebfd7caad5a2bbb13abe700df850b4d96b902e1fa31ecc2a3a482b473dc9aae40c77555d
SSDEEP 768:6rv+4UNbds3/tDZIO0ENzc4ReyIsXJeVH1S5D:6bsbS35tc44bsZEH1Y
TLSH
T10303CE32E8688A73ACF66686B54776537EF8912BC2D81E94C5DE2F0C464B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a30d5e9-f5b6-40fc-807c-d87bdad232f9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8a30d5e9-f5b6-40fc-807c-d87bdad232f9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download