5acb3d1b06690765af29a90871c4059c869e81abbc8c2a9c1d9fe287612d37a9

Analysis

max time kernel
899s
max time network
730s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
04/08/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 15KB
Sample260804-lr2xeacl41
SHA256 5acb3d1b06690765af29a90871c4059c869e81abbc8c2a9c1d9fe287612d37a9
MD5 508c05aa5a1c41656c59250f7e3425d2
SHA1 4a2a48d7a48dda7bf04cb3499ae79f96b47ed930
SHA512 097c275dc204ceb21482a068d70e0f46b96f0fa69578481e3b9fd3333f930c8c2f0351280024768905fc9a5fb46dee0aacbaa229f926ce2467043532e81c4bb2
SSDEEP 384:3erAt01XZ0NyRf0NyRDuB0iBrndSGwKtFJ4h:OrAEmE10ERuaiVdpwKtFJU
TLSH
T140624BA183811D6F253240B1F1B1DB4CE3A22206A7311BD6E67F357B4289CD9793B6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4904	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303104201210189"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{30DD35D8-3C87-42B0-99F3-0F6CB6B464BD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1812	msedge.exe
1812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe
3552	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3552 wrote to memory of 5024	3552	msedge.exe	84
PID 3552 wrote to memory of 4904	3552	msedge.exe	85
PID 3552 wrote to memory of 2308	3552	msedge.exe	86
PID 3552 wrote to memory of 1864	3552	msedge.exe	87
PID 3552 wrote to memory of 2308	3552	msedge.exe	86
PID 3552 wrote to memory of 1864	3552	msedge.exe	87
PID 3552 wrote to memory of 1864	3552	msedge.exe	87
PID 3552 wrote to memory of 3868	3552	msedge.exe	88
PID 3552 wrote to memory of 3868	3552	msedge.exe	88
PID 3552 wrote to memory of 3868	3552	msedge.exe	88
PID 3552 wrote to memory of 3852	3552	msedge.exe	89
PID 3552 wrote to memory of 3852	3552	msedge.exe	89
PID 3552 wrote to memory of 3852	3552	msedge.exe	89
PID 3552 wrote to memory of 4612	3552	msedge.exe	91
PID 3552 wrote to memory of 4612	3552	msedge.exe	91
PID 3552 wrote to memory of 4612	3552	msedge.exe	91
PID 3552 wrote to memory of 4476	3552	msedge.exe	92
PID 3552 wrote to memory of 4476	3552	msedge.exe	92
PID 3552 wrote to memory of 4476	3552	msedge.exe	92
PID 3552 wrote to memory of 4988	3552	msedge.exe	96
PID 3552 wrote to memory of 4988	3552	msedge.exe	96
PID 3552 wrote to memory of 3204	3552	msedge.exe	97
PID 3552 wrote to memory of 3204	3552	msedge.exe	97
PID 3552 wrote to memory of 3144	3552	msedge.exe	101
PID 3552 wrote to memory of 1092	3552	msedge.exe	108
PID 3552 wrote to memory of 4808	3552	msedge.exe	109
PID 3552 wrote to memory of 4588	3552	msedge.exe	110
PID 3552 wrote to memory of 1656	3552	msedge.exe	112
PID 3552 wrote to memory of 1656	3552	msedge.exe	112
PID 3552 wrote to memory of 1812	3552	msedge.exe	114
PID 3552 wrote to memory of 4520	3552	msedge.exe	115
PID 3552 wrote to memory of 4520	3552	msedge.exe	115
PID 3552 wrote to memory of 1620	3552	msedge.exe	116
PID 3552 wrote to memory of 1620	3552	msedge.exe	116
PID 3552 wrote to memory of 3164	3552	msedge.exe	117
PID 3552 wrote to memory of 3164	3552	msedge.exe	117
PID 3552 wrote to memory of 4628	3552	msedge.exe	118
PID 3552 wrote to memory of 4628	3552	msedge.exe	118
PID 3552 wrote to memory of 4504	3552	msedge.exe	119
PID 3552 wrote to memory of 4504	3552	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdac4cc188,0x7ffdac4cc194,0x7ffdac4cc1a0
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,947758389026821667,17185244245456551506,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2324,i,3413491829410503035,17136414837263988667,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,15555345568556584027,3757801039736576057,262144 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=2400 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3460,i,7763568413570205216,11396286624894860352,2097152 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,11550976941275450005,12264730432322180909,2097152 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4216,i,11597866865292295137,17653443420838793700,2097152 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,14357938189645910204,512946018763465039,2097152 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,12677844943884755559,3933206132218268235,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,7419702967425835113,2061808700937159664,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3090418897129852198,9248959517949787593,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:676
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,3090418897129852198,9248959517949787593,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4460,i,5798920000449256412,2765302961889663227,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4464,i,854808673644256131,5254630632651360485,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4448,i,2782688168035666306,9536719184070701490,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5664,i,17055084891049794980,8193930215927511516,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6160,i,1765526446359936120,2497470544134281270,262144 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5940,i,7920771163103111946,3561286739954942513,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,6290664434523080728,14572140444600026518,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,6112671360820678997,12774875182277621231,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,11456917999860651019,1557376040293169716,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6504,i,5492458066589028153,3991987056567894897,524288 --field-trial-handle=2472,i,15307020468591918249,5082802978450237515,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3584

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 17d500b4417e92837c05a8187f43f060e09191612c25892f2c54e786bd254c36
MD5 ca52a84f03e904e79c2a5651b273e5fe
SHA1 61ddeaf1850d81986389db97ff9470b67eb8cb1d
SHA512 d1f489b74d4da21280e354fdfd91d6569edfcb1abc7f4f6740756bbe744f02bd51136d5ea47c7a6a1842683dc3eba0d2608d4d46e5eb8ffb5035ffeb98f9c788
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7G:fwUQC5VwBIiElEd2K57P7G
TLSH
T1B9B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0e2b315c59b1bfe8e547b0017a92548af7c81e08409e987a2628ad74667b4fec
MD5 7ab616f55807e9de5195a40c50f65e5b
SHA1 917a7797f800e5f30a1b9b8125127968246d7ce9
SHA512 da10f29803a072f42a2c102da0bee745cf1b1d47836e3d30e38b1e66beeb1abeaf2eb47b6c07b23682098f70fe2a4b29a0777eefa1380d0fff2509ff32d9b356
TLSH
T171D08023771D7182F35B41759053D7025A1680756463B701B325D41C9A740C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 b976ac8901ffd41ec02a04aa583bc9d11350f0f9f714fb92d3341bb0bde4629f
MD5 504ce80b644a85a7e68d85bd24169289
SHA1 1f740a722dfa97fc8fb30626b0e3d6217e4a9864
SHA512 9406464a4f6becd85591c12af8a97fdecfa2208649138f347fb50d3e28f1583adec061050924fa0405e46eb75af7e299e6564c2ed039db9d82c50326da32a3c5
TLSH
T19ED08023371D7582F75B41759053D7025A1680756463F701B325D41C9A750C9F28B1C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 b9c2331e8dbb745a9da6f2cab1147968be099ae8edb44283c1dc743a21c3bb60
MD5 41646107d4c99f27a06f9fc42013b34b
SHA1 17b4bdf184ae6967520d03b546bd9a566ed31f41
SHA512 cc56f802e30361f7f613ce0e4290392aca7ab431e798e2fb434f771af5ef072801e225fc3b9e8e729b0ef45dd50b90d818ef4cc7773c87c1ffa742a53b92c056
TLSH
T1BEE020C504C4C37DA505A54F51ED570C41C1761EEFCCA94957148C883042040AA81A6C
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 564B
SHA256 69b98f149655f37478c64daebcd007a28d99b2432060ea62c855a05ad6a7e652
MD5 bb4d8cb43faca96cc2a3c6af34560773
SHA1 89c01b39fae8305bf7a6145d35403e0e61428e98
SHA512 82ed64877c3c8356c9dd9334e5a2f1a954da5db291896e9abf9423c598127f6690ae8689734505ead3f077b40d7f78ccf65c49b10b432f3224779566cd4703c3
TLSH
T193F0817F42C0CAF54A0E5147904AE73904D1728AEECCC4DD23155C8CF44108B5AC6EEE
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
MD5 e3fe72c0f542fbb29d9eb8933eefb382
SHA1 fce9a5a6bf89b76d58b4c0f0c691531330ab3b3e
SHA512 f71315278d44c74df19833e56e16d62705ddd45cc9bbabd13be55f51927a3d7464736846a1c4bcda6770c5b8c0720e1defbfbddb5206de648079efb1a9250340
TLSH
T17EC080D9BD4D845FD385187E5716F00007906511942796171650FDC032419A01E29220
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 711e645a1db1fafb8b52c4c04717ae0b2ee3fc1c3d0ad0511ef4987e508f4d00
MD5 a5fbe89c9a4f7c8052023392d37b71c4
SHA1 d9508788c4fc7e67d56a39ddea0ab708ab689318
SHA512 01918c7bf1f2b2ba1947fd6bd90a0ff97973f7f0ba4c6310e90243d3bde1bed9899ea6b163af57f30a2f10f5f28300adcbe5fde66391f416d8e8ad43163f1fd2
TLSH
T17171FA2815B285A5DFE3C23271C1C10FFA72482A7FE36DD21357D9B6D60C32251DAA57
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a9d7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a9d7.TMP
Size 3KB
SHA256 8d3edcf77b55ad0dc25e561a4ae1a0bad494b5aa0f6a7f4d937aea94443086ea
MD5 3d3b61fa97f21a8e9dd3f6afa17dddd8
SHA1 cafd5684939e84c7c1d40cc19bfe94114947276e
SHA512 a05715b0b884eb69edbf7eb5ac68bcadd1cc3494527cb2d429d0c565a566f715c54fb5864786a932770e6f0ad3823a97efe58e720dee86ff02e82ccde56b5ce9
TLSH
T193711A2815B285A1DFE3C23270C0C20FFA72482A7FE36DD21357D9B6C60C32291CAA57
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 597B
SHA256 bda51917b235c6a81cbfb3e8938fbb8069b2cb0a1e1f73034c96cd99b12ba5cf
MD5 bbf038d96d2f5b5400bdac9ab77f2560
SHA1 70fb79bca0212fc9144c6d2fab8c881aef371a26
SHA512 1a76a96076e8741feb1c72bbcb1948cf90ddb3a8e029c6a64b9ba7a6068a7aa942b33292836dedb4c1c4a70be1dafc0d1fb1fa4d4f19b2458eae7e3c3725f7c5
TLSH
T17AF042F783A059BE470152F05A186E1BCE5D0507431C7C55C5E47E2B93F24B5E00199B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 792B
SHA256 fd1ad77b1aae6e942f79bd6ccbc922bdc46346c0593cae3ea0ee7f5bd75c8d2f
MD5 0e84e70ada4c16ca8ab22845282529fc
SHA1 33d64fb1036174b7a40ddda6ab8f3ee3f7ac52ed
SHA512 4c621cbfdc89caa4b44e3b2bd21e0677abfb8078a4939f4dce3dc5b4a35cdd9e4b17e91b6b221371516e9f68cf84096d1a97aaf416de3618db6988621ecae3ca
TLSH
T11E01BDF387E556AE8A1112F09E287E1BCE1D0802422C3C56C5E4BF2B93F2475E101A9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 e9b1514f23b39edec050fd9bc515ba891be6fc5c7bd92e1a8caa74a2bf7038c5
MD5 9394933eeec9981f193c9a5fcd4b5b39
SHA1 d4c3e63523b5751fd52c7076b478466db7d2e2a1
SHA512 50c7604a2baec35204a029ec62bfb3621762ccc143893173ed30920786a81c60cd09a3f404b6384de2e353cd9d06fb9e29695532195a9ed763fd6fa958f22fcf
SSDEEP 192:sxZ0/ywFaKOMl8Mk/W/fgsls7aeIupd2HW6+WNGYIkiF+1MIgrJ:sxZ0XM/W/fgsls7a20HbG7X9
TLSH
T19642F9116B34A97B8CCBD20AFA857F53D6F61472A1900E44AAFCD91C04E6BED2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 7699c8931886367a7dc79d5f3a60cd515d5f428a3d76ecebe11ca7cb970a6ed0
MD5 0d839f00ae17cac3b7b44a12b6e9c7ca
SHA1 1cebb1341b7f642dd55573bf08069bf9e16b4d55
SHA512 acf12620902554d36f99bdcda0156ebb4a721784bd02252a4a8efca072c272d0df93aaee47aa75207f92f337feb5651549d98f3190cac7f2d2377fdb2d86c6d7
SSDEEP 192:sxZ0/ywFaKOMl8UQhk/W/fgs+sYaeIupH2HW6+WNGYIH5N+1MIg55J:sxZ0Xqy/W/fgs+sYa2WHbGNXd
TLSH
T1E052E9116A346977CCDBE20AF9857F53E2F614B291500E44AAFCDA1C05E6BDD2207C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 7801366dddf86b2a6693cecd333e7f63cf6bf2c84d7a4898638ff28d4b788fdf
MD5 3bd84c95039ae223fcb6d3c96013f401
SHA1 45dd2bddfe47908d1e210d7c010f827244625694
SHA512 b636612b100459f9ef5dff657947b217894c74f52ef67b4fb6ca954f2d990709b9c6df47b71604a8ba548d3dce44c4bb79bc4f0fb4835974b1a884cd2d4c79ea
SSDEEP 768:TXsqxXlWvJD6T8F1+UoAYDCx9Tuqh0VfUC9xbog/OV34Ll6AR9groRrw:TXsqxXlWvJD6Tu1jai4LAs9rRc
TLSH
T1F5D21B3B694CC77E4F840E9DEC266FD66ED801CBA6988D5447FA880C02CB3EA51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 2KB
SHA256 cf7efb5754419bec2d6fb5eed11708ab27f74e2e841be339a1c18b8f74976cfc
MD5 66458f353e764f8c04b96daf650def36
SHA1 27a251880326d51da7548c3d8c7869b0ef099ed4
SHA512 8f7330f85e9267eccd8596df325462cd76ef79a8427f73cd297b595ca09e03debb9d64023af3f0cf3d7e531462acadce97f004c51d9e7029b58d86950a3dcb1d
TLSH
T18141958D4EB0995FFC6480B305B164A43770D9CD5B22D7275CAC21367D1339E294B1EC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cf506.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cf506.TMP
Size 2KB
SHA256 271a4b1861c7e2e7e4dd009769d115f3e6d9747236cb513940a45b6abc21a908
MD5 a81b21e1e836505922b4c75d635235f6
SHA1 7088a0242d8eb707eb1c8b0b19e94f088ca44af9
SHA512 7c3f1920dcb6d8b3d92be946dae9fe382e60de33aa62bfe41c6b76dd6b0c008050f45808db86e12551703654fdec0f2e7fa3a5a8176d33a18ce2f0a559fdf061
TLSH
T1AB41768A4E908A1EFCD480770ED7A4B47339D44193227B4764BC5536ADA17EE2E4F1D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 26457444c58cefaed120e42adadf8f833f73c00c96184082b55ea5b049b0af01
MD5 e37fb82d7cc666e40572faaa64fa264d
SHA1 864a555de953c75c3574cc0517c09bf647947b78
SHA512 6147480c669a2aa54b543b2227514bb06b7b20c8e85a46d5711f3799882b9ee846b7b05ddaf14abe685238283bfdad67a60c8afa8f5550d38f29b4544ba33e4b
TLSH
T172E06FBA2AE71800A8FBC3EF087244A64400F828C891EC4F1029A2C310622A03826C26
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 19f5403a360fdf5c3f73fcd1ab30948068f7c64253f33a0d0fc1a0739b28656b
MD5 34deacb118b7ab88f0847027045cb32a
SHA1 ffddfcfe91009b81ab72e9195089a1a1f9b63c2d
SHA512 ef698657a0a5a2c209306456ea5cd723055bea47decf2ce3825f4301cf66a52d4bf4604283ba8a1d3b6cb43c4c8c0e84c4a164be45b20bd6d4f453d043a4346c
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyBsIrKhy8byov0zf9Zlk1ZqPIqHkKLBU:KYbaKYIKisIKhy67MQKVWOm3SKYsPz
TLSH
T1F6D17512733A1642393E6908E76AD7370E8272A33869646F3BFC50651E66F120DFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594637.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594637.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 1d1dc3cc5d2c9800efde329b3d28730e7193c19da78664976e4390a86d97a32b
MD5 bf603e2c2780a0d70e6aa2e4a4fd05ac
SHA1 4792b053b755d327f280e0e81fedc04a9c8c5b2c
SHA512 97ece0dbfc3c7f4581290837e6baa1a88e3acf0a142d17651fc6b483dd02e2eecf92f97678a87af90f91cc9e25efa42a33a04c0fe3bba932d7a06cede96299f5
SSDEEP 384:qZcIhsNJUNgH+kb2HyVRNuO7o93sBeRs9JKgqijUGy:IhIHOAHuOk93sTjKgqmUGy
TLSH
T1B5927D3158385D37AAFA7A47F4873A174FF8906BA7C46F90D1EC6F0C018A98D131AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 bf6e21cf1326b4613c16be4e19e9147286ddef2d7822d479fef0be121d7b3d7c
MD5 1f6fb3509c8d369da3e28a102914c71f
SHA1 625a531fb390e53070d14ab5897b96ffd1163638
SHA512 50941173c189e274fba572a882f571cf8461a1a049ba070c814585bda3a22d15fafbd7a35c06a94ceaa0574f1f9fbfe4173813fcf0bef481676a67ad0913e1fb
SSDEEP 384:PZcIhsNJUigH+kb2HyVRNuO7o93sBeRs9JKgqijUGy:HhlHOAHuOk93sTjKgqmUGy
TLSH
T1DC927D3158385D37AAFA7947F4873A174FF8906BA7C46F90D1EC6F0C018A98D131AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 ba8115b3ea728c0bfa5bcd2108a09c1b9c00806d81a04b2bfadfecd1d1403895
MD5 163fad0a68491234d9f926332781feb4
SHA1 555aeae1cb1b8b3f137ee84cae23329e5213afb8
SHA512 965490160d0395492c5ad5d0fbbeaaadb81a991ff1b3beda78707d190b5d018855facbb47d1f711d212e97db7538735a45b72e10e90b5a312a4151db3a29573d
SSDEEP 384:R67FiZcI/zsNq8TUNTUlIligH+kb2HyVRNuO7o9qsBeRs9JKgqijUGy:IFQ7bwghHOAHuOk9qsTjKgqmUGy
TLSH
T1D9A26D3258649D3BEEFA6E46F58B36078EF4506BD6C4BEA0E2DC6E0C019B5CC130AD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e62780c3ef3e7507a3ea9ac37954be86ab126fffa8098b215bf6be44331fdd6f
MD5 a288f35ab76a31721e3b2456776fa6ce
SHA1 9650269c36da8d28ca5da27980837847d9476302
SHA512 d0d17cfe36226101ee8c0390210d056ad7c5a925f01af65839f65d1826afaa44a960f2288e83f1f07b537fd25fd06bfe89d7a9ef52c2c4e04ac439265fccc028
SSDEEP 192:tONv6JkRtQmiUy4kW+RNuOmwTBh3mRMcU6:tONv6UrcW+RNuO7b+U6
TLSH
T11902D935AD382C779EF26E0AB98B37175FA5102BB5952F80DAE81B0C01D769C2347D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4ce933d053bc24a3f95c9a0e7c2051ee87494e08fb9d5c735dd82e1389cd62bf
MD5 752efb61785a1c1f72d2648d57cddbd8
SHA1 4a87a8a23a8d27ce9ba83beac9fe2d8496b99765
SHA512 d561ab87f5c68cfedd148b6b36bd18ebc028fe81fcca0d7e17c373bc6e59151ce0c6d32dac6c2d772ac77a1be07b2f107f4518d6d0f01868cffc3c0ab5f83d33
SSDEEP 192:SONr6JkRHQmiUy2ku+RNuOmwTrc9Z78VcHqEUU6:SONr6UpAu+RNuO7o9BsU6
TLSH
T1C6121A36AD345C7B9EE26906F48735074EA9512BEA897F90D1DC2E1C01DFA9C130AD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50b9c971-42a0-4b0c-91a5-6f6c6f168ee9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\50b9c971-42a0-4b0c-91a5-6f6c6f168ee9.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 a0339e4a60925d4ddf4bb0b2ccff65519eccfb21f465d78038243eff06170684
MD5 01a15919e10804c1b0ad0313112a9880
SHA1 41ac5ce2aac0702cc50e206b187ebc8dc4546e6e
SHA512 a91211bfe9d20a74540eda798639157cb9e97a497e279fe5d6218f25d346fdbed7304d1dff2e576c7a88a73433e4c36a2c748763fc317d3797327da095e15809
TLSH
T142411658AAEE1108B3B62F56ABF6A86D487F7D772F06C49D10010E4F0663B40C9A1733
MD5 SHA1 SHA512 TLSH

Submit Download