5acb3d1b06690765af29a90871c4059c869e81abbc8c2a9c1d9fe287612d37a9

Analysis

max time kernel
898s
max time network
734s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 09:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 15KB
Sample260804-lr2xeacl41
SHA256 5acb3d1b06690765af29a90871c4059c869e81abbc8c2a9c1d9fe287612d37a9
MD5 508c05aa5a1c41656c59250f7e3425d2
SHA1 4a2a48d7a48dda7bf04cb3499ae79f96b47ed930
SHA512 097c275dc204ceb21482a068d70e0f46b96f0fa69578481e3b9fd3333f930c8c2f0351280024768905fc9a5fb46dee0aacbaa229f926ce2467043532e81c4bb2
SSDEEP 384:3erAt01XZ0NyRf0NyRDuB0iBrndSGwKtFJ4h:OrAEmE10ERuaiVdpwKtFJU
TLSH
T140624BA183811D6F253240B1F1B1DB4CE3A22206A7311BD6E67F357B4289CD9793B6ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2540	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134303104242567314"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{133E84E2-FF9A-4FA7-B179-D372F4371978}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4476	msedge.exe
4476	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe
4844	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4844 wrote to memory of 5672	4844	msedge.exe	89
PID 4844 wrote to memory of 4680	4844	msedge.exe	90
PID 4844 wrote to memory of 2540	4844	msedge.exe	91
PID 4844 wrote to memory of 4680	4844	msedge.exe	90
PID 4844 wrote to memory of 4680	4844	msedge.exe	90
PID 4844 wrote to memory of 1976	4844	msedge.exe	92
PID 4844 wrote to memory of 1976	4844	msedge.exe	92
PID 4844 wrote to memory of 1860	4844	msedge.exe	94
PID 4844 wrote to memory of 5764	4844	msedge.exe	95
PID 4844 wrote to memory of 1860	4844	msedge.exe	94
PID 4844 wrote to memory of 1860	4844	msedge.exe	94
PID 4844 wrote to memory of 5764	4844	msedge.exe	95
PID 4844 wrote to memory of 5764	4844	msedge.exe	95
PID 4844 wrote to memory of 1700	4844	msedge.exe	96
PID 4844 wrote to memory of 4016	4844	msedge.exe	97
PID 4844 wrote to memory of 1700	4844	msedge.exe	96
PID 4844 wrote to memory of 1700	4844	msedge.exe	96
PID 4844 wrote to memory of 4016	4844	msedge.exe	97
PID 4844 wrote to memory of 4016	4844	msedge.exe	97
PID 4844 wrote to memory of 4204	4844	msedge.exe	99
PID 4844 wrote to memory of 4204	4844	msedge.exe	99
PID 4844 wrote to memory of 3476	4844	msedge.exe	100
PID 4844 wrote to memory of 3476	4844	msedge.exe	100
PID 4844 wrote to memory of 584	4844	msedge.exe	102
PID 4844 wrote to memory of 1812	4844	msedge.exe	106
PID 4844 wrote to memory of 604	4844	msedge.exe	107
PID 4844 wrote to memory of 4996	4844	msedge.exe	108
PID 4844 wrote to memory of 6076	4844	msedge.exe	109
PID 4844 wrote to memory of 6076	4844	msedge.exe	109
PID 4844 wrote to memory of 4476	4844	msedge.exe	111
PID 4844 wrote to memory of 5048	4844	msedge.exe	112
PID 4844 wrote to memory of 5048	4844	msedge.exe	112
PID 4844 wrote to memory of 2152	4844	msedge.exe	113
PID 4844 wrote to memory of 2152	4844	msedge.exe	113
PID 4844 wrote to memory of 3476	4844	msedge.exe	114
PID 4844 wrote to memory of 3476	4844	msedge.exe	114
PID 4844 wrote to memory of 268	4844	msedge.exe	115
PID 4844 wrote to memory of 268	4844	msedge.exe	115
PID 4844 wrote to memory of 1260	4844	msedge.exe	123
PID 4844 wrote to memory of 1260	4844	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2c8,0x7ffc04c1c188,0x7ffc04c1c194,0x7ffc04c1c1a0
  2⤵
  PID:5672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,12489195301239406238,28557523960663289,262144 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=2604 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,10232706038434189274,15239036361079100915,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,2635580376779537105,6654118035610639114,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:13
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,10410252490593641709,2734186973973320368,2097152 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3652,i,2417283072268965616,8617204456396237762,2097152 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,17047930362507759586,1870915695004688523,2097152 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:1
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4328,i,17141784666201059285,17981450450389524315,2097152 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:9
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3816,i,15112820433542456422,9171370738054594866,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,7437199786153942859,2471957002434037510,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5436 /prefetch:14
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,18306997578884660873,11088674003531056130,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,18306997578884660873,11088674003531056130,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:14
  2⤵
  PID:584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,14886072386010375637,4673603523089254283,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=3856 /prefetch:14
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,11245874580986984826,9933246473604093766,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,9234811216755323169,2337633332829600052,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,15771884405391482531,2194621660120222350,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:14
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5876,i,1848633830324031125,138942289098853319,262144 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5872 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,6637890179344191405,6086844746413937355,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:14
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3120,i,3705937908432316280,15628628391989259355,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=816,i,56226192837473459,11864061181026061638,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,17428649005186798173,10993108743210543052,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
  2⤵
  PID:268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,3356002181952303831,2980053709903994840,524288 --field-trial-handle=2608,i,5652260878274040916,7822830693148844629,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:14
  2⤵
  PID:1260

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1352

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5480

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3272

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2576

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f11d8e1932d01ada6b570b8954d5d9285d7b83c2269eb07228c631b8a7212f7b
MD5 263ff23832e66aae58d06bc7fa5daf34
SHA1 d9d73c18369912c50ec468ec4eea4d02e1503815
SHA512 15a48b662f58c62fc1d11583295278659b751cd1fac5c95c97fef1b28f80b49834ca5488774c552059dac1f5a14fe3d4656cd1bf3bd14b50c9239e5c402498bc
TLSH
T16CE026E404CACA3FE700F847516C534CC2D1371E9FC8A98A5700889C7201540A7CFEE4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 6ee0f94bbf13d19504f7f157c67a7c78819747f1d074022ef7a78d50db1c7911
MD5 7409a7c0330b202ae31d693061a2e731
SHA1 e89d4951c3d7f53b91caffadafe9f774ad56f696
SHA512 68cd8defd32c213cbfc9239297e3b3f7c0f6611cb728a08465d669242f4f092122f13f962c91a06a4c64f0fdde2ba76890d91e4bb27153f673674a2a6235c6f8
TLSH
T163E07D8446DCC23EB609754B516EDB0CC6C0B64FEECCE98A17048CCA7005144BFC2AA4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 b24f885c110566e01316cb9cf57aa1a772cbe7dd768034167bbc2bf825d410b1
MD5 441e6450e4bae3ebcee0da774af99207
SHA1 a9b6c7a7f80a88056f39298fbb12340e043ab5a4
SHA512 9c9d91cdd1544fb30e9502384d1b8b69da9d9db1aba1904dec5bdd03b634c81eab2a97a0560bf0783dea9e86b348b291cbc1516d32cb7c1fc7d1f6d1917b8ceb
TLSH
T111E0268404C8C27EE700A54B926CA34CCFC0362F9EC8F9AF570488CC71050A0F68AEA4
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 b48460034ffa5b94fcd388797c4689234e665ee89a06ebc39702575dd1ff9aa1
MD5 a17db9d5d43ec7bbe49489c19d1a4e0f
SHA1 3b3ca7a4600f694d6d9ae67f3b5b1020042d2ce2
SHA512 8fb3f131b3dc4f4c79c057168d3c29e6a6a416736207cb4101f69295e7ac1ee4fdf163d4da57b4d60699ade5c9f6930943d09553cc972de61f1999edd09ef02d
TLSH
T13A511D54C3F119C3EF2149B2D1EE65793ABF8C7601A76F7B6CEC527A48017161E190B0
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

54791e73-a7ff-46bc-968b-e240c16d0876.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\54791e73-a7ff-46bc-968b-e240c16d0876.tmp
Size 1KB
SHA256 9dc43b7f9d99af33089e29c13a622ed463aa2fe3230654d6b23eac62dd0baea9
MD5 37ccf31f00067f4cf00ff4b606b13a9c
SHA1 d1de43c72e4447b1635b05a2b7780b5ea3a1ac64
SHA512 0d26e786f056fb444a4e65eced3a8ea76349522eac0c476a83d631ca5bed3dba86419de4a0a62e73de196ad0678a507ec4ece8593b8ce111fec60782831ed55e
TLSH
T1DF31ADF383F4957D9A0141F0AB186E1BCE180915432C3D66C5E46E1F93F2871E14095F
MD5 SHA1 SHA512 TLSH

Submit Download

5bd467e8-a50b-4629-b474-2f5e9634aa7b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bd467e8-a50b-4629-b474-2f5e9634aa7b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3bd45ba674a635bb312bd74482a0c403c3e43713ac24e14327dc1bb9c652b5f6
MD5 601a36f0c51c7fe912d3180e8e691d1f
SHA1 c5996e65c21eeef7edb63a046d37497bef24e101
SHA512 fa4619cf2cbb93b06982fc9692d5de99b5675b04fa83fbeee71e64fbdce8eca9d401732a93c8dc7718507aa529d2d0f040ea07b3a141a54b324b7d6ba1116f11
TLSH
T14831ABF3C7E4967E990142F0AB186E1BCE1D0915432C3D6AC9E4AE2B93F2471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 fbaab4d5b8d960a0d612d19a896257066cd969cccf31d5af3b4c5e18df5a0506
MD5 9cbb2b85bffb2e32031efd5ae8f28654
SHA1 e18cafad44ab6b02bf2dbb95681a5e2417e10978
SHA512 e29b01a0200b5871c9debd6fefb1379eb107b34b2c739af516f78479833606cb1b8913c4201fed31c18279dda92514bb00757f85635eaa6e7a8974f3c9986344
SSDEEP 192:sxR57mbS/fOsUxFiwGVezoA8p4ul/g6+WNIYopQAYgG3dIgDBJ:sxRd4S/fOsUxkpVDb/5IlgBn
TLSH
T1E342B8156968697B9CCBE21EBB55BF53E2F9507260902E58F7FC961C00EBBCD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f66e5c854f902a691fe52d3feb9bb1c9b50ae1d31ca104cf44564dfa4a35e71f
MD5 06ccac6cc828e602b294bd82881ba934
SHA1 36eecbbf408c79a9005e252a65955e02f501789d
SHA512 562a15518e320275513f8ff410f1932a5c30c440208283b3a99e759a4fc4cc91b659d54f3e45ffd4ab6159522cfb639ae2564a2154f7e7aa713eb5f0a0ec91e1
SSDEEP 192:sxR5ombS/fOs0kiwGVezoA8p4ul/g6+WNIYoXAYgG3dIgIJ:sxRS4S/fOs0PpVDb/5IQgBs
TLSH
T12E32B7156928A97B9CC7E21EBB65BF53D2F9207260D02E58F7FC961C00EABDD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 b325110ebca1938e5c23f85fbf565f115dce3575a3c34c307d47683e21cbff0a
MD5 4568e32bc5fa64e2dc5e7648e928251f
SHA1 b1f57fbc021592ec92266c0a465ea2cc47fa2285
SHA512 bfdd9447355fa3066f03a766215dcf352100e7606961031a22fe4b8095c87c625a3db9c469a6581c04549da48bfe6d5c63b85c3801e2d70fd58fddb287a0b8e7
SSDEEP 192:sxR57mbS/fOsUxkiwGVezoA8p4ul/g6+WNIYoXAYgG3dIgDfJ:sxRd4S/fOsUxPpVDb/5IQgBd
TLSH
T13C42B7156928A97B5CCBE21EBB95BF53D2F9107260D02E58B7FC961C04EBBDD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 299df40a483d635f8457f3e1fc60942f19cd96b07b6128b077af009b57745abc
MD5 c797e077a5543d0cdf4a958be260e69c
SHA1 e70f4c45b4483b7986971a1a2ea395b99f0fcdc0
SHA512 6fe32211349f238345df2df0eea05bfc2554374ca40e366ec95da0fb32b536f60395f8955e45e01024ae13623546dbd8818d8e04f53491fec5e44fc5e371a15e
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXtro983:j26H0RWgs2f028F1+UoAYDCx9Tuqh0V4
TLSH
T1AEB2DB2B640DCBBE5F800A9EDC196FDB6D9802C79B588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cfe7fc3c-08d4-4ba1-9967-613680b41da9\index-dir\the-real-index
Size 240B
SHA256 be779d415490ddcbbc2aec70b8cd950c46ed1a2427d59b965096a6be8d4b9c60
MD5 e1427bac28c97e2df094cbc33b9e7df2
SHA1 96a18915ef24def19d2daabe89bf8df18af35dbf
SHA512 ffc92aa90200317eb84d51215a917c9150454eccc5c7c2ce6180052815f0cb2f5b6eebe6f90d8a988c834d31315eb4518901788ce40fd0a8dd91a37eb7f2f0b6
TLSH
T12AD0224A8C66A941DA226A320073A62C2B3302FE2602AE3200FC141995605384106008
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dfddb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cfe7fc3c-08d4-4ba1-9967-613680b41da9\index-dir\the-real-index~RFe5dfddb.TMP
Size 240B
SHA256 b9175c7f615a356fb44016dc3e547dae1ca590d0022ec1df03b0a3fe4d01150a
MD5 3511d2a63485ff69e5437173fc4c2f4c
SHA1 6dd42592c96eb661dbda2c30dac9e61679548479
SHA512 001fe970b11ec84a6912512644cf3c26fc0d89d9b144b91ea9a61a461bf33406fcae65e8e445b37b1ea23693e25ceabbdcb813f6ea8e09e9f8f619c11eab65d7
TLSH
T1FAD0C0CF4470EE30CE171F3130036209333B0C112011ED3110D8180F04300EC811600C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 8a79435683fea6ba73742366135fd8f0f3f6aa385e2156fc256fde236b829554
MD5 845c50b9e0a5c582747f4be965b829c4
SHA1 b4293313f6a0a5403ab7e8b62abfcb126e7c9e72
SHA512 f2bd71b1d81d7a7191ae2451cef3382e05be53d8070c16b3dc05a1e640f5e005e74dd7ec6db884ea093d69507c9f61cd1be75768c789de3b568c5fc0498d15b2
TLSH
T19CE0D8B729A72924FCBFA3EA247054A901417974D504BC8F252E93C350B1251385BC61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 68f56e29bae3e046fc0f9519c3937e3f0362b44c9e17b08d8063243cf4958241
MD5 5a56130e772431aa2e258ffea767d3eb
SHA1 bfaf60e4bfe75b36ba6be62a1874ea1550068c62
SHA512 ae569ee428efdf051264264bbc80d2dfe09d08b64cf49830ab3acf208cd65fe947249d17e1a2dc4508e9dbcfeeb1efd26d03884631f9ace508aefa7238b417fb
SSDEEP 96:KRRu/bpLP7W/cKgD7K4CgN7cRZUnvPH1i7PF/DnWrw+gXnK4mgpnct1o7y5SK6QU:CRu/bpLPa/c7DBCgNoRZUnvPH1i7PF/T
TLSH
T1F491664472BE02817D3E641DD5E6897A4282B0A23455F97BBFA911624F67E034CFCCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6a5a81a02ebc8ee1a9e55239b3b782a896a6089be9206e0ea6414fc16c98b5ab
MD5 1dc176a5e537c6f352d422452246f5a5
SHA1 590e6b915125c79b9fb29834d36fb9a14be2a012
SHA512 5e2faf183e84160b9a52dd896d401be11f2a6dfe3986ab82794f42a9a1f7872425134f249a3abfa56005e8959f24704a7b65c3f605346b036058b57948ea3c6c
SSDEEP 768:zM3jT/TBOWs4wjONXyer1IRCzni9dojKgqmUov:zM3PzQSIqn+fgRUE
TLSH
T1A3F2BE30E455AE338CE5E3C7F1466743AFF86067D6C44AA0A9EE2F0E059795D130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 4eb4d58264387d1bafe33253ca1700dfa5392061a653db642c377cde3280517c
MD5 806e0f9712badd5b9fe4d16d1ad3a0b9
SHA1 b34be7274a328f12d663d1578ef9bce70d4700e6
SHA512 3ea16ac0da4ec6e076ff025424fa4855dc463435f4dcb1d37e6a1f1b771396764fda6ef1bb38c743ca15575cdaf5ff4e0b735322c520c8f7240b394d6a12d1a7
SSDEEP 768:SM3WT/TBOWs4wjONXyer1IRCzni9dojKgqmUov:SM3OzQSIqn+fgRUE
TLSH
T1D0F2BE30E455AE338CE5E3C7F1466743AFF86067D6C44AA0A9EE6F0E059795D130F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 d840be5f9046a288d6e294062455f7ad7d8f2b2a0bd2738112661d700ac7ef52
MD5 4d653a4aec6e36e9eb1a068495247eae
SHA1 9ffa431bf3cf750f8de083730825159af60a3f08
SHA512 d38796d30b108f669d2158922e4fd81682385ecdc10d578d5c1605a4824abfd28846955c757d5c77a81e415a3f7d1514485838823bafe29b05bfc45ea5a289ce
SSDEEP 768:/M3ZT/TBOWs4wjONXyer1IRCzni9dojKgqmUov:/M3pzQSIqn+fgRUE
TLSH
T1F3F2BE30E495AE738CE5E3C7F1466743AFF86067D6C04AA0A9EE2F0E059795D130F81A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 74ac00b2dc2b7005284036d0af994182506c8d2a747a03297cd6c441a6c5c017
MD5 52b970b4f74b2a8ff97bf4b01794a1db
SHA1 ec6ec768c878a588213db8104ec8f2cc3dd72a08
SHA512 ca2bc77f560275ed33330930270238f47d577506c7a19fc37c87df03cd27a12fb7ba08615e32a08395b93e3f37ab5de4cbf24a5216392c2748d5fb840a68a6c6
SSDEEP 768:r73WT/TBOWs4wIONXyer1IRCzni9dojKgqmUov:r73OzdSIqn+fgRUE
TLSH
T1B2F2BD30E455AE738CE5E3C7F1466743AFF86067C6C45AA0A9EE2F0E059B95D130B81B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 6a58e152d3a021bcdf72a0fe4d966a5301d709835e76ec980ee267f25e7b83a5
MD5 a35bb82d43d77d0ebf0db5072976d908
SHA1 06ebb39ce7bed3bcc94c1714db9062f9b0d0547f
SHA512 4a7579cfb56e89a4b384583bb5f33245eede9256f2d22b04653a37e299876bdc9f5b29324f9363bbbb9187f2a8fc655bf8e654520b59e6f1e222fae9618cb492
SSDEEP 768:hrv+4UNbdz3RT/TBOWs4bONXyer1IRCzniBqeVH1SK7:hbsbV3VzbSIqnBEH1l
TLSH
T13B03BF36A4A89E338CE2A3C6B14777437FF8605BC6840790D9DE2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download