fd237c710bdeaf95a9b520f86aea1a0b471d7aaa671b383528522417de8f2904

Analysis

max time kernel
899s
max time network
896s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 02:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 7KB
Sample260808-c4kdfsydmg
SHA256 fd237c710bdeaf95a9b520f86aea1a0b471d7aaa671b383528522417de8f2904
MD5 fa235717ca0ca976035d0664362f95a0
SHA1 58715c5db1b9f69dff3bafcf3e85a3cc0a1fc6b8
SHA512 224936d263986be68326f3855a9e3e587b13e9b380872d55bbf5222e9c700fee70ab0a083c6a4ec49ef1615af62b7ba98685be5fa1e86e92227661b27dfca6b5
SSDEEP 192:XctFWXpqD8yhu1fUFOpWUR8I5eHxw4ctBE:qQXUfhu1oO8tI5O5cE
TLSH
T17DE14A185984362B44738B784BB32148EF61B0A79523E1A23ADC65970FB6350CED33CD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
516	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306302952697238"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2937465464-4167303362-2236413517-1000\{01519E05-C91B-44D4-9067-98F58B17B727}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2937465464-4167303362-2236413517-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 2940	3056	msedge.exe	85
PID 3056 wrote to memory of 516	3056	msedge.exe	86
PID 3056 wrote to memory of 1584	3056	msedge.exe	87
PID 3056 wrote to memory of 1584	3056	msedge.exe	87
PID 3056 wrote to memory of 1584	3056	msedge.exe	87
PID 3056 wrote to memory of 3868	3056	msedge.exe	88
PID 3056 wrote to memory of 3868	3056	msedge.exe	88
PID 3056 wrote to memory of 2776	3056	msedge.exe	89
PID 3056 wrote to memory of 2776	3056	msedge.exe	89
PID 3056 wrote to memory of 2776	3056	msedge.exe	89
PID 3056 wrote to memory of 1068	3056	msedge.exe	90
PID 3056 wrote to memory of 1068	3056	msedge.exe	90
PID 3056 wrote to memory of 1068	3056	msedge.exe	90
PID 3056 wrote to memory of 3144	3056	msedge.exe	92
PID 3056 wrote to memory of 5044	3056	msedge.exe	93
PID 3056 wrote to memory of 3144	3056	msedge.exe	92
PID 3056 wrote to memory of 3144	3056	msedge.exe	92
PID 3056 wrote to memory of 5044	3056	msedge.exe	93
PID 3056 wrote to memory of 5044	3056	msedge.exe	93
PID 3056 wrote to memory of 4848	3056	msedge.exe	97
PID 3056 wrote to memory of 1100	3056	msedge.exe	98
PID 3056 wrote to memory of 4848	3056	msedge.exe	97
PID 3056 wrote to memory of 1100	3056	msedge.exe	98
PID 3056 wrote to memory of 4056	3056	msedge.exe	100
PID 3056 wrote to memory of 4164	3056	msedge.exe	109
PID 3056 wrote to memory of 2380	3056	msedge.exe	110
PID 3056 wrote to memory of 4580	3056	msedge.exe	111
PID 3056 wrote to memory of 4584	3056	msedge.exe	113
PID 3056 wrote to memory of 4584	3056	msedge.exe	113
PID 3056 wrote to memory of 1940	3056	msedge.exe	114
PID 3056 wrote to memory of 2956	3056	msedge.exe	115
PID 3056 wrote to memory of 2956	3056	msedge.exe	115
PID 3056 wrote to memory of 3076	3056	msedge.exe	116
PID 3056 wrote to memory of 3076	3056	msedge.exe	116
PID 3056 wrote to memory of 392	3056	msedge.exe	117
PID 3056 wrote to memory of 392	3056	msedge.exe	117
PID 3056 wrote to memory of 4504	3056	msedge.exe	118
PID 3056 wrote to memory of 4504	3056	msedge.exe	118

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x294,0x7ffa85a4c188,0x7ffa85a4c194,0x7ffa85a4c1a0
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1852,i,5719072611493916014,18393165165400262844,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - System Time Discovery
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,1097262195316465123,6768644528007291807,262144 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,17102658909951044706,18197208969056738682,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,177127986142425889,8525370227004119383,2097152 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,12740828654521911071,8149817847160680649,2097152 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4240,i,9529165482866092579,1500240156552481826,2097152 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,13426779939871862203,1693940371218822976,2097152 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:2
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,5965201321984106114,1292894838782601684,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5148,i,14153640060706196653,7236789750842291890,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,285148693569140157,6050249020807041950,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,285148693569140157,6050249020807041950,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3456,i,3221241896319569936,13381364253293618220,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4812,i,1237662390734278968,12081761333641936825,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,9377966071433073540,5837919198100194799,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:8
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,18154144497690918220,9616792763643842218,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6136,i,17165191918148313946,1878335363590532516,262144 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=760,i,6557128071385220364,2259797123917013017,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,5780699837346833333,7635478220630941738,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,16825341112457788540,14009638380223020915,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,3297911964474571839,8069579550972135710,524288 --field-trial-handle=2072,i,5687286992775527225,6612095758061314603,262144 --variations-seed-version --mojo-platform-channel-handle=1068 /prefetch:8
  2⤵
  PID:4504

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4268

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 1b34a7a8f8be2af475ae243a4ce9f113f46f47da851e2d805ada530b9233aaa4
MD5 82d6b3a196d9833bb6fc5680225e9f85
SHA1 5fec8762948288d76c49f79e6ff3fb9ead966a34
SHA512 46503424eba148cea088ccde37bb7c9d4eea8830ffdbcedb6ff9fa5e0d380e99c5ed7c2ca7ac9a8c4ea338954e58716d24954896e4e247bb399a4f8444bb5a5e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7Z:fwUQC5VwBIiElEd2K57P7Z
TLSH
T153B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
MD5 77a76342e47369b91c295856d0d136ad
SHA1 bac334fe99bd25a56aeb5cf09b273fd394730180
SHA512 5594ac61907f341c5e00a7e62a64d33fde684c855aa9b27d0c2756986334fbea5ebaf894d13dfedefe84d1f7ad65aaa17fb6b204714ed08460f06e4ed17ce733
TLSH
T1AAD012223A48F441DB4942709103CF453B26146024579A06E259D86D58B41D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
MD5 6503f091cfa7258a2190ed65490b1bdd
SHA1 d722a7fd3cd82ec30e4846b9511ec1c22b9dacfd
SHA512 5f2a6a53348e4e1b7810b77abe2dd4c597357ba365cf029977f0efbbb203eab9dfb7771c9edb3561b6d22c8b7354c34611905cfbaab36c763b9d3334beb40b4c
TLSH
T1BAD012223A48F441DB4942709102CF453B26146024579A06E259D86D58B51D453D66C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 48c3a52c2b16acdb934b320dbe997a2aefd6de54ad9bf7b5119aa3f177edd963
MD5 956335d6e6e868bf11ff35f92e0de9fc
SHA1 e1ec3e97aba1727220d95dd47f0cb6c016d808ee
SHA512 a8bc4036dfeda0b2c6f5ea1930fbea68a240fcc22d772cdb3b7c1cb3d767480d8939d621795c9321f2f6a5e3cc606052d7add78235edba50699341d147321402
TLSH
T194E0D8052394E1D619039B4BF878521981F07226ED4FEC7B2714784F24C000052E6CE0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
MD5 7b9f1e9c5ca7be7a0fd051116a616b72
SHA1 8a88b30a2e0c8a2c94e5512f0a5bb56573a6d8b9
SHA512 2c13705b178f640305a8b7685e6b6a7e49374c53b0713e7e54da2205c3c290a3f79ad3280c111728c5383ffc23941c73a23b34049e67b876aa1915e6e2992364
TLSH
T183C08058798C845DC280187FA726F400177155115817962705A1FCD031406A01F2D124
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 cba77ae9e33a326110b643e8030d34669fb64e714670d827ce952b25bab4b083
MD5 98795a0bee1657c731fda5b61099c31e
SHA1 81b0609bdb0a24e7b33bbbae8d05816aae268619
SHA512 0e208306297407e9ab60fbc678ae72d65b56dd204eb093a33118994f882d22196aaa62534be41328bc75829b446d57e424feef6ed10351ca11efa21d05a5e4b7
TLSH
T1C771C20402AE05B2F3A20F72E9D00650B47183796E371DE732F6E87CF91EF22812948A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589640.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589640.TMP
Size 3KB
SHA256 0630d81ea2a08ea868ac93d55bce165fa0a73e7cc3adeaa477e0398e82d84f08
MD5 6befdd0ea677df87816805308aa62af6
SHA1 b077c5b6a771c1e163f431853459745ec57e9c11
SHA512 a23e3befdbc1a8e14d5ce6457e5b409702efcd3c565d0985c08040efeefd3a74f79b22c1ce2937f03c2aefc69498473da9a5634cbc9c927a6f1f8dcf965e5341
TLSH
T1CD71C40402AE05B2F3A20F72E9D00650B47183792E771DE732F6E87DF91EF13412948A
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 945B
SHA256 8ee3c8fb8eef0074a078d35198a54109900ace32bfc80ae5b56ab6816c2b0773
MD5 de7a98437a256dd315ce3b99ac166194
SHA1 9db312fea204226deb6ea5c546829da390b515d9
SHA512 c242bc276aa6aabef1227dc584cf9de10d043013aa34cba03e9bfdc39dcd2bc688ec9e8edfd292d5a85f21e3a7fba64dc53b804dfbe62af0405ad4cdb4ac6e24
TLSH
T1FB117DF3C7D1855EC91516F05928AE2BDE2D0506821C7C29C9D4EF6BC3E3076E102A6B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 928B
SHA256 76cd03e6ff6710d45a7903363077841d5114fb93261be90736a492c208e5e251
MD5 3132311593ca0f82e4f945d3c45374ea
SHA1 1448191c83639dd409b3415e2becf32e5a4af059
SHA512 37f0ecb474681d110ee4d50b1b5925aa0cade1f04bd88bd5ba50d4761b6e83dd9b9fd1f2405f2dafc9610709c2e51776c5f518c4d943f036d11fa9e9ff04c3bb
TLSH
T1EA1190F3C3D585AE890116F05928AE2BCE1D0906421C3C29CAD4FF6BD3E3075D00255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 b3d73846e7cbb02fce42c75ca5a05f4dda3b97d73247f8f74a44bd31b8099363
MD5 48dd52edc5b9989238841cf6d21a25e8
SHA1 6e1a02372f8ad2d26612b09c6c4e52978a0790a3
SHA512 8151309f0093e3af21478fdbcc78f6dc5d63d40a6ed1625fc2ff46c6eb0c1410f55f6c6864d009c58abcc72875d33fe828462f5597277cabacbe2e68f032526f
SSDEEP 192:sxZxRoyM/jK1Ml8Mky/fdslTSrIdpdPHW6+WNGYLzdQC0IgrJ:sxZxGMy/fdsxS05HbGY49
TLSH
T12442E8116A386977CCCBD20DF955BB93D6F90472A2500E58AAFCD91C04E6AED231781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 e77748b45ba36f40bfc47986400e5e8b1deb3496d493e1b211ec5b3203d02e29
MD5 b9218b19eee7fdb756818cd10be0caa7
SHA1 6c6a168afc4ef21cb8fa60ae249e358bdf3ce5d3
SHA512 4af069f0a794d49257bcdf42d689b3f68414b668c091470d9b682b14aa4978947097ede1e317b9915f6dbb537ed90ec68ab9c8998f817ae497e18dbe0721b645
SSDEEP 192:sxZxRoyM/jK1Ml8UQhky/fdsUThrIdpHPHW6+WNGYLpE6C0Ig5KJ:sxZxGqyy/fds0h0vHbGF4o
TLSH
T18652E711AA386977DCDBD20DF955BF93E6F5047392500E48AAFCDA1C04E6AED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 5a5e70157acfd3f1241b95af27dd14c9f9a8b00b0de2c3341b2d8ad264a80ae3
MD5 373cdd18e9b531996880fdd356f04fe7
SHA1 ce5952b93324babe99d608af9d418feba3951e81
SHA512 d8042b0771205549916d911a4ad30474c008b3adfd61084a10a3637205052bbff40a00e6974847204d719057ea417de9db182e7ae8a899b5cb9a4f4fe494b674
SSDEEP 768:6os6pD1WvxzWj8F1+UoAYDCx9Tuqh0VfUC9xbog/OVEILlWwJNprooi:6os6pD1WvxzWju1jahILIsNCoi
TLSH
T1DED2FA3B680CCB7E4F841E5CEC2AAF967DD801CBAB98895447FA444C03C77EA512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index
Size 1KB
SHA256 4ce7bd23a7940cfba4f9f37ee99738365b6ae6ac3f76b03ed56563be8fb3b5b2
MD5 802c42ee58501f1cb6e7158a10602190
SHA1 e495eb9f49bf48a08319d4fba08daf03612125ad
SHA512 7304b2d14076682f7773a8a6d36b5c33cf7bc39901609e3e4a523cd7a518c1a74529bfca6b712bacfb9ddd0f6eb3e2b25cd4a2828082870b6d7df673b9d4776e
TLSH
T13E31124D9EA089CFF8A041B71576F1A4737198DD5B15A3135C2C32327E2335A26575DC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cdb64.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\903a2be3-ab32-4cfa-b622-4e95ccd6e856\index-dir\the-real-index~RFe5cdb64.TMP
Size 1KB
SHA256 af0c35307d457cdff21843c022dd34143269bce5e31ac5e57a32b60c676bc470
MD5 bf893bd6322e6ebe2365ef90066a7d07
SHA1 053f82abc1acc6f638bb47943c7dccddabbf82d5
SHA512 edbc20a788f2e1bc9b836728d668a4f2ac96d19ce9f5646079bc472c387f1a3d469a383163cfa9e0c97f1fd35632683636d53ea423babb6035f56ece9e17d33c
TLSH
T14B31254E4AD14D0FF884507B1D63B4F8733588408311B393A87C62399D21B8D1A5F0DD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 da9e141f17356a1f570500ee2d6a416c8acc00183bd4acb4556244553e07ef32
MD5 a182a8513622347f8d28a6b49f1a2f40
SHA1 37b7c7ac709922b4dcd69d9fa05d46b41d92d8bc
SHA512 1fa8b97b9313af0a8a200f6a3af6a0aacdb44caf9242dd7ebb9055023ffaa0aeb3df72438533e4b1770bdcf445bfc2a1fbe4b4008474e38602a6d19e86bc1387
TLSH
T1F5E0DFBB6EA76820EDABE3E7287194B50641382CC805BC4F686AA6C390B13567846C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ad45e988a44edf1d6420047f893963c11b6567a5fff2bc8db1a5689004145830
MD5 08459dc8593f75e2c86cf99c4602d68a
SHA1 11eaade44d0b09c3f080a6a3192bb7d1b682a4ac
SHA512 8015bcca79e7bc84032f0114b796819cf320b63c0311d2cc52ff1986ada0e395a6c8babd41d4bfa2d8ff14a440b32cefc643cd08f1f22d64c6504c23401f11f4
SSDEEP 96:KUAAKtePOrqKgAXe12KeASBCBuC0UEC2MzxgyCKYngICcSabgH:iitMlh90
TLSH
T1E5C1040271BB02223D3E291CA29997664F42B6633819F52B77AD00B15DA7F344DFC9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eaeee0de-215a-4104-a8f3-bc37431bf2b8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eaeee0de-215a-4104-a8f3-bc37431bf2b8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 6cab2e7de1a66c710bfcd15fdd21db9d98387671b38c3da4b128d497c1c9643a
MD5 7e561c1397d056cf53eb2988a3f54488
SHA1 29b4c9aada9ea857f2806b679a8ea7adbf3db40c
SHA512 0ee915b4f2eb4e0cbe5b6ad4335bfc71bd449f6e099b0b4153307bd71759dcb70daf680174585060a0c46e281994d6aa0fe88eebdd1a7b1a89379d5161db696c
SSDEEP 192:u+zLsNIDQSnlZ7+3vHxQmiU1yWn4atb0zO2bHTQ+2j2LMtquAEDr3SNVBn+xsBuR:RsNIDjQvD4a9yO+TQ+2TiEDWNv+xQAQ4
TLSH
T133726C35FC389C271AB3A245F94B32239EB45067DAC56FD4C6DC6E1C06CB69C330A926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 5614492f72a86a9fd133a564eef3048d92cbf23d6046bd468459a48cd9c8c4ea
MD5 5564127a6f63d2cdc2bf207e36d7d55c
SHA1 90720f3cbf4709f56edf433da81c39f20343764b
SHA512 f0306d6efda9eef4b0df3a5017eda3cbf35dce0dda6ff982df50caf6fd1b5a3272befdca1457e3e9c5d44a3371861426e5757f0da91cb00a193aabec872ce078
SSDEEP 384:uZcIhsNIdjQvD4a9yO+TQ+2TiEDWNv+xQAQz/8h:MhMhIOuQlTiEDa2xQAQz0h
TLSH
T13C928E31AC389C7659B3A245F94B32138EB880679AC56FD4C1EC6F1D05DB66C231AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 4efbaaaeb81382b86e992800b1259e49b0273a4442426e9b69ea80c18a5a208b
MD5 a06e90bc8d05a7f83ba6f037111428e3
SHA1 1197639900690908e5239bff399f88f27a3f9869
SHA512 2b118dfe69501e00e36b4e4bf29ebd6ec08d36a0974d470033cb07a372eb4f9f0c7378eedd2b708f04f8a43c987767300a40d6cd5145073a4828934406b7b102
SSDEEP 384:YiFiZcI2zsN48TUNTUlIlAjQvD4a9yO+TQ+2IiEDWNv+xQAQz/8h:jFQGlwgjhIOuQlIiEDa2xQAQz0h
TLSH
T1F7A27C329C68CD3B6EB6AB49F94B32138EF44077C9D5AE94D2DC6E1C11DB59C230AC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8b978be67e395f29a0ffdd1f6f1c71f55aaacdaffae3a491a05df80aae8f6a87
MD5 4f90774816346bd3217fe1519a708ed9
SHA1 215a74343289170494ce2403d1136cd940c35438
SHA512 c9d10711be9af6ff03175949c362335725a0edc68c4b6d7f4e119efe44214a61ea8a3130ff7640291d67d5d24d32c10f3ba2731ea4175622229e67ba5f8ca51e
SSDEEP 192:qONT6O7+3hQmiUyNpGttb0zO2bH3gGFxU6:qONT61IGt9yO+LjU6
TLSH
T10C02E8396C6C6CB75BF2AE45FA8727275FA5103BE9962F80D6E81E0C00D765C2347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2efdc9ff2784400b1e3eab9e3bb0a37deed1bb6c2f3adeaef19fa523a1f36def
MD5 42e9490321457b3a7921c72832631dcb
SHA1 aee4526a572753c21b505a299a4aca1da0fe7bc4
SHA512 094dfd5c42525207204f32d923aa03073ad141592fb246d37f103a8c0e84dcdf628182f223511b3546e9f391ed795517c8c9fb1095505a2a84bbec6a3c3ed827
SSDEEP 192:NJON56O7+30QmiUy7pIttb0zO2bHTQ+2j4cNtquAEU6:HON56SwIt9yO+TQ+21iEU6
TLSH
T18F121A35AC68AC771EE3A544F98736279EA5012BEA866F80D1DC2E1C01DF66C334AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f0a5080a-8753-495d-b038-ec829492f4e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f0a5080a-8753-495d-b038-ec829492f4e5.tmp
Size 19KB
SHA256 ce4bfa3a375db217524522555382d4c03998103213ba2e82d51bcb36a337178b
MD5 108da03e0f2f835e990dacb9fa40c5ea
SHA1 78f7b0e1d4c5828963a2202a46c6eaa3f707ed69
SHA512 54ab656a1418c25635ab4917fdba17c418fd37e54c68da7c6cd49d7e8ab117f677f6083894446f68f978e880a4a246ea7b7b556c7c5624a19791b12155d0caf8
SSDEEP 384:PZcIhsNIAjQvD4a9yO+TQ+2TiEDWNv+xQAQz/8h:HhVhIOuQlTiEDa2xQAQz0h
TLSH
T117928E31AC389C7759B3A249F94732138EB890279AC56FD4C1EC6F1D05DB66C331AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f7939cb1db63c7d245e13288cd9caccb0966a5b17f881b1133309a93d959082f
MD5 b34f076cfb7f85e15488032275dfb956
SHA1 b61d3f43e1936bca802ab3ce5b002cda217dba81
SHA512 ae43e56bf203f0d0c9ed7d43bd07db7cba3a15f074b8ea6d4e495d8179d4bd4edff871281d9683da7768b7b2356bb7f6e2690e2eb85bed736aebcd7cb978abdc
TLSH
T1C941D95CBAEA1144B7B76F5A9BF7686D487FBC332E4B946D10110D4F0762A40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download