c3e81bc3068948497d7d13288781ea9b6bb647d9199e210cffc19741b4267a1a

Resubmissions

08/08/2026, 15:33

260808-sy9zxstvdx3

08/08/2026, 15:32

260808-sysqmshm3v3

Analysis

max time kernel
899s
max time network
762s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
08/08/2026, 15:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Home.html
Size 17KB
Sample260808-sysqmshm3v
SHA256 c3e81bc3068948497d7d13288781ea9b6bb647d9199e210cffc19741b4267a1a
MD5 a87b92e9ea3a5ecab9760d3c818d13b2
SHA1 324f55baf58e3064f208a4fd298643eb7e94aef8
SHA512 04d65e4da5ad6b515f609b02f12a3194d1e2e6b3c20a2bf3b7eb0bca75300f98b73b0e5e97cf8894f190580d0f838fc2a7301a5cda81835fb53c051d6b2b4893
SSDEEP 384:yTmmsqhZ9KjEWOQPzse07mY6oMtiCTfMEENvA4IDd5OoOhYVtu7:yTmmsqZ5MzqcaEENWd5OoOhYVtq
TLSH
T1DD72F83310CE2C3F0323535A3AA67B4C70B758E6D2A68851F5FE86651AD1DF96827237
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2856	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306769897217696"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1079202589-886135813-2527035092-1000\{6C2916D5-86EC-4EDD-95C6-89EC6926CE78}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2040	msedge.exe
2040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe
3076	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3076 wrote to memory of 6032	3076	msedge.exe	89
PID 3076 wrote to memory of 2856	3076	msedge.exe	90
PID 3076 wrote to memory of 3860	3076	msedge.exe	91
PID 3076 wrote to memory of 3860	3076	msedge.exe	91
PID 3076 wrote to memory of 4996	3076	msedge.exe	92
PID 3076 wrote to memory of 4996	3076	msedge.exe	92
PID 3076 wrote to memory of 4996	3076	msedge.exe	92
PID 3076 wrote to memory of 2252	3076	msedge.exe	94
PID 3076 wrote to memory of 2252	3076	msedge.exe	94
PID 3076 wrote to memory of 2252	3076	msedge.exe	94
PID 3076 wrote to memory of 5132	3076	msedge.exe	95
PID 3076 wrote to memory of 5132	3076	msedge.exe	95
PID 3076 wrote to memory of 5132	3076	msedge.exe	95
PID 3076 wrote to memory of 244	3076	msedge.exe	96
PID 3076 wrote to memory of 4656	3076	msedge.exe	97
PID 3076 wrote to memory of 244	3076	msedge.exe	96
PID 3076 wrote to memory of 244	3076	msedge.exe	96
PID 3076 wrote to memory of 4656	3076	msedge.exe	97
PID 3076 wrote to memory of 4656	3076	msedge.exe	97
PID 3076 wrote to memory of 6056	3076	msedge.exe	99
PID 3076 wrote to memory of 5904	3076	msedge.exe	100
PID 3076 wrote to memory of 6056	3076	msedge.exe	99
PID 3076 wrote to memory of 5904	3076	msedge.exe	100
PID 3076 wrote to memory of 1832	3076	msedge.exe	102
PID 3076 wrote to memory of 2700	3076	msedge.exe	106
PID 3076 wrote to memory of 4712	3076	msedge.exe	107
PID 3076 wrote to memory of 2628	3076	msedge.exe	108
PID 3076 wrote to memory of 776	3076	msedge.exe	109
PID 3076 wrote to memory of 776	3076	msedge.exe	109
PID 3076 wrote to memory of 2040	3076	msedge.exe	111
PID 3076 wrote to memory of 5964	3076	msedge.exe	112
PID 3076 wrote to memory of 5964	3076	msedge.exe	112
PID 3076 wrote to memory of 3792	3076	msedge.exe	113
PID 3076 wrote to memory of 3792	3076	msedge.exe	113
PID 3076 wrote to memory of 2964	3076	msedge.exe	114
PID 3076 wrote to memory of 2964	3076	msedge.exe	114
PID 3076 wrote to memory of 5664	3076	msedge.exe	115
PID 3076 wrote to memory of 5664	3076	msedge.exe	115
PID 3076 wrote to memory of 3028	3076	msedge.exe	123
PID 3076 wrote to memory of 3028	3076	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Home.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x28c,0x7ffa385ac188,0x7ffa385ac194,0x7ffa385ac1a0
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1796,i,15423732766451922774,18268187166781697520,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=3168 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,2100341019630458764,5806000031897249508,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=3188 /prefetch:13
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,14769349060713071849,5166992068172675319,262144 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=2824 /prefetch:2
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3660,i,15437146655192885160,15013262897771576841,2097152 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3664,i,2204321984071598769,16057768152068633598,2097152 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:5132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4260,i,2063966304122951654,2677863463191605787,2097152 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,9758265862132889616,17990033731921290318,2097152 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:9
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,8445015239286398320,15825851669958974388,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,17341538946328839855,4060931180609108409,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:14
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13764507105041654810,11192034243913409058,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,13764507105041654810,11192034243913409058,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:14
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,4179548646953868513,17622620081085350609,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:14
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,16840458347808631334,16938672720281379292,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=600,i,13773805285506311548,11350065057729117413,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,1923410465411418040,13584800840629351347,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:14
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6184,i,1537205672426962427,10810819678841339482,262144 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,17376146057092119525,13434234042640622687,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,7844893439068420578,9392523077672708884,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:14
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,15120226877251537603,80907832451813175,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:14
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,1976824169118282457,12020996937926605203,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=4108 /prefetch:14
  2⤵
  PID:5664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,14033487797938954888,18354935507789813251,524288 --field-trial-handle=2828,i,1586008742064162150,3265478021139587648,262144 --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:14
  2⤵
  PID:3028

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4664

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1304

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1820

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d6015222f1312f2737e561f5cb789cba16ddda90131d3af679ca4d112ce8de9
MD5 c1a7f665f2c508cc6aaf2ab720e9bbac
SHA1 f10047340073ccfd0dfa0a1ac50f19824703c6c6
SHA512 3b4b2c7997cc3a8e382662b8ab84779147222db6dcf3b614fe3750efba14aade687800978cd24780f580eacb766daa34fe0e560c30dde1f463983613dda767cb
TLSH
T188D092693B904E08C5C4207228E0A6A6A2604A31B82E024840A2B23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0c59160a51f6f3c09faaf3593a45b43a14b1da3961c2cccaed8346e6543c20e0
MD5 a2b289a93fce671046a365170f24567f
SHA1 d545bd953aab467815db42a92fd1d54047d5e6af
SHA512 ce7bb8aa1a40366ad652feb8233f60cd807014cb9e8ca999c2c1931eeb40a4afa1dc2c94c60d58639e2cece8c73d3a46da7a30c651ca6da0834f57b890bd2572
TLSH
T1CFD092653BA04E08C5C4207628E1A6A6A2504A31642E024841A2F23CF8A5ED6073F4AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 48959b1d26fe5b0fde276872f68977f82bd2b08b5afdab3eec3485024e1238ef
MD5 d7faa6139d0c20894f916ea9a1161500
SHA1 60826ba0fac6ef9588e5aaf5d9f8f489e4a86894
SHA512 ea46e568e50d12739df8741cbfe18a5151c32a7b6e8fe64d3daf38b0e597dc33905e297e8946eb5806da588f8c2f9ed03667d71724687218cf5ac535a6c33531
TLSH
T1D5E0269416CAC27FBA006B8F576C5B0CC2C1771ADAC8FD0B570884847003440E2EBAA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 94a478c96287e30662b1a7a81a4b7e34e8bf5de3b54c9c88872f0d57939c9c06
MD5 18dbd1a55c69119d91c067efbd6ffbb2
SHA1 4dea471d933ef11dd4f82adaee4823de7f87b7e2
SHA512 e5049bf65564b188f9ad902f5e1e9a407c88b33cfe548de916ab0f8b778993e0a99824d4d3ed9ec71ce74478f4110ac476de4281c57b7d4021a60b01e2440e51
TLSH
T1A7E0208515C6C21D590064CB537C578C82D2370BE6C9E95F27098884704156166D3D60
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0cc664e3e961dd169b658b52fcd9f4a6f0af1e813c80dd4dc137dcd8954f0c41
MD5 501592f72617dc7dbc97449ac8b5730a
SHA1 d8e3428d630e7a760ade2c0304db3169b26895ba
SHA512 cdcebc12d7d44686a420d168ec278b7743da6513645f366401b07106172ceec6220418ae03c06546e9cb3e2560fc61970bc18c19485a64330c73c3daf2023b67
TLSH
T196E0268434CEC22EFB1468CFA3BCA70C82C1374EDBC8E94F17088C847005840BA83AA0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 c2a46cd5f2c3650bb8f3c5df9180dde3b7a11458236b1a0d1cc841014f4be1ec
MD5 10630c86669baf327e8bb5174cbf5f87
SHA1 0113784ae1612bb8dadde203877532ae1c23ea96
SHA512 c25ec05689d0d40890ad5d59d969b9ab54e88c2081ca84f76be72ebff9a77a563da99f5c3f1b5ea1f5e1730975e0560540773d294cd71d4483eff967d57e4d9f
TLSH
T11A4185383333E5C1CB60E5F290E566953235F54A0B0BBF9370456EF88886B2C53B0E64
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5978b1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5978b1.TMP
Size 1KB
SHA256 18b9c47be5f711441c90591c3d56311f2507095747510ecc11e22b584db0ad99
MD5 80d6e48434a70ac7d56a0d52b9c07d40
SHA1 6f70081753bcc8b1469af75199a0d47137b10eb0
SHA512 0c42e389f089416ee2616aa14e7e127d2d01bcd4095f4f7e1092a73ac7f86cb255934683d8f6e8e68429c69ed190e4c066dab54ba81cd0b3ee907873800f29da
TLSH
T1C94185383333E5C1DB60E5F290E566993234F14A0B0BBFA370456EF88886B2C53B0E64
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09dd5fdf-a799-4d78-b976-bcbe15b1567e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\09dd5fdf-a799-4d78-b976-bcbe15b1567e.tmp
Size 2KB
SHA256 17c954b9f80984e0d00bea83e9f8c2370a902986a80482fe575a5b882654006f
MD5 bbe6e90ab33243f3a412bb11b4652d81
SHA1 cf4d1c02377370b1639c84f698040e09ef765390
SHA512 1e74c754998a700540c87c7f22e805ff0db30cfeda1e37412679e1fc21d54c8180e838e087bf2dfc49dafaa5d2d88131b72ed3a98230edaa4749a4e68a6b2958
TLSH
T12341BFF743B4867ED90192F09A18AE2FCE2C0516432C3C65C9E0AE1B93F3471E14279B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3885f1a369983e7d755ee65cf0615b042199294fe4873077737eba79f8cd7639
MD5 22c4b465597ba7e5e79b11f0254ee118
SHA1 e8aea06b0ea1e27e993a955374e55304fa090d91
SHA512 2355f6290f16f87ae1713a5695ce3fe2c36b6dfaef973b93aae44c1e6e2ff11fa4089a34343235a3d36d6809dfd4f4cd763bcc93721379c775704feea9330d56
TLSH
T19B519CF783E4877ED90252F19A286E1BCE2D151A422C3C56C9E4FE5B93E2471E20265F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 6a0f5f75bb0caa7521b5aee0c43a55c8aa86f6a86a667864d249bc529b34f6c5
MD5 b2b0d7ad70a3c377444663a8f5803657
SHA1 5f71e524f98f4551a7ffd3a20d69d37ae7383b9b
SHA512 9a5952f23ffde594a8526a8b88edb6544a3b3574ef98f2ea0836c6903a22a7784fed7dedf1a114c91b1c6ea2056e05fdffe0f9094d5a72d652c3e10b56ccfe3c
SSDEEP 192:sxRiR/yM/jK1Ml8wb7/fYsLGwohHFSaSzoA8p4M/g6+WNIYbCWZ6uGeIgDWJ:sxRixl7/fYsLihlSaf1/5IQ6Em
TLSH
T1B652E915AA249A7BCCDBD20CFA517F53D6F81573A1901E44AAFC9A0C04E7BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8c6224af7b606c6247587842ccbf373f73dec864c5609d02bab2328783ff6c7a
MD5 3e6f834b9df4378324bb4355f947de73
SHA1 e4c89ac57e40fc9e88fba4693f5591741a0d8abd
SHA512 433f31dd83ef8084af0620dc1977453485c5047027ddd502491bd475b95692f5a010b32eeef4538f48d9a3241fe1e29c8fab21c802acbb2e1c4f0887ef4bd147
SSDEEP 192:sxRhR/yM/jK1Ml8wb7/fYsKwohHFSaSzoA8p4M/g6+WNIYbCWZ6uGeIgIJ:sxRhxl7/fYsWhlSaf1/5IQ6Es
TLSH
T10D52E9156A24AA7BCCDBD20CFA557F53D6F91533A1901E44AAFCDA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 eca090d667b131b809f4a8c9765a00d18746a5f627d1d57e0a425fb67c1df593
MD5 7e01300f0bd573f973cee0fec1bf9ed9
SHA1 cc761bd1b943c36dd3a902a9653aeab6e58de013
SHA512 7b5e407aa1ddbbf730e7ca615cc248c1af3b096255c2f6b2c39b3f32ec3f86a11718576116a416b5142c7794e3f200b37d310c33667408e379ab4414a6176cf4
SSDEEP 192:sxRiR/yM/jK1Ml8UQFb7/fYsLGwoKHFSaSzoA8peM/g6+WNIYbtkZ6uGeIgDsJ:sxRixq97/fYsLiKlSafr/5IF6E0
TLSH
T1FB62D815AA249A77CCDBD20DFA51BF53D6F81573A1901E44AAFCDA0C04E6BED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 b9272561b54008d0d9fba991803627d94d23778a3cb81bfece549d96711505f7
MD5 feb2d08104db03a67cff247ba8499e2e
SHA1 50db091f5c33be44bd11033c5963320524fb051f
SHA512 c3688ac6b079089279437b4afb37f8c1687a540f2f70f0b72e2a2def1bb4f6b65f5d584121a00fad35cb467294bb194dd0e4d92304c9e3be9f039d84819abec3
SSDEEP 768:FW7petWgikfn48F1+UoAYDCx9Tuqh0VfUC9xbog/OVbJ8WorogZ9D8zF:FW7petWgikfn4u1jaiyWT69c
TLSH
T1F0C2FB3B240CCB7E4F844E9DEC29AED76DD801CB97984D5447EB890C03C67EB521A5DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 271B
SHA256 d902da7df4d750efd65d7f53789215520dd63a9281422c9c3792a08384300768
MD5 e13902f3816d3905f97433c5e65dd50b
SHA1 17512b9fe1caa41eaae38b7f8c587668af8417c5
SHA512 8375d3fee0413ebc750ee2d4de39a1ce4b0d5c7077f77641400abe70ee8f12e57b99ddf892b4ab7003ea29e3f2e924b26075b28685547213dcc5395290481003
TLSH
T1A9D02BBF59B638109D7B87D19071046011217DA4CA45AD4E2159838720706766C17D35
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 137c69753914bcc9eecbdc736e1d967ac500d832e69cd5c388b42942f0ef0737
MD5 ef7c3a3da32857ce60bf629859e4d4cf
SHA1 1c39ed7f7dc0ef8c49adf446c1647840d21dd653
SHA512 af526cde24a495399e0dca2a2ba5b4ef8a7dfc5483866b58e9acec238869e7e55644ad5594d3a531fb012cdac1f2be4fd28495ebac86bf00293711072be522e7
SSDEEP 96:KRCHuC0UECWMZxgyCK4ngoCcSaBgCrH+zC+4AwmWgFNg+mK4jg8mc2edspc4Khyq:CCHuC0UE9MZSy6ngoJSaBgCrH+zC+4As
TLSH
T15C914110357B42903C7E765885B6891BA2C17462721CE43FBBAA01718F6BE535CFF8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 46611a965ed67420c99d11c3c0b58e947e80c411fe0374a1a7ef917211c4ae2d
MD5 0a2bbaab58a405fbdf3bc1720acc90d0
SHA1 49a4c002c023fee4041619a64cdeae7f4faa0cae
SHA512 32317dc8358a374aac61d0de6bb452732b4d7c10d4847a02757ee303a80876409f5aeeb19789b160dd3b43f8e03f682843cd7cbf666d78f5bbd815eeb9c0db9c
SSDEEP 768:Zp3d6cBqobGgvBxtZu4aWADIidy8LuKCmU7RRx+:Zp31xtZzaNsuVL9Cm8RRE
TLSH
T155F2BE7AEC56CE73D9F69240B2823A07AEF4D273D5C80AE498EC1B1E15C75AD0316C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 5b9cf06a03b2cf1a6007889c2ab6a3a1dbfb83435b682ec37afbab8d67eccb19
MD5 76f450a64bd04eca51d6c6c66dfe058f
SHA1 436c3c910a8c33233f164536f55c8c68097ad9de
SHA512 ae88b905025b37d02f6fa68acfedbecf72b8cf0ed3b95061df90e2323c085a2140a40e91d79d30ec263e92f9af3398c2d018a7d9cb84eb1c4e571068d9464b1a
SSDEEP 768:Grv+4UNbdh3gUcBqobGgvBdtZu4aWADIidy8LuKCmU7RRxN:Gbsbj3GdtZzaNsuVL9Cm8RRv
TLSH
T18C13BF36F81ADA739DF69240B2473A07BEF89263C5C906E4C8DC1B8E15CB4AD131AD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 ed8048d63fa01ee72ef35760ce769881e7b9ab03955f504c7c0d0586bb689ef5
MD5 7dc7c761d97091a5f8e931b638c0b6af
SHA1 08040f24e654bd7efe6f02c2cde3126519cafc50
SHA512 bcaa9d1ad1e0c45f1ba0203721831872cbe8dba80bc97285a3f1e51cf48e8c34acf808e96b1d9370a3bdbf51c1c3fe92ff2fbb80e0d6741d3598060edb5a363c
SSDEEP 768:1e3d6cBqobGgvBvtZu4aWADIidy8LuKCmU7RRx+:1e31vtZzaNsuVL9Cm8RRE
TLSH
T16BF2BE7AEC569E73D9F69240B2823A07AEF4D273D5C80AE498EC1B1E15C75AD0316C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 592637cacebc541e9d9b3701e92bedcb07080ac40f82ab81ff38d2c561ce0e0c
MD5 46fca49531426880c5f97c245b4e9eda
SHA1 2408668eb9f5b94e3dd74020130909a8324b1718
SHA512 52d756257bdecd0de5630dc797fab16f8ee1fa7e8a32aa9134b69c0384474aaca01484e0893a0dbd74406bf8874872bca6ca76e2c724aaf8ff24f19ff4d780bd
SSDEEP 768:ae3g6cBqobGgvBvtZu4aWADIidy8LuKCmU7RRx+:ae3GvtZzaNsuVL9Cm8RRE
TLSH
T105F2BF7AEC569E7399F69240B2823A07AEF4D273D5C80AE498EC1B0E15C75AD0316C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 a329b475bbde7de24b0a8735a87c7a168846dcccbbf1d9cbdf99e308082f18bc
MD5 43c58ca4d165a11494a8df2d19da34a8
SHA1 1f07bbf54a1afbb1eb0f210ce3589da385bcdd50
SHA512 d3b8de0728b4c60919b0f86856c24a71ce9bc480a65b3c90978f8a72cd32039b015aff1b561edecd55727b216874fdd247a8b6240acb38d4dc20578fe8f22c1f
SSDEEP 768:9rv+4UNbdC3cNqBqobGgUpZu4aWADIidy8Lq/3eVH1S1C:9bsbw30pZzaNsuVLoEH1d
TLSH
T13F03CF36A869CA739CF79284B18776077EF8926386880BD4C8DD1F4E46DB4AD1307D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 da31dba197072354bd185e35e04fa0888a1665032a49b86b829b3aad691e5506
MD5 3712cba3bbfeeb7915bb562b13923772
SHA1 e1a15c2605cda7fae4685f16c7b3161d955bf98d
SHA512 9aa83ffcc4bc4d49eefa84ea4cc76d9a35a01bbae18d7fbbb915d9cc0c6bd1cb2a8e050d733247a1c6fc925c88ebaac37225283d15033778cf76a51d99753ded
SSDEEP 768:jrv+4UNbdC36SWBqobGgvBFtZu4aWADIidy8LbKeVH1S1C:jbsbw3oFtZzaNsuVLeEH1d
TLSH
T10803C076A869CE739DF75280B18775076EF89263C6890AD488DC1F8E05DB4ED130BD1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download