710d54739972364a1c04cf4f395d0a56f1a0ecd4912b24c3b40e0d35110b71be

Analysis

user interaction
yes
max time kernel
899s
max time network
843s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/08/2026, 16:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 288KB
Sample260809-trljesbc83
SHA256 710d54739972364a1c04cf4f395d0a56f1a0ecd4912b24c3b40e0d35110b71be
MD5 ff67a6f80ea8829947bab1be4b9d9747
SHA1 76d053f083ac64f599dfe658b5ebd6b04470ebbc
SHA512 c59edb9136565d9ca30fc4cd76d355cca5febfa6396e6b1f375b42c3d1cf0c1a43fad3268339c6c61191a7a2fe38fa6fda8ac26d6ce164dc91f42fd1b35f1c4c
SSDEEP 3072:Wyc9eawzqFd6bI2fhUrSlCS9H5TjZAbgl9ciILWXFhy5jSe:Wyc99wzqFdyI2f+S9H5ZAsUiIsySe
TLSH
T19F545C726200753BB413DEA0A2BE6F0D3C35E62BDC1A47F8A991E530DFE2EB2111565D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1576	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307658678401761"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{B6CD982B-8917-4B84-960D-DC1B75AA002B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe
1468	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1468 wrote to memory of 4860	1468	msedge.exe	85
PID 1468 wrote to memory of 1576	1468	msedge.exe	86
PID 1468 wrote to memory of 4088	1468	msedge.exe	87
PID 1468 wrote to memory of 4088	1468	msedge.exe	87
PID 1468 wrote to memory of 4088	1468	msedge.exe	87
PID 1468 wrote to memory of 1632	1468	msedge.exe	89
PID 1468 wrote to memory of 1632	1468	msedge.exe	89
PID 1468 wrote to memory of 3868	1468	msedge.exe	90
PID 1468 wrote to memory of 4400	1468	msedge.exe	91
PID 1468 wrote to memory of 3868	1468	msedge.exe	90
PID 1468 wrote to memory of 3868	1468	msedge.exe	90
PID 1468 wrote to memory of 4400	1468	msedge.exe	91
PID 1468 wrote to memory of 4400	1468	msedge.exe	91
PID 1468 wrote to memory of 1592	1468	msedge.exe	92
PID 1468 wrote to memory of 5000	1468	msedge.exe	93
PID 1468 wrote to memory of 1592	1468	msedge.exe	92
PID 1468 wrote to memory of 1592	1468	msedge.exe	92
PID 1468 wrote to memory of 5000	1468	msedge.exe	93
PID 1468 wrote to memory of 5000	1468	msedge.exe	93
PID 1468 wrote to memory of 3196	1468	msedge.exe	99
PID 1468 wrote to memory of 2052	1468	msedge.exe	100
PID 1468 wrote to memory of 3196	1468	msedge.exe	99
PID 1468 wrote to memory of 2052	1468	msedge.exe	100
PID 1468 wrote to memory of 1332	1468	msedge.exe	102
PID 1468 wrote to memory of 1940	1468	msedge.exe	110
PID 1468 wrote to memory of 4604	1468	msedge.exe	111
PID 1468 wrote to memory of 4236	1468	msedge.exe	112
PID 1468 wrote to memory of 4856	1468	msedge.exe	113
PID 1468 wrote to memory of 4856	1468	msedge.exe	113
PID 1468 wrote to memory of 4716	1468	msedge.exe	115
PID 1468 wrote to memory of 1812	1468	msedge.exe	120
PID 1468 wrote to memory of 1988	1468	msedge.exe	119
PID 1468 wrote to memory of 1812	1468	msedge.exe	120
PID 1468 wrote to memory of 1988	1468	msedge.exe	119
PID 1468 wrote to memory of 4836	1468	msedge.exe	121
PID 1468 wrote to memory of 4836	1468	msedge.exe	121
PID 1468 wrote to memory of 3844	1468	msedge.exe	124
PID 1468 wrote to memory of 3844	1468	msedge.exe	124
PID 1468 wrote to memory of 4972	1468	msedge.exe	125
PID 1468 wrote to memory of 4972	1468	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffd3431c188,0x7ffd3431c194,0x7ffd3431c1a0
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1996,i,13290645002866157199,5266204391493129700,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,6003223090543448136,8326399843604961010,262144 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1384,i,15589975598411725395,9449638861499224060,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,16976927274825032034,13062380068834133328,2097152 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3456,i,6856785942382618396,714112738510380180,2097152 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,10865247105918850801,15626199505921576902,2097152 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,8132998243583477073,10787111145918670974,2097152 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14554856752555330133,14488898408240241325,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,4351311097336946678,80469091248201342,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,455010563889283962,8566103438413627078,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5732,i,455010563889283962,8566103438413627078,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4348,i,9165751677998166638,10740531626596013841,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,6118940081802408021,9076853327306390415,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,15086131820060908264,14866212000154681385,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5152,i,1097533830731990478,10909435602342541277,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,15501069867359004574,4379550930293046091,262144 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,18427374073346662900,6574909442950194677,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,18142413137768482344,11312938050802904259,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5564 /prefetch:8
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,764487545603957138,1768347943638515782,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3328,i,12021463723028518840,13572530805833062935,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1044,i,7635887877753224926,11644943803359028860,524288 --field-trial-handle=2268,i,7552390262422954464,507142127106235158,262144 --variations-seed-version --mojo-platform-channel-handle=3316 /prefetch:8
  2⤵
  PID:4972

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1992

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 ab43076390a13c94b75969c67e2d039969084ef834afa110eddf56bfe88d4eca
MD5 904260be2e464761d1e662a73b7149ea
SHA1 3d177a5a41181e125cb0a630d520499c5cf71772
SHA512 6c0fabe38987c16734e6a57b39cf470ad67e8db75ca0ff58672e362ae0e2d40a21763d1aeec282c01c3b375baebc177a338afd91ef3c865dbc71dadf2e4cca4e
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P73:fwUQC5VwBIiElEd2K57P73
TLSH
T108B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 a2c102377c9ac4890fe56c27235f1a52bd39339c05f4f2135cd2a8a0a49d04da
MD5 a25877ce8b9885bf32b1c8e3db80b7f3
SHA1 5e3ed1e92a51445ff9f580d484d9e963c2fd9c05
SHA512 8027afeb4e542b61fec06a959701f1a2ada8b34e545a7a5425b25b12db0cd02f4ef0c2ab115857813aab4fa4fad80748410115b88d68ec4645d4173a8d3969d5
TLSH
T1B8E0DFC914CEC67ED608A48761BC670CC2A0364E9BC8EDDE5F1888983201850A7D2AB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 558B
SHA256 4a2d509286edebd529c17b51bfb8342a10ddf8ee1530b17be7f548ffae5f8ff5
MD5 a0fc248769ea5ef9c8bb067c1dea1f65
SHA1 b2890101a42505b815d95968eb8d32adec5fb5fc
SHA512 28f362788b9e289f15921cf298d69b521ec63a6bd793156b19abfe803eecb0a3232849f4b26e0fbb96cb63b2a45a43c9a2ef4201cf316402d0be1c77f651c75a
TLSH
T142F08B4D52C0CB7BCAA4914B95BCE708C0E0B2CDEFFCCC2A220978CC268301093D59E8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 aee34167d35b5d6edfa3d0327cb390a0c505206c39e25669d005829f962182cb
MD5 c852fd020ee176278d873e2c583536a3
SHA1 6101ae5aefdeaaf1639f934ce582882e887117a7
SHA512 9f058e27aa4b784b1cfad507efa4e6a940e6993aaaacc0764d97df59d881d39a001859a61482d469267cdf07183d107ffcb261d1c9404fc46746e5a6f43afe61
TLSH
T14BE020C885C7C21DD50C644761BD6B8CC1C0360F97C4FDD7670088D43301484E7C9A74
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 9f80cd20f4ecd26937c5a68ff2f4b6bc580b2a9b8398ca8c878467caebb46e3a
MD5 235142df952bfe7f19543c06414e02c1
SHA1 e83429d6fdd3156216cff71a2246c6ec86dfe01a
SHA512 7b19d5ae90d764389ea4f08d1ef3e77fc187c6bb52aff4ae94d9cdd49491742284c0f5907521763772526b1e397f5869466e9105dba3b0ff52a7dc010022685e
TLSH
T17B61D4386E1784A0D393E1B375D246E034658AFBF556DAB6C12C5860261772FDF1703D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bb0f42e9580eb5e102dc77be26b35a36fdce198ce94d80d6c7b9d4fc27d03a97
MD5 cee84e0695a930519a58f866620ccaa8
SHA1 26bc92248c524e26f84beb8b79455ec1c0622a19
SHA512 9a2f9e757c1cbf12fd8bafe81b575c7056e22940878e1c490f95cadcedc9d13c908899a5deaf6e3efc51e426f6f19a7d6005871b773786327f86844d40135819
TLSH
T1CC416BB7C3D4867E891556F09A25AE2BCD2D0A1A422C3C16C9E4EF5BA3E2471D101A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 22428c8cf6995ce3d0900df26898673a2549a05a714cb08a73f02479b99beaac
MD5 c56705a735f6771e52cc7adb9e9e80c4
SHA1 b2e9cf4a7c6f23a6b2fd8885e0445502070c230f
SHA512 a23080137ce44d10c05151e66f9d5a18ac469cc7505567b805e3d78e7f9d36c9c9b9134184035718513dc43fb6684299b1e8ab31db2115e64b1f77efe6cf627b
TLSH
T19D418BB7C3D4866E881556F09A24AE2BCD2D0516422C3C26C9E4EF6BA3E2071D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 41c32756ab2e24e1a7e287e9175cfa7118056d955c242e8de243a86705916009
MD5 ec24a0899df6210812e0b7d84f0a3f64
SHA1 a4b98fbb2bfe3037eff67fbcb96f27e450961290
SHA512 80f20ce1c78d643424f0e43444119900700f5121c2ddd232986238f80d13cd3dfb288e152ffe3c4fb07f9d30fe7877523c9ef38b4797c989acc6b43bda32f369
TLSH
T12D419DF783E4877E891156F09A24AE2BCD2C1517432C7C6589E4EF5B93E2071D10269F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 3652f6f773a6e88330a252d96536102de43a2d803158cac6169ab3f3483675fb
MD5 3523c2a643c8ae1bda427213cd1e4833
SHA1 10a850977fbf03533d7194aeb642b61eafb83f0e
SHA512 f5032faef5ce307770c5abafed9eb7cad8dafec10646c577fdb0edcd7e07e97ec36d064a2230335acb09617e603f51031cbf543796ba7fa70d0c85e19fb8c085
SSDEEP 192:sxZbRfJyM/jK1Ml8Mkv/fgs+ZuIdpdsHW6+WNGYCkXvI+HIgrJ:sxZblMv/fgs+Z/uHbGGIi9
TLSH
T18B42E7116A34A977CCCBD209FA557F53D6F91472A2900E58A9FCDA1C04E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 19c11f180ce0e65da90a700b70e78b78da78163e5dd6d14ef2dd910847521cf5
MD5 cb90efccd9dfe25b01ab8559ed44c5b2
SHA1 83a1b34f85f293ba69e8db1dbc63d2b6340cf968
SHA512 36685c24dcf15965a4970e7fdfe179577b773b94a1b2289c9cd344a7cd714e0743ea42cc5e4f9d9c071fa68c466c05bad8f996f4520c5625312c90a1422d934e
SSDEEP 192:sxZbRfJyM/jK1Ml8UQKkv/fgsCOYuIdpHsHW6+WNGYCd0DI+HIg5hJ:sxZb3qZv/fgsCOY/MHbGSIiN
TLSH
T13552E715AA349977CCDBE209FA517F53D6F91472A2900E54A9FCDA1C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 671476aa82262721a2909a3fc3cc7f2f0c497e0ff624ff0a207d9d6de8e7abf3
MD5 3becb296717e56be98e567f1df12f132
SHA1 21b485b58f7ae0ba57c35fa444a84c58ca7f70ff
SHA512 b135860e0190aa0711ae2023cf6a2ee3ae1aae9be73db65dcf1dae00c4127d9103cbfcefca4f6aed1dced7ce72c0bc19f767eef7dcda7be93a485beb8456aaaf
SSDEEP 192:sxZbRfJyM/jK1Ml8Mkv/fgsCOYuIdpdsHW6+WNGYCf7vI+HIg5hJ:sxZb3Mv/fgsCOY/uHbG3IiN
TLSH
T19952E8116A346977CCCBE209FA517F53D6F9147292900E54A9FCDA1C00E7BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d2d53fafd17b8065298f903a769449342ec587cfe535a829ba811a2e625a60ca
MD5 117ff174cd546be63d9e7107e720188e
SHA1 af1e74efed842c761226993a579db6f07c272fcb
SHA512 225fc1387350df465a8cfa30f0ebd62b7c48d2571cdf6bcbdbdd5c4f41a87105313c504f62abbf8ce7d61ea0bfe4f752dd6907436bd850143e1fef6d63823c92
SSDEEP 768:1y8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVqroqY:1y8bqn+WvSCt6u1jaCZLbWVB5
TLSH
T1A5D20A3B280CCB7E4F845E5DEC266F962DD801CB67988D4447FA894C03C76EA511B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\temp-index
Size 816B
SHA256 7ed6c2432dc45da3770a4e6087287a90df6224d20a92105ab74ad6d4dcc51a0e
MD5 ffed34b7005d60c9b8ff15d3cf497826
SHA1 e5ebf5b43ec401a51138bd3672ff4ab6289d0a7c
SHA512 fd496e42e3354ce2afdf18006d009e49231d4c4b130d2cd059dd3b629a77ff4ad1b2552b32b750348f06be116f358a4d9f577f1f0f27a3165c3de08ef7c2c34f
TLSH
T1EF0102859EA58D1FDD561AB314B920F4737089DC6715D213542D32271C3634965175C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d09d6.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5d09d6.TMP
Size 816B
SHA256 6957c38b8d444c6db6f24efa37f6ed03e8575c847d577cf79a6c854865eb7de1
MD5 df9a9194a9b53463d11719e69231c3eb
SHA1 00c3b709f67fd25c5dd8191e7046609176ac4f1b
SHA512 7ec5aff293f142c47de576c2f9fa0a8d597f50a4c2c61e1d0788bcd558231d61f77808099fc88c2a16ed3a43775ad972779cf73bb6ccafc308ca1a9b652df4e8
TLSH
T1A301E1868B964D1FEC5405B6049560F4B331CA106322F7A3A07E293A1C7A38969070C4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0f8b5b925ae18cd7e274eee04264a4aae7a477deb7c788ead80ad0f17528e214
MD5 7df90902cea2bdc5679b2b2956dd7e32
SHA1 47e223a28d8e710e631d7aace26d7481a79908e0
SHA512 4700a03fdbebccc4a7aed36bd8b98318a85d758512a442ca449b2b009aa206b030b89ebcdfc1f55213e36c90dab491b275378be62d20fd6c05e4c5ce4b055da9
TLSH
T1B9E020FA2DE72860BC7BE3F9247148E002597998CD86FC9F1079A1D750F3361385AC61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 a1438c70bff6302f1d1468747f70813caab397093407a1ab6c414c69c7c6c06f
MD5 69846af595f06087ca43050da07c9448
SHA1 871da0d5a9c5c4acff090ad582f10b07885fb0f0
SHA512 27c305d36cad8b1b11132c18b7b6ffd94de97977cbcfa277b589ec96fc711c7fc4ec7c32f3bb5856610c5dc65ba5ab535da8c48726fdb2cc1a60f2e2c1e4b359
SSDEEP 48:K4/IhKkosty1hI9KaIg6DIJKEAUnyVTIBK8oswk:K4/6KkocOh2KaIND2KEAmuT2K8obk
TLSH
T115C11106F03B220239FE654CA795A6368E5171A37819A46F3FB801A21E77E111EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1e8ccffa-a2b6-45ad-bb80-ad4850b6bc32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1e8ccffa-a2b6-45ad-bb80-ad4850b6bc32.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3469150aca948eb6b57f182368fdfac2e9cb312a326080c4e8e04d82db93500e
MD5 3e0a4dcc107fd5b3f566f222acdce340
SHA1 aaaafdc55a7e4b92ca6a823e7c8fda6a7679afbc
SHA512 4fd81bd280781cf4dcd031f4ea4f56b2ed3e51cd69a28f30810d37ba384f1cf8f2c96d41349a14651d977ea4c0678a9fdc37c48a21e450da20691323e766cebb
SSDEEP 192:vONa6Db6QmiUyJxHBa+jBOmBRGRgjRaU6:vONa6uWHBa+1OmjAU6
TLSH
T1D802F935687C6CB79EA26E48F88737279FD4203BDA966B94D6D81F0C00D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 a04677e2e50fb811fefa82a52fee968a01a36d101bac7733ccfa64b59c435cd7
MD5 22783d4dd29ba38b1dbd92c93fa78db7
SHA1 6e6d89aa377bf4b4da6ae521911497350e0b973e
SHA512 5d9680d2432de15b61a989f13054413f31a29a65804278f30a17a3fe111da7812a5913435c20a25ea2819ef2452a861161860fe29bbc215e76e482707e1fdfe7
SSDEEP 384:xZcIhsN2Ul7lzhm2mEa+1OANjXnTKwBODNZOCZWV:ZhAq21asOANjXnewBKZO8WV
TLSH
T11A928D32693C5C766ED6B149F84B32178EF89077E6C92BA4D6DDAF1C00DA658130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 14dcc5069ac381912eae06ded43dac1e5ebc2bf0536fd7566668a1501cb457f1
MD5 b3428da2ad2903cc2d6a00400576358b
SHA1 3b77eb5d2284ce73acad3ae9a3b0968c6b497c75
SHA512 1489a1ef5b6a83c233595fe078ba694d51fca0268fcc1cc80cb2f354462c4d47277374a413fe0d66e3fba0128c27810f32df7acd9d17e6d2fbb601a9e4645412
SSDEEP 384:uZcIhsN2UA7lzhm2mEa+1OANjXnTKwBODNZOCZWV:Mh3q21asOANjXnewBKZO8WV
TLSH
T1B5928D32693C5C766ED6B149F84732178EF89077E6C92BA4D6DDAF1C00DA65C130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 4887b28ac85247214f0c64eae5359bdefa9f589e73824fd6555b697f41bffcc5
MD5 8ebce79477e6163d5a701e03106e1a24
SHA1 6955b2d9460edec8fa340306d9390e4a39f9956f
SHA512 d654cb8fbd046660c9dfc3519c03ffc40039130e0013d12aa663b6d5f92435dc38b8ce9d98b94864d8d1e9371ae7bd60d4817f5e0a930829a24b58bcb52bfb17
SSDEEP 192:uONs6DbZQmiUykxyBa+jBOmBRZWMANzj3qYU6:uONs6PjyBa+1OAgjXU6
TLSH
T10612093679789C775ED26544F88732139EE4512BDA8A7FA0D5CC2F1C00DF65C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 415935d6680d0c896caaf649b672f0a24c5d80304d5842486dd9d4f7e41c3bd6
MD5 b5c2d17a2775603fb8e6a4b96ded09dc
SHA1 3cd7209be96579dfcafe568faef9b2bda4135c0d
SHA512 93b7a790346cbf81465975af68e13f8652e78d9b5a035d188501d109a9518e00154a3ee877b99a6e27b71f2d543efc4e1718d2e0de8d22585f72bea1cac0c06b
SSDEEP 384:QiFiZcIyzsN78TUNTUlIlA7lzhm2mEa+1OAmjXnTKwBODNZOCZWV:rFQa+wgaq21asOAmjXnewBKZO8WV
TLSH
T121A27C335D688C7BAEE6AA44F94A32178EF89073D5C56AA4E7DDAF1C00D719C130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2d495ba7-6acb-4b31-bd3e-ff9f0603da15.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2d495ba7-6acb-4b31-bd3e-ff9f0603da15.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2d932a8a22722cfb6cefa125f7670ec035679212a0ccf89b7fc39b20bf8506c4
MD5 eb41062ca12d0703e7c25ea7a6f0f6a8
SHA1 ef0583199290750c34b70469ae9f118a3946732a
SHA512 84f917791151b99e83c3c27ec80bd5114b9f5d5f102eafe52d82eef637f8d50cde22aece158ba3e550a70a4415ee1d7dae1fbdfe78e80a16f0ebc35908db3f72
TLSH
T14841065CBAE91144B3B76E1A9BF6A86E447E7D372F0BD49D10110E4E0A22B40C861B37
MD5 SHA1 SHA512 TLSH

Submit Download