a6b1239012ad38bfd642517a1e451408a4d92b56c9b9c583ffce4f0eaf68ef1d

Analysis

max time kernel
898s
max time network
736s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
09/08/2026, 16:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 60KB
Sample260809-vb39zavwfw
SHA256 a6b1239012ad38bfd642517a1e451408a4d92b56c9b9c583ffce4f0eaf68ef1d
MD5 cb08727001b3d7ab1a363ff96aa57668
SHA1 2a96ac016101bc969af28b4e74ce624cb4dc1368
SHA512 50104abfde7d1a995aa5db2828601df542e8fdac89ee29bfa9275a7c1962b30fd3b6d2ef0bf72a49c1e94f2fc510d2c14c75860f200e1ddbdfbf1394373bf21a
SSDEEP 1536:u6lWFhj3DAeqBFvgcxmSNWqjNSCAOphkEfkV6KSsexhrjCu+YnCPhrHaf5xZPjcS:JlWFNzAeqBFvgcxmSNWqjNSCAOphkEf9
TLSH
T1F75331A3BB24E876E84F9BF4E0109504C046AA678A19C9D4F0DCB3B52F587E67F43543
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1528	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134307678185450041"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{7F3E549E-9380-4C95-9B5B-C5BC74C01BBE}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
1588	msedge.exe
1588	msedge.exe
1588	msedge.exe
1588	msedge.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe
3428	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3428 wrote to memory of 4212	3428	msedge.exe	89
PID 3428 wrote to memory of 4500	3428	msedge.exe	90
PID 3428 wrote to memory of 1528	3428	msedge.exe	91
PID 3428 wrote to memory of 4500	3428	msedge.exe	90
PID 3428 wrote to memory of 4500	3428	msedge.exe	90
PID 3428 wrote to memory of 4540	3428	msedge.exe	93
PID 3428 wrote to memory of 4540	3428	msedge.exe	93
PID 3428 wrote to memory of 2020	3428	msedge.exe	94
PID 3428 wrote to memory of 2020	3428	msedge.exe	94
PID 3428 wrote to memory of 2020	3428	msedge.exe	94
PID 3428 wrote to memory of 4588	3428	msedge.exe	95
PID 3428 wrote to memory of 4588	3428	msedge.exe	95
PID 3428 wrote to memory of 4588	3428	msedge.exe	95
PID 3428 wrote to memory of 5820	3428	msedge.exe	96
PID 3428 wrote to memory of 4816	3428	msedge.exe	97
PID 3428 wrote to memory of 5820	3428	msedge.exe	96
PID 3428 wrote to memory of 5820	3428	msedge.exe	96
PID 3428 wrote to memory of 4816	3428	msedge.exe	97
PID 3428 wrote to memory of 4816	3428	msedge.exe	97
PID 3428 wrote to memory of 3200	3428	msedge.exe	99
PID 3428 wrote to memory of 3200	3428	msedge.exe	99
PID 3428 wrote to memory of 1804	3428	msedge.exe	100
PID 3428 wrote to memory of 1804	3428	msedge.exe	100
PID 3428 wrote to memory of 1716	3428	msedge.exe	102
PID 3428 wrote to memory of 2948	3428	msedge.exe	106
PID 3428 wrote to memory of 5712	3428	msedge.exe	107
PID 3428 wrote to memory of 5148	3428	msedge.exe	108
PID 3428 wrote to memory of 5336	3428	msedge.exe	109
PID 3428 wrote to memory of 5336	3428	msedge.exe	109
PID 3428 wrote to memory of 1588	3428	msedge.exe	111
PID 3428 wrote to memory of 2548	3428	msedge.exe	112
PID 3428 wrote to memory of 2548	3428	msedge.exe	112
PID 3428 wrote to memory of 3004	3428	msedge.exe	113
PID 3428 wrote to memory of 3004	3428	msedge.exe	113
PID 3428 wrote to memory of 1804	3428	msedge.exe	114
PID 3428 wrote to memory of 1804	3428	msedge.exe	114
PID 3428 wrote to memory of 4992	3428	msedge.exe	115
PID 3428 wrote to memory of 4992	3428	msedge.exe	115
PID 3428 wrote to memory of 1368	3428	msedge.exe	117
PID 3428 wrote to memory of 1368	3428	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2cc,0x7ffa87c2c188,0x7ffa87c2c194,0x7ffa87c2c1a0
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1548,i,10819029653684037222,12774174917231094594,262144 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:2
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1680,i,11333854673092731429,4733363058709801679,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2204,i,423446063872518515,6305676379019305719,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:13
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3332,i,1232823737463759607,5739718599118542980,2097152 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3340,i,4578796544455698545,3399876110729254632,2097152 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,281700389098446653,10293461042369161981,2097152 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
  2⤵
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4316,i,9993958831035549747,11181978530959818791,2097152 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:9
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,14668993625960873447,13770111831222003240,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:14
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,14211493203768445825,16095853285051848247,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,1076971862611084349,7921667341684245083,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6172,i,1076971862611084349,7921667341684245083,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6300,i,1388980796375105484,2352039750864421440,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:14
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6192,i,7908168170603312347,8773407384399178329,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
  2⤵
  PID:5712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,3978185266293973724,3611972238322303150,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:14
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3164,i,1776566268214316018,5353495815349164523,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,17858982763977514534,7504105895046840788,262144 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,1455639569827001344,13862736983550840806,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:14
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,8057573967097919624,11009273486247036344,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:14
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4980,i,5983255125069271844,3019810625706252346,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:14
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,18126246004358146008,2832164739586093774,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,14759646802619783912,11854186450678709830,524288 --field-trial-handle=2468,i,2699384030939601719,3156384578812679083,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:14
  2⤵
  PID:1368

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3564

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4084

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4188

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 5d665eaf6a5abbc77cefdde4c2b4428bdcc60d6889573205f7ff3b30805a8612
MD5 61fa7854cbcbb85b3f7a99be185d6b24
SHA1 f6c234c988357ef318074ae7f836e530fdc486cf
SHA512 05e536d03100e162c372f647d905cbf3148804f911954e58a451e2f43b8b5046ba644aa0576e901841df398794c2352a0902a90e75037495cb32cbec08d5b777
TLSH
T13FE07D8844C9C22EF708644751FC778DC2D0364FDFC8EE2E170086CA7205840B6C2BB0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 2b35529eafa281235c55f4be30f862e41b4e37d942a9264f907ec811739492ad
MD5 ce7a32ff2bae70354edbf29a44d245b6
SHA1 6832a06764f0f774eeee6671aaa32ea7cf93d661
SHA512 8c74516252d74c48648f7eba28786ff73cf531382e366150fb39f4216446c8a145cb1dc08d3743ea6ceb0661a616c2ccfa9fece5f18be96acd97b7225f852118
TLSH
T1AAE0209944C5C61FD704A497537C5F4EC3D0364F97C4ED1D1B088495754154062C2961
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d88d8362747e6fb7daf8895192220c539c5e1c944927acf4222649bfbd9124a7
MD5 1097370715a0a5586453465fedfb7fc8
SHA1 7ca6e67702a4952e345a76336ccf815d5681b832
SHA512 c4b1aeadb318aadffcca3231648104f6f3ff05b024afd12c93d134e571a84b70f391c8a10399043dc9d78038144cf1f57f40e1bb173b24cfa27e25b2ad572efe
TLSH
T17CE0209804C4C61FD708E447517C574DC2F0370E97C5EE5E270099C5710184463C5B74
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bc6f8f5c8e6bd85a41b642fea93af24a901c6497dd54dceb6edb33053ea56e67
MD5 9caa4c29af4f089c2087ee8e327680a2
SHA1 dc0770c16c48621b22385c49e65d2818e91758fe
SHA512 8415d5ba5a38cc714f12a6fe73b1c4cc387db94622b2d219f7d2397adf0eb482ee0add7a16d980304cfbbd956b2b7e3b92f21bed55e3fce3e433e0d8dab4a50b
TLSH
T13561C86403222AE0E3E8487671E577043AFD9C690567EE1C836CFD786C12F9CE5E802B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598bdb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598bdb.TMP
Size 3KB
SHA256 a3bd2ece4c2ace8bf4b848e4033f8b4fb4376de1b7b88c58b42b9aa398ca736c
MD5 7fb4c7f9e4499323f79958e7dcee6725
SHA1 fdac7ac4dcba63bd4bbb9337df15d947d54ebf42
SHA512 825bfdac86a91d45a5731200ec21b68cbe0b2a510bec44ab279d5810c949217439c2609cb3b8376ffa8a95e0191351dd30b2dade4bc21cdf75434b58627af329
TLSH
T12761C96403222AE0E3E8487671E577443AFC9C690567EE1C436CFD786C12F9DE5E802B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 c801887e4bd3541fa4b4f29791013ac04d13f1a8d7fb4c6f16d1b0fe7f84e380
MD5 c3840ddbfb4206b287d731518a8598b9
SHA1 95c878789d567413c9b9f3dd56fbba32dba031d3
SHA512 ab1f81b37da23b91551a18a2d039112d332c1e5cc21ca2a306eea9741753b1dedca7c06cbd5fb48398d34ec142eef66eacd5c40d9073922cd3905950b9df110f
TLSH
T1CD21CDF7C3E8A67D890182F866183F1BCE2D0854832C3D5BC4D4AB5B93E1471E240A5E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 3353aeaaf268aabaece164dd80335c4997ea26ecd00b96163b43a436d4693f7d
MD5 810a45aa0c61d2665a4909c178e2579e
SHA1 3c47febd4326f06413a75b54871e566af97c4257
SHA512 ecf838d69b02ba01b57700012d74242b1ccdaec1a7f409da4b3aa24ac6cafb664bd5c30dbb59718715617b353615c0d6137cc433ff8809f3ec80824cb2bda88f
TLSH
T124517CF743B0467EAA1191F0DA18AE1BCE1D0417436CB8A589E07E2763F34B1E0417AF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8aeb9ca3ccd680b5ec5c5252520f38331abf1ea8deffe1b6d1883cea0262e1e4
MD5 48db87a108c6ff7df3aae0b2c9a6d68c
SHA1 3ca8b9ef5bdb049b52317bc7d996650ae364f867
SHA512 94d6a48e674c2d81ebf0800c51bb033f535c06fbaa8d3c08fbf40a300604b4a803ffebf9eea18fefc8d5d0d54f52bd8433e53fd6ac47dd9cc54fbbb9503afaa3
TLSH
T119519DF743B0467E9A1191F0EA19AE1BCE1D0417476CBCA589E07E2B63B34B1E0017AF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 4b0783d49354d9605f5e795e7989c1d1a7472d3e126ae0b3b1eb20b344335167
MD5 dd0555aba2692562b1e780bce2f9f1df
SHA1 59eeed61be5348c9ffca4c6d1bb214f93bad7f39
SHA512 d74e29a138726bf6b70b5ac58b32fa805b9b03a351fd5ba01397f8785c68b449789ae238f1f212edcd6a809005bc406eabdd5d177e47776f89b62e0d4e055533
SSDEEP 192:sxRhRDbQ/fYsTfBprQ5bzoA8p4l/g6+WNIYn8UXh8G3IgDGJ:sxRhJQ/fYsbBz4/5ITe/O
TLSH
T17242B7166A28AD3B5CCBE21DBB55BF53D6F92032A1D02E58A7FC9A1C04E76DD120740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 49949144c510fc2923e5e19ec1761cd658e341c6accfa575c4e4a1f6fafd66ee
MD5 bcb2fd01cea55260708dd505b6c72914
SHA1 42b22fc0d95bc6311a3d0b7dbfe0a4c94b81d3dd
SHA512 c5d0d8ceabe9dde2b4b3d7872c34f8cb0583802a2a46342eefe6e414194431082bf4b83c72e1beaee85118ca46070fd1e7e5c64fafe19065b6cc5e7f5f839d7f
SSDEEP 192:sxRhRDbQ/fYsTfoprQ5bzoA8p4l/g6+WNIYn85zh8G3IgDcJ:sxRhJQ/fYsboz4/5IT//M
TLSH
T10642C7156A28AD3B9CC7E21DBB55BF63D2F92032A1D42F58A7FC9A1C04E76CD520740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a37f4811d332eb91b5a1b86a199d276f58f2ad920bc0cc481a3888caf8b8a577
MD5 787799acf5ca8a69baaaa3482ab8f0e8
SHA1 502f2dd933cb4e9ac8366d8c703b7ce9b46d8cf7
SHA512 f7a7e34d7c67d6fe7480183f1621b5c7f12ecaddc6b7c75e02ec8d7943eae333b7fe6f20b4ac2c1a88d9905cb87575484dea4d48332cc66a386dda686b9bc83a
SSDEEP 192:sxR+RDbQ/fYs7fBprQ5bzoA8p4l/g6+WNIYn8U2h8G3IgIJ:sxR+JQ/fYsjBz4/5IT5/s
TLSH
T16532C7166A28AD3B5CCBE21DBB55BF53D2F92032A1D42E58B7FC9A1C04E76DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 44bfed7386ee7186c442f40867f8ea34263765a6ff9e2ca4f1ed1e2245549d8d
MD5 9083bc9880b0de32e3ecbabf0433ec7a
SHA1 0c90a9c67ad747d43189086f1211bace6ec1a4ef
SHA512 05e0054aeb58fdfdbe097762fb5b24643f6ec0bc15ccf64992d796e9b67ebb5e8ded2739a62a9093981a01a3a7538399d3b501d184519dd94b6a0b37bfc9c48c
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRPGrohMv:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VD
TLSH
T1F3B2EC3B604DCB7E5F800AADEC19AFDB7D5802C79A988D4447FE990C03C77EA91194DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 600B
SHA256 918981a0a2187ca4e877e88ff4813534efcaf0b766daa85b66170f97b13fd4ef
MD5 10dac7fc2342975f92e1cb3f094dbd6a
SHA1 566c1efe826fb7b38c11e85eda2a4739d16642e3
SHA512 845e6652385523a3d257cb1d44c59a9b05d8ef5f90a3eab71b781a3311fc3bd84db06bd4ba4d951648adda2595f4f45e5cfbad3afe0e38943a4d1bd381f0627f
TLSH
T1DCF05C57DCA69547D8636DBB553E3149333D04FD11029DA7005D60399A66739824138A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dcce8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5dcce8.TMP
Size 600B
SHA256 3034e715733573ed9d0b9065eb8cd24f576e905973c7de3c51531231d39ccf1b
MD5 9fc0bc9cdc9908fc098da2e113d77a7f
SHA1 b6b3768be2364742cd7b5f656bfaa50eb34c8003
SHA512 5df03e1f2d8a6ce5a99db655d42ffe15e1a40f215d4681ae5a58ef3606a5a78040b88c88ad06aac2b33b3c2313cfef3446ab95bc389d395730fe7c7702951101
TLSH
T172F0FAE740D1EC46DD67A5F561157017723E08313117DA575097747E553277C8381B42
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 af4aeecf11d9e9049359e8110d758e92ff20756a222235af2158e05832fcdd08
MD5 8975372e4a13bab58c40c56848f596ae
SHA1 2a73ce1d7169d0611a69709b223ec791a03b1e1b
SHA512 a241e0013db3fffc2ae992491346caa5c16752945f8ce0b13b0cc65fe0335e7a5d7bede6ac8420f911a7005057e44cefbb48e7b7fc7d3bd845d73a6262f48de6
TLSH
T187E020773EF72814ECEFD7DB1835745105107454844EBD8F6856E2D710B235434AAC61
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8b8eda761fead8e4d0815b7739a75489601d994be0a92778ffcec85880f563d3
MD5 a599b2c46b98923bba8d1c47261ebc09
SHA1 d067e22faf2fd1bd4359c5c67371e7e3f50e9183
SHA512 7e51f77b6725a71c31a151f1995c503d1364a1be110632bb693b472587973e2722dc05c5502a29b85d601b71afaf97b7b44b5896cc23ead6209b3dc78b3e3ccb
SSDEEP 768:irv+4UNbds3mUCDZIO0WzH4Nzc4ReyIs2seVH1S5D:ibsbS3k74tc44bs/EH1Y
TLSH
T1DC03BF32E9689E37ACF66686B44B76537EF4911B82C81E94C5DE6F0C0A4B1DD031F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f47ccd43df4a050d75e17258a3ceac56c2c42262942edb92a2cdaf6f5be078b6
MD5 553fa2598c922a81cd90e7948396ffb4
SHA1 5c13477339e642df5af52db79917a63997baffbb
SHA512 99c67fc7dff14b0ce20d2835d59e49dea05d936d7cfe7725624136603f9c835fb904a4e9dd57837f7ebc728cc0c64a7eeb9d5a2806190ab0b37049a2ef489cef
SSDEEP 768:3u3CAYDZIO0WzHQNzc4ReyIsPs2ewBKZOyn:3u3A7Qtc44bsE2evZfn
TLSH
T1ACF2BE31EC289D67ACE6A285F90B3213BDF49127D1D82E9896EE6F1C05476CC031F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 b3d1dcdbd6e8c3e99fc85adee4a3b07f432c06e2d92e57a1725c8f5ea97099a5
MD5 e0f0ee1a4d5d4dce66817310ef922b40
SHA1 b26f667dca31445fc38e66431a3d29bbaf5d5145
SHA512 086334e93f94b90f3a80c54ce74b8467918b1eaed240924af88e740f04713e5d2869367dc73e4642b4e356f44eb34ceee49035280915b546e6f67ed3807c72c5
SSDEEP 768:uu3CoYDZIO0WzHlNzc4ReyIsPs2ewBKZOyn:uu3G7ltc44bsE2evZfn
TLSH
T1A6F2BD31EC288D67ACF6A685F90B32137DF49127D1D82EA896EE6F1C054769C031F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d25d7707fa46c88534cd94a6e6d536d7fe95850fe8d1d2fdc95e14d4ff2f1dea
MD5 be1ff88f22f127ca27411e10a5c851a6
SHA1 90e9bf273c730736ec9c116760954b1a7376b967
SHA512 f252247762eb571c4afd5d7fa54ba32d0f64a6cb834a08e44f35216cc1ff2578de700d9d7c73f657a5a0a55c6f3cc296a08904f466653c4cc4700fb7aa6fb6b2
SSDEEP 768:aFhj3jwgFAYDZIO0WzHcNzc4ReyIsPs2ewBKZOyn:Oj3P7ctc44bsE2evZfn
TLSH
T15403AE729C64CE67ECFAAB85F90A3213ADF55167C1D869A4E6DE6E1C01572DC030FC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 57477b3c12cf8a3ceb65d635ff55ef95552a05fd424fb11159941e88882991be
MD5 b76c3477de21fc395e975c68b7f71122
SHA1 24912a1234c320e4d35197382157111082c2ef54
SHA512 779ed6dec235179abd79ba0fb97f0238efad2f9508fc03fca0be1e69eb97a816e83bac1920faf6b57d9413701ebb82805514a5f9b38e3f9b97972808723285dd
SSDEEP 768:Zu3xAYDZIO0WzHQNzc4ReyIsPs2ewBKZOyn:Zu3d7Qtc44bsE2evZfn
TLSH
T17CF2BE31EC289D27ACE6A285F90B3213BDF49127D1D82EA496EE6F1C05476CC031F823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 bf0b373e3bb5d1005a6786b25a955ab3dbe027b82f5522cf84ad823dba57b785
MD5 956391dcc1b69850759259e27e86118b
SHA1 9f7ac05fbadf38f50db44bedb0168d2ae199910a
SHA512 118f3d990b32d3e4ff5fd9c18c2900b08aefcd1a783072272db0cd9353f8a734f8e8d4b0736782636cd203a18f160f2626af6ede75646ef0079f92a6e3036119
SSDEEP 768:6rv+4UNbds38UUDZIO0WuNzc4ReyIsX1eVH1S5D:6bsbS3Yutc44bsFEH1Y
TLSH
T1AC03CF32AC788A77ECF66685B54B76533EF8912B82D81A94C5DE6F0C064B1DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fffb4da1-24be-4f74-a54b-f9e76194a990.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\fffb4da1-24be-4f74-a54b-f9e76194a990.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download