80ad630fb46224782e784f7e8f3dea588ecfe9f6d83edcdf06a8d2540aa93313

Analysis

max time kernel
898s
max time network
798s
platform
windows10-2004_x64
resource
win10v2004-20260513-es
resource tags

arch:x64arch:x86image:win10v2004-20260513-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
10/08/2026, 05:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 1KB
Sample260810-gn844ack51
SHA256 80ad630fb46224782e784f7e8f3dea588ecfe9f6d83edcdf06a8d2540aa93313
MD5 3d04c5c8db508fba4a145d75c5480d80
SHA1 6802ed26662a408c9a5c4b44f2cda277518ffedd
SHA512 c9cc106a5de3d218cd97f28f2fd264600b787b09a45045fa451ecc56f788ca03d0c4744d1a956c72568fd1b05294b1b1acfe22e5c13d01aecb6383d5c068fa11
TLSH
T139113273D7110C0DA5A345F8B0A7A3ABA5827100F2275D60AA7632F761CC11DAD9B7DE
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1080	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308151056836736"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{0D3839A1-0B54-4FF1-8105-5C69765FE27A}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1696	msedge.exe
1696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe
836	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 836 wrote to memory of 2788	836	msedge.exe	85
PID 836 wrote to memory of 1080	836	msedge.exe	86
PID 836 wrote to memory of 2868	836	msedge.exe	87
PID 836 wrote to memory of 2868	836	msedge.exe	87
PID 836 wrote to memory of 2868	836	msedge.exe	87
PID 836 wrote to memory of 3524	836	msedge.exe	88
PID 836 wrote to memory of 3524	836	msedge.exe	88
PID 836 wrote to memory of 4396	836	msedge.exe	90
PID 836 wrote to memory of 2044	836	msedge.exe	89
PID 836 wrote to memory of 4396	836	msedge.exe	90
PID 836 wrote to memory of 4396	836	msedge.exe	90
PID 836 wrote to memory of 2044	836	msedge.exe	89
PID 836 wrote to memory of 2044	836	msedge.exe	89
PID 836 wrote to memory of 4932	836	msedge.exe	92
PID 836 wrote to memory of 4932	836	msedge.exe	92
PID 836 wrote to memory of 4932	836	msedge.exe	92
PID 836 wrote to memory of 4976	836	msedge.exe	93
PID 836 wrote to memory of 4976	836	msedge.exe	93
PID 836 wrote to memory of 4976	836	msedge.exe	93
PID 836 wrote to memory of 800	836	msedge.exe	97
PID 836 wrote to memory of 800	836	msedge.exe	97
PID 836 wrote to memory of 5076	836	msedge.exe	98
PID 836 wrote to memory of 5076	836	msedge.exe	98
PID 836 wrote to memory of 5052	836	msedge.exe	102
PID 836 wrote to memory of 1908	836	msedge.exe	109
PID 836 wrote to memory of 3732	836	msedge.exe	110
PID 836 wrote to memory of 3016	836	msedge.exe	111
PID 836 wrote to memory of 1936	836	msedge.exe	113
PID 836 wrote to memory of 1936	836	msedge.exe	113
PID 836 wrote to memory of 1696	836	msedge.exe	114
PID 836 wrote to memory of 2116	836	msedge.exe	115
PID 836 wrote to memory of 2116	836	msedge.exe	115
PID 836 wrote to memory of 3372	836	msedge.exe	116
PID 836 wrote to memory of 3372	836	msedge.exe	116
PID 836 wrote to memory of 3552	836	msedge.exe	117
PID 836 wrote to memory of 3552	836	msedge.exe	117
PID 836 wrote to memory of 2336	836	msedge.exe	118
PID 836 wrote to memory of 2336	836	msedge.exe	118
PID 836 wrote to memory of 2128	836	msedge.exe	121
PID 836 wrote to memory of 2128	836	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x218,0x260,0x7ffca681c188,0x7ffca681c194,0x7ffca681c1a0
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,11959522952946992101,10951679101088426036,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1664,i,11305317620791289284,2413432161465271218,262144 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,14996298542354939327,17056818591715778625,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,7779142708034551935,11109396042523909869,2097152 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,2157424211601946661,10160323382282671293,2097152 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,13073242418021620222,16133399230081766598,2097152 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,6470572241313690261,16311436465016420791,2097152 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,2495511726749153330,816190468239993185,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,14983812050517617284,18089054457312852193,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,17375952458320270332,5416459275999296684,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,17375952458320270332,5416459275999296684,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,15441053211612668043,5267610193078490237,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,5694962887491516330,15918948389718374052,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3796,i,16383446972810583762,13721417995675788631,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,18328116165305848465,6645191874419924282,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6204,i,14311810770413579882,12375676395827048621,262144 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,7445264481218262454,6493739871794733780,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=1532 /prefetch:8
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3188,i,14665132712907482382,6759677017920058890,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,3108448754728759112,1459229488045515505,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3284,i,11773475495304595626,14521640916095000850,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,16990919555391363388,17752540353503277110,524288 --field-trial-handle=2188,i,9688792594411469748,2672025457838663803,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:8
  2⤵
  PID:2128

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2052

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 26374662fab280ef96eaa929fd16d9c29e3f74bff1e5cdf49f3940b212c74426
MD5 b3d937ce21fb8a9c36b91767a220b12b
SHA1 792049998f48955661735784aa1a6653cfd6d461
SHA512 05958eec7798844717209ca31b3321bd05988e5248f66df4ba666cf3bbad7c9d2a9fd23d375157547fdb301a268f9f7b0a6a6c7b7c9fa62856f0848ecb862773
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7l:fwUQC5VwBIiElEd2K57P7l
TLSH
T190B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e14945fe505ba8ab61e2c2a4177b3629ddd497bf7db3b6eacc2aa12012e286d8
MD5 567c6d39cb034ebe2b110ad17940f52b
SHA1 7ae268e6df73b7c184575e54aa83fbae2a68e371
SHA512 89a037110dfec86e1230316695059eabb7ab6abdc51c9c076f19457d3ee313ed1cd734a032c40374ff2b42880505b397489e1fa7597fa6c2ba4933a8e64414a7
TLSH
T108E07898D4CDC61DD94565C75354434DE1413E4FD6C4FA171F44864938C1140F6C3BD0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 357B
SHA256 805e363b8bf5f4ee9a5a10c4d2dacdd562a9188b196b2026df75433bff25b464
MD5 6e89a0e3ffaac4cefa0a89a566b0528c
SHA1 66e222a274ca9dde72ed474062aaecdb671d4601
SHA512 f5f6065a2ee5f862c8adba4670a274f8dde0b172ce10603374a7436389627f1d5c98231d6f8e43eeeef02e5b009fbdc69e476b5eb0679f824ed5e42201c481ef
TLSH
T12FE0922A138ED575BF809797D2446698E92070C5E54FF59A2A8478CC380011CCD578A8
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7d1854c5323e10d3508ad937162513a21afbe251658352852dcae59daa6d9a82
MD5 809d2ab9211d256ce4442b4e7b8b848c
SHA1 5f1e30e0e8a8dbc9dd7776146c1eed6eb039ec9b
SHA512 3ffdc12a353efae2da658ad0c76abd2b4c5ca6db5804b078a6af651eb89a63c720a05e395b7907d12d5eaf10bea809455d9d7cb234223312a8b41854863d7bd9
TLSH
T1DE712E9813534893F39AD133A0E34A25F474967B0A5F1E3C07DCA871AB3A7D6B225CD8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe587664.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587664.TMP
Size 3KB
SHA256 720c684fc9047e50c13d7b192752c3e4a8852f702aa7cafd263739232d713e87
MD5 077d1a166ed31a2e4cc9895357f12db0
SHA1 01682cc24bedcdc26d6dc3323ef0d92e9c5c5a6d
SHA512 0f499d1c750e8f62332487308c1bd27c88f21a8a185531df7ae3e06b8ba5e0ea4d7ca1c80af7c44b7bad0a6acdccf46e7ffe503e31656efaad8efcc2ef826cb5
TLSH
T13771418813534493F39AC133A0E34A25F474867B0A5F0E3C07DCA871AB3A7D2B221CD8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 478B
SHA256 bf477cd6e8696ada56093aa8e821743c1e8896f3d8faf12b95edd0700b33e847
MD5 15fa1c58014faceb14e87a277fe4dac8
SHA1 9b23122fa444138c732cc1b6c0c5ce4bccbac227
SHA512 fd413c2952f96b8870dd5db416981788274566eaa047705b2896ce4008e9a8a8ae6cdef77aab4de2d3050a8ac5583f6cf60d7ca27fe2916d5b729bc599156b67
TLSH
T1E2F09EB383E055AE8A0042F05518AE17CE2D0402431C7D69C6D4BE2B83E2064D001C9B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 673B
SHA256 bfc059aa7bf15001baa7cebecaf0f66678788a21d386a79bf4b0c54f5fa30688
MD5 b31937540102078c412fef03f66a8a40
SHA1 dab973ce241e24909b74ac8fd2c424239a4ba002
SHA512 5e2df1c2d8a648aab7e0e1a5fe01b12d138eb4fc5f5e0a48d4f9f2a118685d01fd12d58e71ff1f82226a8a6db0ea01a5f5b43616b46c1c12e636f11f0c31a13d
TLSH
T12F019EF3C7E5956E891112F09D287E1BCE1D0901421C3C1AC5D4AF1B83F2035D001DAF
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 24101ba999ff668c1f528393d3136d49cfc3b6f9e6d8f33102c084c3b0d511dd
MD5 07d832635f7f02dcc65f21f0ba70c735
SHA1 d30a44f7711ea0e78d20ec4849cc5d8fb99a69c1
SHA512 8012b13ce03349e1e90a1dc36cd029e172be0d5cd1e417f75d178e415bfce7bffac6ad06422b56779c9d5294a66a4c1b1ee216eaf80f8b30d74b9554b0f80ff2
SSDEEP 192:sxZR/ywFaKOMl8Mk1/f1sb6cIupdFHW6+WNGY4wJ2VIgrJ:sxZRXM1/f1sb68vHbGv9
TLSH
T1C342FA156A34A9B78CCFD209F9557F53D6F9447291900E48AAFCDA1C05E6BED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 f1adf348b4543ac4823c526d2630ab9f41154048232ee72ae5da8c20a47477e7
MD5 48ae27f041f5ac03cf154aaeb91c6c93
SHA1 3f5f319fbcba5dff3cc435e265bf0996e173886e
SHA512 ef3fb2b4683fb32d791727c7a0a0060b15731b714d8b2c87654405694041cc64045b3af4b6781b38d7b79bd5fd36fc67b5d725b8c7e93b90fd8e943214bdcc11
SSDEEP 192:sxZR/ywFaKOMl8UQik1/f1ss+cIupHFHW6+WNGY4WGsVIg5KAJ:sxZRXqh1/f1ss+8lHbGYp
TLSH
T1D2520A15AA34A9B7CCDFD209F9417F53D6F9447291900E48AAFCDA1C05E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 c22de0589c2210bf5d29b048136064dd0ab128617013240d9dded57acdabf7e6
MD5 cc1c0f158cf0d0f5fec36a9889fb6dc1
SHA1 971f0f59e528497efaa6ec8b76ee996057d65c15
SHA512 e01bd579c7e32b12223e6117fd5931fc3ac06ea85ea35f0b5773e74f41d0b03a886eb6c6eb097d6657a8b3acb782fa577aa4daecb5b6a4d095012594c6bc551b
SSDEEP 768:FV8iJPNWvx76r8F1+UoAYDCx9Tuqh0VfUC9xbog/OVnALl6opderoBlkpUnI:FV8iJPNWvx76ru1jaSALocd1BYUI
TLSH
T1C1D20A3B680CCB7E4F844E9CEC266F966DD801CB5B988D5047FA884C03C76EE51269DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\temp-index
Size 1KB
SHA256 e05eed6eb1b83f5a146c40f17d6f6e22a2ce7050af0cdcc96cd2b1e40750007f
MD5 8fbffaf05dc9e3f9c85267affa9af2e3
SHA1 f4136b10951fdbb43292e4571794687ab7398ff2
SHA512 deb39d5fbc92c04ee620378f36ea2ab477a08d853db6a4b7c908698f55f69a603370ee5c962503880e04478ceea2f5ca286f8c82667e7a22591283a5ef926533
TLSH
T1BC31750A4EA28D7BECA441B216B264B8737484CC1651A703587C3132BE2376A250B9FC
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cbb97.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a9d8211-7182-4c12-98f6-a69f4033bc23\index-dir\the-real-index~RFe5cbb97.TMP
Size 1KB
SHA256 5fe92521165f609ebef4938bdbd8b394ea77168fa76231688dd4bc97ee54ea64
MD5 904d08b52c8373649a9d272774263964
SHA1 d9c6c503a0e8b21969d5cf17404c1c1b8b6b9615
SHA512 220743567c44b4899bf3a8815ffe78893b61f7c965a486f092547c55e6039a955b564ba84cd9302f526cc5e9699ad04f0c00affc92d95d3494fa3540e973a305
TLSH
T10431774A4E958D1FE8C440770EE3A4B8333598404711B797947C5235FC62BAE1E4E0D8
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 2af5d0c19930925f57c46632a27b017b58d25455578833d2234112923eaa0c1a
MD5 c4cfc67ec3315b2d0ac4ed11c03d1313
SHA1 a9ee04cb70ac16d6714bed57fd284f3471c9d7ca
SHA512 cba98486e27037080f1fea31f513d14bedb56fcf5d01ba7c7ec8f82eff6b0c53a025e8d3df34a38dd6e0677f4e65b897ef8902c24d9b81e43b8f1e3436517071
TLSH
T1F9E068F62EEB2840FEAF67E5187098A00242B459D584AC8F5426BB9324613523406C22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 5b736e6eb93e31c3062c6274e8d5d2ca459d772b4123e45299bd7e87028c3095
MD5 05a6a1155bd1bf505f7073dfddfe7c49
SHA1 7e59760227cdf3a63cd748d079d540b3f541540c
SHA512 195a59f979be02d54299289cf4031e8864f5b62a0f87ab59febded90a4f8221cd24201ae0bddf2447260b435de6ad7e1a395de55c5ca81a83fedb38bff074a2e
SSDEEP 48:KhUBoEWy24aKrrI/M4KMd0+4AMoIqI/KraM7ytxIZK68kSlI5KJ:KwbyKMEDqoKraiWxSK68Fl6KJ
TLSH
T1AB913FC675BA02653C7F6A088354973B8A42B3633418E92B3BAD19770D66E11CCFC9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59113c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59113c.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 638efb922ec3cb5c7a04fe1046b2b26d05ed2f40b4b9d7b11784bc21bd486ee9
MD5 8b2b1968ad87e3d19141632259adff3b
SHA1 2623c28e530608d72ff2fead27f8d5e9ffe5880f
SHA512 196eaeed4be64fe3a48fc6647d18b697f5b835b2e407c7013c72ede1a551c47234d32d81834e7a691dff6c3f9c9871acbf13b17b46827633c4ac722938505152
SSDEEP 192:uRm+xasuheOwQxMGsNX3QmqcVmooQmiU1qrn4k038NZf5P8LIuqa6wt2lU0BytE3:PZcIhsNX31qTRG4kDxZe6HlytEDq1hWN
TLSH
T107928D314878287B5DE7A205F48A3A178FFDD437E7D86FD4A6EDAB2C04CA1A4130B416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 98bf4fe0394980cd40ec5932aae06b7cdd36c8a0cdfe81e78f7006bb9450bc33
MD5 2f9dcc40e26bf5c8151c3235ba5f17f5
SHA1 d39be3f693da897cfa46d406386ce0d25638ee73
SHA512 67fd0ec695f4ffebf5e480ae008f52db0f37a92ca23293cfb462625fd101c2b0c6a23e1a8d3adf74f198a4776659c9faea8faa0d42f7e62e76b2e11c0b03fbcc
SSDEEP 384:u67FiZcI4zsNp8TUNTUlIlG1qTRG4kDxye6HlytEDq1hWN:HFQEMwgktTyeoy6DqTWN
TLSH
T1EBA27D3248B4597B9EFB6A45F48A36178FF98077D6D4AFE0E7DD5A1C00CA1D8130B815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 cd0ff03ab5ba2413081ae6c48391869b589726844bb0abec28443ade485da386
MD5 4e82b013695fb4cc8905cbeedd753b4e
SHA1 40feace5695300487df77afc63c4fe0c7fa509ad
SHA512 d2d0ca0aa025ad8a6a96d96655e85910be4f083acd6caf1a27cc84db5b960ddbc6e9b5460cfaa910c3e4154919051843332d3b5445a3eb967be3cb4adf060ea2
SSDEEP 96:ZqONkwwQsjpfmUTmDK5ih/cIPURHl8h4otop5O5DoBhPwivh50xy0SFYKFlHvsey:gONZ6kDfQmiUy4cZ9038cQiBOuU6
TLSH
T11102F93568786CBB8EE3AE49F48737175FE9117BEA952F80DAE81B1C00D725C1302836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c200bf72f21abd294d4e3175ac31d7ba11cd85aed5cd9360d34a2daf0eb92fdc
MD5 26d735eefb920e66cb9418112a725368
SHA1 22c5742d3f7fbf29ff35166a9af54a4c13502691
SHA512 38c19a73c0871104a3f4446f496cff2602aabb3dcbd721e57931037ae706150e13f23f342f217e7733bb98843fc4af3d09ad04dff7066489314b2182be521184
SSDEEP 96:sqONkaQsjpfmUT6K5ih/cIPURHl8h4otop5OeDoBOPwivh50xy0SFYKFlHvseYM0:3ONy6kTQmiUyvcI9038NZf5PscRuqaU6
TLSH
T15B122A31647C6C7B4DD3A555F08736179EA9813BEBC96F90D9EC2A1C01DF1AC130B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 554b3c3b763c37d68682e95a88c59edd7be098cb34b21c40ac821d8a6bbfff77
MD5 63b2cc4e660e9c27bec60c6293923aa2
SHA1 47c0ff20ade6d58d83ffcf08958df74d44a63c4b
SHA512 3d50ecd9f919cf0d0ce04849ac6b0034b4a58656d4e8592939426151657356dbaf5671d34df7d1f96448a1119ac448cc29cbe9018c53953d53d1692d415568da
SSDEEP 192:uwm+xasuheOwQxMGsNXGQmqcVmooQmiU1qrn4k038NZf5P8LIuqa6wt2lU0BytE3:WZcIhsNXG1qTRG4kDxZe6HlytEDq1hWN
TLSH
T185928D314878287B4DEBA105F4863A178FF9D027E7D85FD4A6EDAB2D04CA1A4130B416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

babdcaed-5287-405c-bd64-3c6c7b36a6d3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\babdcaed-5287-405c-bd64-3c6c7b36a6d3.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 5bea78aa7c25921c2a4bea5333c77490592e3867407d76d0e7419350a752e383
MD5 ee9929ac7654a97ce0941ec2f1ad23ef
SHA1 da40644b88492b26a10c0bb51d0e3485b338aa46
SHA512 0528fb9e76b57311ec64b3e3e1ecb6282bfb2e75ede6d083adca7fe7beb91120b03abc4a9b25b6336a54ac2a49e417df19810ede068f851cbdae9700ad686512
TLSH
T15741375CAAF90148B3B76F5AABF6A46D587EB9772E06D45D00010E4F0A27B40C8B1B33
MD5 SHA1 SHA512 TLSH

Submit Download