80ad630fb46224782e784f7e8f3dea588ecfe9f6d83edcdf06a8d2540aa93313

Analysis

max time kernel
898s
max time network
731s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 05:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 1KB
Sample260810-gn844ack51
SHA256 80ad630fb46224782e784f7e8f3dea588ecfe9f6d83edcdf06a8d2540aa93313
MD5 3d04c5c8db508fba4a145d75c5480d80
SHA1 6802ed26662a408c9a5c4b44f2cda277518ffedd
SHA512 c9cc106a5de3d218cd97f28f2fd264600b787b09a45045fa451ecc56f788ca03d0c4744d1a956c72568fd1b05294b1b1acfe22e5c13d01aecb6383d5c068fa11
TLSH
T139113273D7110C0DA5A345F8B0A7A3ABA5827100F2275D60AA7632F761CC11DAD9B7DE
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
940	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308151062401031"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{50BFA36A-50B9-4FA1-8DEC-820CDA0DC377}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4056	msedge.exe
4056	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe
5304	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 5304 wrote to memory of 964	5304	msedge.exe	87
PID 5304 wrote to memory of 3400	5304	msedge.exe	89
PID 5304 wrote to memory of 940	5304	msedge.exe	91
PID 5304 wrote to memory of 3400	5304	msedge.exe	89
PID 5304 wrote to memory of 3400	5304	msedge.exe	89
PID 5304 wrote to memory of 3076	5304	msedge.exe	92
PID 5304 wrote to memory of 3076	5304	msedge.exe	92
PID 5304 wrote to memory of 1132	5304	msedge.exe	93
PID 5304 wrote to memory of 1132	5304	msedge.exe	93
PID 5304 wrote to memory of 4132	5304	msedge.exe	94
PID 5304 wrote to memory of 1132	5304	msedge.exe	93
PID 5304 wrote to memory of 4132	5304	msedge.exe	94
PID 5304 wrote to memory of 4132	5304	msedge.exe	94
PID 5304 wrote to memory of 1828	5304	msedge.exe	95
PID 5304 wrote to memory of 1828	5304	msedge.exe	95
PID 5304 wrote to memory of 1828	5304	msedge.exe	95
PID 5304 wrote to memory of 5948	5304	msedge.exe	96
PID 5304 wrote to memory of 5948	5304	msedge.exe	96
PID 5304 wrote to memory of 5948	5304	msedge.exe	96
PID 5304 wrote to memory of 4596	5304	msedge.exe	98
PID 5304 wrote to memory of 4596	5304	msedge.exe	98
PID 5304 wrote to memory of 4644	5304	msedge.exe	99
PID 5304 wrote to memory of 4644	5304	msedge.exe	99
PID 5304 wrote to memory of 6104	5304	msedge.exe	101
PID 5304 wrote to memory of 6124	5304	msedge.exe	105
PID 5304 wrote to memory of 5852	5304	msedge.exe	106
PID 5304 wrote to memory of 780	5304	msedge.exe	107
PID 5304 wrote to memory of 3460	5304	msedge.exe	108
PID 5304 wrote to memory of 3460	5304	msedge.exe	108
PID 5304 wrote to memory of 4056	5304	msedge.exe	110
PID 5304 wrote to memory of 2556	5304	msedge.exe	111
PID 5304 wrote to memory of 2556	5304	msedge.exe	111
PID 5304 wrote to memory of 5068	5304	msedge.exe	112
PID 5304 wrote to memory of 5068	5304	msedge.exe	112
PID 5304 wrote to memory of 1028	5304	msedge.exe	113
PID 5304 wrote to memory of 1028	5304	msedge.exe	113
PID 5304 wrote to memory of 1192	5304	msedge.exe	115
PID 5304 wrote to memory of 1192	5304	msedge.exe	115
PID 5304 wrote to memory of 4584	5304	msedge.exe	119
PID 5304 wrote to memory of 4584	5304	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x280,0x7ff9f6a6c188,0x7ff9f6a6c194,0x7ff9f6a6c1a0
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,5561327852432316829,12093135344934627444,262144 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,807168340585704301,10845393573012868748,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:11
  2⤵
  - System Time Discovery
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2416,i,15513950815493028817,10190384641756202035,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:13
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3636,i,16372778934491629646,10521295867292741988,2097152 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:1132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3660,i,14786725640556367740,13268251463387726722,2097152 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4300,i,2627062396935703649,3266324753537434240,2097152 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,10800424764259433294,14359106246917759821,2097152 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:9
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3868,i,14907781820789951168,2513531857960596535,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=3820 /prefetch:14
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3684,i,16703245628378216506,10203537806833216247,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=3872 /prefetch:14
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5554824554435597941,14765576624459644684,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,5554824554435597941,14765576624459644684,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:14
  2⤵
  PID:6104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,13155784279616713963,1124863106923346154,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,15946281738644764239,5329269430957715547,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:14
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,1266070587560209984,8915361124273372320,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,8970781397304884357,10215286645363155260,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2308,i,14617149980427780681,9849618290452494561,262144 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,10848519475746962969,987758050496533138,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6528,i,17773903827262662064,7119052502650368981,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,14910905604036526881,2827868826177860590,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5532 /prefetch:14
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,3324597352344432955,13116446269840853397,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,6837976102857966481,4531242988403936854,524288 --field-trial-handle=2364,i,11344358648783822002,490290393772300412,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5152

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5480

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d7ff41ce7359531a64ddff8c142dd12b265a2d42c94a64f4a8b69a081e4c5cb7
MD5 3d7b9bca019535ebae5d479e2d620cf3
SHA1 971939f0c5dc7e31c6953b415349bab35a9f0636
SHA512 c07249231f8979689019d5c4e49072eb19f48c476c6f79edf0dfc5502de4cd09ff40a501c1501a6ce91ac7f576f22a4b191f93e1c6b53d16e58ea9a64aaaf1a1
TLSH
T19CE0D8D445C9CA6DD985B5876254434DC283368F92C4F99A1B888A997441480F6D2591
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f121be8af68e08e997bca61b59823698028a5aee25d0850a7f85f58a9c644512
MD5 9c5ebe00a14514a2bd3c77f92b38152b
SHA1 f5eac37609aa179605e7788a4afe91798758b248
SHA512 227454daf1c4ad2d11ad4967c4c97a05f7f20b13e8a690b93045abf1fabbca47bdc236d7496cf4eb99db5da7bcfcc5dd83418c0a4abea8976f96374c74f9aa18
TLSH
T1ACE0209509CDD25DF940664B53584B4CC180378E97CDF945174484CC7442248EAD3750
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 f14ba7b5d0093320d7bac90581752fe94c24360d7204802a9b1ffadd90cfb3df
MD5 05cac97b245a0aa3df1c17cadc7d20f7
SHA1 bf90b6f7d272ceedbfcff5ada8b4690614b1c83d
SHA512 380a71160d04762bfa7de1cd11be2325d448de591b63ced0b1a16cc787df00569187fbf4527892ff88d969ace8ff676c711a0d1ed2a8d67359ab67cfde2f8b2b
TLSH
T10DE0209A45CDC79DD94C748752B4574D8383364B96CCFA556FC4864974438C0FE83AD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 068c884edf265d0af3d3a3196453db0f7856043bbb4d7e6a5ccb6fcd4ecf3b10
MD5 a70defccf86963c2ff82ed452cb888a7
SHA1 c87bdf32dcaa1b7cbd68eeaa3a5a6151927218f2
SHA512 debaf418a1613b0032e324f177ed4395769587ed38d15a7341d7a58f1c7e892bed976fd0827a248ace49e0e3933f1310246786085c87ce183321c42dbbb28eaf
TLSH
T1145132DD1322B4E3E7A19EF15AF086E9BB30AB971423AAB340C452B5441731C53982DA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a21f1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a21f1.TMP
Size 3KB
SHA256 774674360871461b8fdacb1af74af14420974f57bfd405a7885b62dfa9ab8f1c
MD5 386e3cdf8102c56439280aecc9d28410
SHA1 a7b1c88439b3183eaa04110030f6e1e0b721498c
SHA512 464e5b17f69bce91a92845e636130b47fcb850e18b7e28640b371dbf1b4211cddea1d256c93cdf850f8509925e76d1e82c33f5c9d8f4170dca953060f2b75015
TLSH
T11C5155DD1323B4E3E7E19EF15AF086F9B720AB971423AAB340C412F5441731C53982DA
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 007d43579ee2fb6c4075ebd2b579148649ad04416d279435620a5877da92ad9c
MD5 38d68917c2f844a65dde2c794c526cae
SHA1 44e18aef6798cf8251dd6c4981ed36fc16d507c9
SHA512 1c1921f60a7135212aaaa9ffe3e98ee4d710f97c38d588ac3a68241ec713c98864161e46a732a0092879c211fa693bf9b1d072be42b08ab0ed8ea83df6f2609d
TLSH
T189219DF747B4957E8A1182F0EA186E1FCE1D0411435C78AAC5E06E2793E3461E041B5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 80edff541be95db796026463c9db455e8b3d55426db1398cba7912e3f2831d21
MD5 283a20fcb6a870e82935b98122813a8f
SHA1 b8e8bfffb1716a7711ba6b14b89a96621e295406
SHA512 e72527a3e5941c6845de7840e4be37184780f0a302a5b81bf89485c287bb804dfc71026cc949bd04075d3e566aad3f38e0a974c2fd30f899545c134c7c935d89
TLSH
T15F217CF743B4957E9A01D2F0EA08AF1FCE6D0411431C7DAAC5E06D2793F3462E081A9B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ab455af6272cafdd3c40815b82372287893567d2d3e14a6e89ae3e71547ef657
MD5 e1aa9ac1be50c425724e72b5b39dbcfb
SHA1 19150b019aa367a899cfa016be86f8a8287e3ff6
SHA512 433c33f328080b640c54d59c4765293ac91ec8a5df66a9ce1a07f4cae29377e9b64599540a667839a87c9579a9ff88cf9a103d79fa1c3ea1e1a55cb2ab01d755
SSDEEP 192:sxRGmbV/fpsyqprQ54zoA8p4F/g6+WNIYn8UdTYGVIgIJ:sxRG4V/fpsyquM/5ITu1s
TLSH
T14F32A6156A38A87B9CCBD219BB55BF63D2F9503261D06E58A6FC9A1C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 40be998ad456d1a692be7f3859e5dc25f9c25db6485873c6a71b7fd071f626cb
MD5 1850a0c4f8adcbaa642059137f8fbdc8
SHA1 ebe3ecd980bfaa6a549fe550c1f719abe624922e
SHA512 0c84e12a1630e9fb23a0e0223a740b5b6a6623a71e90a7667b9c19251911ab8bc572acc82e87e4fcf717b0a28a6e48f276c10548a8c2a644c61fc151edf67640
SSDEEP 192:sxRFmbV/fpsLPtprQ54zoA8p4F/g6+WNIYn8+tTYGVIgD0J:sxRF4V/fpsL1uM/5ITa1k
TLSH
T12E42C7166938A97B9CCBE21DBB557F53E2F9503261D02E58A7FC9A1C04E76CD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 7328467a0e7b1496e9be7c58208e736be9a7550f5f0d0306f6bcbbb8bc6c19c0
MD5 a7ebc1529f0e9674cafe15a965ff24b8
SHA1 1d212ed19c2290a38f39f510c4035a5c76e1c037
SHA512 c9d294dfedef64768cee6d87d8f535d6f61d66d88a6ca8dcd9a9f2cfa17ad0d6ee753bf94443244044b92fd005861df83ead72ec3bbfea220a5c1df7e98dc771
SSDEEP 192:sxRFmbV/fpsLqprQ54zoA8p4F/g6+WNIYn8UdTYGVIgDuJ:sxRF4V/fpsLquM/5ITu1W
TLSH
T1DE42B6166E38A87B9CCBD21DBB55BF53D2F9503261D06E58A7FC9A1C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 192B
SHA256 7f0042d18060a9e89ecad2d3d5c6130d05270c267165ee25924a3bb65cd03e3d
MD5 86728431567ef7c56dbff4cd4084e666
SHA1 413c4cefd6433b1c3a45cfc13bcb763f8dfe10be
SHA512 038c07e702def087b56cac1bfb7cfa5514daad6b8950875024e88e1a36dc649f7b290e94bfed8a3c77bd68f2b1415d3c0a1d882c0ac4ee0a9a1aa33d3a3aff8f
TLSH
T130C08C45CC62649AC52A293044BB3A2923370BFE25421E22029C906AA92176E808690A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e636b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5e636b.TMP
Size 192B
SHA256 6d58688082f39c1eb0600c963a775babbd68d95b6275b1c551a1fd334a306852
MD5 f7c39f956969d80b346b0d94937ba0ca
SHA1 34ede92ccc953a41841cf900c9a1caae2f828398
SHA512 8a822a95144ceca04cd1c01cfbf8de0742ba23028b33814f2f9907c3befba61eac875b129c595afd9cc9e97a857af295d7e8e04223d802ea604304ee78547701
TLSH
T1E0C02BC3C0A2BCA1C60F1C307083631733B70C3000165F3252DC48AF59321CC4047507
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 5026f4bebe210d55e4cec750bd8600da681077d30c636ff226d8c2881441c2d9
MD5 f6aff66669bdc8709a4fd62bd1a26fd5
SHA1 5a9f4079b082dcf84c4db704c85a2bf710da8b80
SHA512 122023167ffdde6e44baf47efd1d02a3a4b1b64f9b369d84b97db0e5ad618b8abb44246c07be748aa02fbf939c79b1918a30a285e6a67aab47013b4c239c59c7
TLSH
T18CE020772EF72814ECEFD7DA1831245105107454844DBD4F6855E3D714A276434A9C25
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dbd007fa66f8bce0cb0948cd6e0be43c9f84451e91543f63d33382a81bac688b
MD5 86e2b9a1507e027f773a65d13d08ff74
SHA1 efed70ecad8c2e84d81fa1a6ed2910934b6bde83
SHA512 79c06008ca6f08cbe632cc2137af45d8ab35afb970662c968b8625f45af6885da505b4dcfbe30fdc719650af44221bbf61b0c9ec509be262fc91c7e76a7e7b4d
SSDEEP 96:KR1o1Z1s141q12161gW1e1D1zg1g1gK411g1C1gc1w1g1z1i1I1tHHQ1xHF1ZWBV:C1o1Z1s141q12161n1e1D1s1g1U11g14
TLSH
T1C1913111757B0380BD7E66198268C93A9286B0A63419BC3F37EC11764F66F42DCFD5C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cd6fe0f6-d692-43f6-a0a7-c5f9e22bb8ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cd6fe0f6-d692-43f6-a0a7-c5f9e22bb8ff.tmp
Size 23KB
SHA256 6258ecafabaa7f93def8f82fb56069341c23d8533d660b971c8c86c42faf04aa
MD5 c3375c99a853b840baaa0a89b7b657f9
SHA1 2352e0964955c0092ba75b8b51bf1b37a971c9b3
SHA512 bce5496fd66886f4657c8ee14eed1413bc552c07dbddff4a84de64a9bd6d5cd76e04f65044dc92d42cd85928a5eb94ee3a88cbf40468f94fd8a9b42aee5763ec
SSDEEP 384:wum8dzAfCtgoSFf6MKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVU494oRP5rohMu:wb8dz6Wgouf6M8F1+UoAYDCx9Tuqh0VH
TLSH
T1A9B2EB3B604DCB7E5F800AADEC19AFDB6D9802C79A948D4447FE990C03C77EA511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5abb81.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5abb81.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 74ce3cefa76f58ede7d809ae4a9e84e1b5704ffb08ec5fbd0803b33d3eb128dd
MD5 1069a2416e73be2ada7657ccc1ef4589
SHA1 193d5a8cf6eb07f288eeecb89ddca244294d3633
SHA512 9d9769a3de209060501f6b97166562441cbeb6c9cdf8b9e51c6493ec76a0af60a3749cfbcc8d9d88cd2567334a5ede6474a2cf43d2ab4dd006338757f4825f1e
SSDEEP 768:+rv+4UNbd33leDZIO00TJDNzc4ReyIsPrhy6DqTWh:+bsbZ3ixtc44bsTTQE
TLSH
T1BA13CF31A83899B7ACFA5285F40B39437EF9511782D81EA4D6DE6F4C058B1DE134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 4b4f7f575ba1a620581faa07e7b37cb984fc7c0f1c77afabc79c35d633282997
MD5 110d9f9fbdbce971bd4690b0af657139
SHA1 862e96ce23cdab6bc44be6b35ce1756667579076
SHA512 956e5955deb37a728311a888acadd1f7257991a1f961e97e80d43c175719850da72ba84736dde726c6c905747a7bb60fcc189c02a0af1fa8a39b0c257da1d043
SSDEEP 768:trv+4UNbd33FeDZIO00TJDNzc4ReyIsPrhy6DqTWh:tbsbZ3Cxtc44bsTTQE
TLSH
T1C513CF31A83899B7ACFA5285F40B39437EF9511782D81EA4D6DE6F4C058B1EE134F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 44KB
SHA256 344b2bc37d05158225d26e4b90fca20c2bfa55fef50c273861ad6ad6622e9348
MD5 2ee973dd681e15b815ca9714bef1bdad
SHA1 b04fa8563b7f3f3d446aa58455c0e7e788225e54
SHA512 fdbe7b5a206404483cc8e49aef7cc79670825fd6c562a978aec2b54e5293fc1f47bdece98c63a7229488d16cd1382629b1b7efad339b38665a80e2fe2a9a2f79
SSDEEP 768:VF0rv+4UNbdg37wgReDZIO00TJVNzc4ReyIsPrhy6DqTWh:Ybsbe3sntc44bsTTQE
TLSH
T18913C032A868C57BACFB5685F50B3903BEF94157C1D86AA4E6CE6F0C058B1DD134F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 8904ec216699f5fc769cf50bd74e1f69248364efbc6be54b40430876ebf303c9
MD5 b2fb89b56c473a65fbd81f09ab5fc0dd
SHA1 4b70f1cf77e72f986a90bd0e227736deaad8d497
SHA512 3c46b5a3be646b83b3caa9e01039f43bf5c580c9c27568c0950991800a983ea76b3c722979f8922ae8c13283ca52279157be54bf148fda9a0203ee2cd650add6
SSDEEP 768:VFQz35wgueDZIO00TJ2Nzc4ReyIsPrhy6DqTWy:0z3Jgtc44bsTTQr
TLSH
T1BA03AF329C6499BBACFE5B45F94A3613AEF54127C1D86DA4E6DE6F0C04871DD034F822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 127dd82b214321252f8c10a0a35f727b57b09463f0cd028314bc5815e907e278
MD5 a0186afc4fd13b1ae6f3aee54bd798a5
SHA1 8b55d2ede4184929f1cec4a88d946e7c39009288
SHA512 0e688382f7f10c831a264c0e0bd0f33bf50ba00b67be2afe1fd1edf843ae3c9f49a536219a77f05e5b1a39f5b2d902ac3f3f6249708f19bed248ed83759351cf
SSDEEP 768:6rv+4UNbds3A5DZIO00TANzc4ReyIsXYeVH1S5D:6bsbS3mAtc44bsoEH1Y
TLSH
T1F403CF32E8388977ACFA5686B44776137EF8912B82D81F94C5DE6F0C4A4B1DD130B923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 5031ca05cd00ae5882bd68865b11f49e849c0c3c54538c4b4026233f39a7b694
MD5 bca6f4cdc2258d5a97517b275954102b
SHA1 82d6b7e089ab96bf263df9e01a1d588e8f6cb1d0
SHA512 39baf5cbb1561716041ac781f914d3583d437a064a576b1b4b5369087375fae79cf33fee25b54c61bcd31599a5e5e5e52d68fd606bc973d89e38f12a7dafab7b
SSDEEP 768:Lrv+4UNbds3bIDZIO00TJNNzc4ReyIs2reVH1S5D:LbsbS3ajtc44bs4EH1Y
TLSH
T14D03CF32A8389977ACFA5685F44776137EF9912782D81E94C8DE5F4C0A8B1DD034F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d115ff28-ae45-4e10-b30d-694c000edde6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d115ff28-ae45-4e10-b30d-694c000edde6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download