160c2c3912de830e943098ff074adb033dcea8f8c5b930bcef27a7a7cf05d14e

Analysis

max time kernel
898s
max time network
735s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/08/2026, 09:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
training.html
Size 13KB
Sample260810-lml1dszzfs
SHA256 160c2c3912de830e943098ff074adb033dcea8f8c5b930bcef27a7a7cf05d14e
MD5 babde470f4a8057ef4fab72ae33f0444
SHA1 f6baad498ff5d3831389ff74c2f077c1603cb819
SHA512 7e6d444566558fffd12d0b7b959c571a640650350cc03d9ba19dc64cefc004793631f4ad2e8e49a9b5eda668bae0c58a2c5714a081131b6c0f25a559a602ac48
SSDEEP 384:u6ZABML+nKuy2qWy+6hvXkHumpzvpa1ecUZ/C:u6ZI0vXkHumhvU1ee
TLSH
T1CE52B52148F44477026182C92DBA7F2AAFD2D617C646698571FC0B941FFBD83EC27A9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5764	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134308283573010826"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{1A9B4872-1361-44A5-946F-DCE0EEB602D9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4952	msedge.exe
4952	msedge.exe

Suspicious behavior: LoadsDriver 5 IoCs

pid
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe
1804	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1804 wrote to memory of 3616	1804	msedge.exe	88
PID 1804 wrote to memory of 2108	1804	msedge.exe	90
PID 1804 wrote to memory of 5764	1804	msedge.exe	91
PID 1804 wrote to memory of 2108	1804	msedge.exe	90
PID 1804 wrote to memory of 2108	1804	msedge.exe	90
PID 1804 wrote to memory of 2776	1804	msedge.exe	92
PID 1804 wrote to memory of 2776	1804	msedge.exe	92
PID 1804 wrote to memory of 468	1804	msedge.exe	93
PID 1804 wrote to memory of 1128	1804	msedge.exe	94
PID 1804 wrote to memory of 468	1804	msedge.exe	93
PID 1804 wrote to memory of 468	1804	msedge.exe	93
PID 1804 wrote to memory of 1128	1804	msedge.exe	94
PID 1804 wrote to memory of 1128	1804	msedge.exe	94
PID 1804 wrote to memory of 2436	1804	msedge.exe	96
PID 1804 wrote to memory of 4416	1804	msedge.exe	97
PID 1804 wrote to memory of 2436	1804	msedge.exe	96
PID 1804 wrote to memory of 2436	1804	msedge.exe	96
PID 1804 wrote to memory of 4416	1804	msedge.exe	97
PID 1804 wrote to memory of 4416	1804	msedge.exe	97
PID 1804 wrote to memory of 3184	1804	msedge.exe	99
PID 1804 wrote to memory of 4612	1804	msedge.exe	100
PID 1804 wrote to memory of 3184	1804	msedge.exe	99
PID 1804 wrote to memory of 4612	1804	msedge.exe	100
PID 1804 wrote to memory of 2740	1804	msedge.exe	102
PID 1804 wrote to memory of 2708	1804	msedge.exe	106
PID 1804 wrote to memory of 844	1804	msedge.exe	107
PID 1804 wrote to memory of 2288	1804	msedge.exe	108
PID 1804 wrote to memory of 4448	1804	msedge.exe	109
PID 1804 wrote to memory of 4448	1804	msedge.exe	109
PID 1804 wrote to memory of 4952	1804	msedge.exe	111
PID 1804 wrote to memory of 4444	1804	msedge.exe	112
PID 1804 wrote to memory of 4444	1804	msedge.exe	112
PID 1804 wrote to memory of 4744	1804	msedge.exe	113
PID 1804 wrote to memory of 4744	1804	msedge.exe	113
PID 1804 wrote to memory of 1552	1804	msedge.exe	114
PID 1804 wrote to memory of 1552	1804	msedge.exe	114
PID 1804 wrote to memory of 996	1804	msedge.exe	115
PID 1804 wrote to memory of 996	1804	msedge.exe	115
PID 1804 wrote to memory of 5740	1804	msedge.exe	117
PID 1804 wrote to memory of 5740	1804	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\training.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffcb089c188,0x7ffcb089c194,0x7ffcb089c1a0
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1560,i,16255994583612732454,10735513585964421692,262144 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,16705617373076859445,7216808351700915992,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2180,i,4001765761985135914,12810760209597856593,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3276 /prefetch:13
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3552,i,14626521943070724263,2273323819072366183,2097152 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,6800876911909819137,2018986243632045243,2097152 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4336,i,13621223000494498110,9881307515552391802,2097152 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,6678811387000370729,13720950812960133267,2097152 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:9
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,7338621956690618710,1183461835772941227,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:14
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,7926433756189076375,10001354994384933917,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,989964223229556625,4810650306052212044,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,989964223229556625,4810650306052212044,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:14
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4352,i,4070411790340533390,12053165109223321486,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4340,i,8782501058956421188,9422171406665617027,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:14
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,13008646528298597018,3622039596953118010,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,7445067264619482324,11701447071525518814,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:14
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5492,i,7424930823149424805,13368509693281986359,262144 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,15089924735126047491,5959841803953872118,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3692 /prefetch:14
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,11949644043936964799,8993590503206369971,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:14
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4092,i,1028676229334722164,7701388934958298888,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=4132 /prefetch:14
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2260,i,5513455355169692678,7521644115826930608,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:14
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6684,i,17523848482076693039,4782798195266239367,524288 --field-trial-handle=2476,i,17525927712615734998,6309994560006034776,262144 --variations-seed-version --mojo-platform-channel-handle=6688 /prefetch:14
  2⤵
  PID:5740

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3924

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5488

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:6020

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

4f515f19-5533-4e68-8c54-e0e3020d0bd2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f515f19-5533-4e68-8c54-e0e3020d0bd2.tmp
Size 38KB
SHA256 8654cf482b812b8404bab2b39c1de2dc7c1375ceeef5e175543fc9cb240f22b3
MD5 14e379fe0c541c874b5c81e9f96dcc15
SHA1 74f51d81ba2f7ed4b82b781cab9e63936cd806ed
SHA512 b96c712b029f12e51f606498f39d09a77b45dea37453935edb4868da499dca4afa244ce10e34c7edde02944e4beb9ff7823fffaaf015f7e02cac7d7eee6f9044
SSDEEP 768:drv+4UNbdz3E7S/TBOWvynZt6ONXyer1IRCzni9nF:dbsbp3EW1SIqnsF
TLSH
T18D03BF31E4689E334CE2A2D6B10773437FB8105785C44BA0EDEA2F9E069B99E130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 52e7ea9319545fdc619e5769465609a9ce26fbeca02c18432c84df6d97c8fa56
MD5 02ff1a62edf5debde4c98635316a5a97
SHA1 627b6c98f56e2617c26951fbe59fe6c897e0fa6a
SHA512 dfef358563107e9411f49e967d083f032476af99655092fd2ca2ba0842008f474f7923eee2cca1bc93d741461ae151621bdff683e44d9c7d1fa9356b8c107366
TLSH
T177E07DC41BDCC23FFE427A4B5278534CDAC1360BD6C8F94A170484C57082E44FAD7690
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 cc5940839a0135f3f59f7e7248d6e038789aa74046c4647bc0fae5cfe9f2a81a
MD5 dd42957be1aca0a5f5724c4315326565
SHA1 c0dce117fd208c517df53db3f1862c93ca01b1b1
SHA512 61ccad09104b302ec797841ef690873c536e816bb80832e12c740413921f4f1c9c16618ba5f43d42acf1ec62a2c1bfaeb84e4800f6b172c23aafe5bb1a49bc90
TLSH
T1BCE0268954DCC36EEA54B45B5279578CDAC1360B9AC8F98A17008DC47606F40E7976D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 8b43ff2bd3506af59dce28c485e8fde6838d35070c70f2d15513fdc4e2c015c6
MD5 787293ee75737234bbc9bbc3a8cc7752
SHA1 d720a866bd843057ad710e8ee5a3802f656d8b85
SHA512 147740e8ab023da6f9af18ddf41396196230e1090c9745faef85aae0604dedb19ca77302e3786624d3f66fa8787c2a4d3e86f20f9a3d3e3b5372de7aba6bd6fa
TLSH
T1BAE0209514CCCA1DEA48B4577378B34CD6D0360F93CDFA052B0088C57145F446E83754
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e0e3859c91b4aeaf5a29a2f157cee493da11a8fd37d821f73a674bffb4720cc4
MD5 cb15868a99c06cb77a03fa9835dee7ee
SHA1 17043d2fc87dc4abed9c12d345a7c9b3987f537e
SHA512 9c048ec2a0e10cb19c95978310ed053c8c115c32a6227792cacbbdd7a96ff92e9626e35cac0fe00f030549bb36798cb3180c997bd69c3b3fdf5985967a6e31e6
TLSH
T1F841C8114B7B05EBD76313B52EF1A78572B083970F072FC94E5C39B869C1B235091029
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 42b39fa380b33f586843e3109d3ede55a3a85897a99c72ab5da64ffddb6a9069
MD5 9c2cf80019d1ffe7ebf90a6bfc8b1df5
SHA1 7724b7e8b5663e07fd11ef8fccb32e227f58400c
SHA512 7c4ba44f35c5c58571e06663fa04bad3269f198b3918019e8a38b0bd8a0f05c5013574a25db299f4c363e1efbc937bbb6bd908ae1a4d5288510984fb474380fc
TLSH
T1E231A0F783F4857E8A0196F0AA14AE1FCE2D0511435C7C6985E0AE2793F3472E041A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 38fa5f66e3ef508390b97e74e9bd6080da757800aa0edd4a9b2d54b4ae19d4ec
MD5 9ba1477d30ae907f04e5a3f7672a77a1
SHA1 fe49666d478ce04fcbd4e36bf4ac9815bbca23e4
SHA512 55cf74723ed6e540b46c262c927e94a5064cdac3af8aa3b43ea0e139b0b15f5c82e2378080bb71243dcd4b6c2938cb2ec40459b0887c16a19cd58132e796c19d
TLSH
T15631A0F743B4867E9A1196F0AA18AE1FCE2C0511431C7C6989E0AE2793F3472E041B6B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 cd8d2ca129226d5fff8c57454cc1d9246c675aad40c1bb1c7d235b796ad83453
MD5 1de0298d6ef43992f182110310ca841a
SHA1 f26ab9d3bf2713b4e79bb19035dda8dae8c363a8
SHA512 27c48c2203aafc74d62a91eb4226861115fac6d42c5e9cf061101e3dc126c4b8f89eff6b242ccde1b42642a12e1698ff581bb42680fc26cde575ed432c21a89a
SSDEEP 192:sxRORLb7/fBsTZ9wG0zoA8p4F/g6+WNIYoXeCYvG9IgDiJ:sxROJ7/fBsTZ9pVQ/5IFPK
TLSH
T10232B6166928A97B8CCAE21DBB65BF53D2F9103261D42E58B7FC961C04E7ACD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8d00f01452bd485f0cba5cc1de950033027a9fe11e8218e063f909eef6a82b7f
MD5 485514bf86e2ce749ccd3d2b104fbe67
SHA1 dc105dac3811dab768e8f4003cfaa08b35bcdfce
SHA512 802fc946be5b5d789910628dd444f6d902b6440605db07cae4bf8f1c0fd87a72397a18e586d8cbd8010f51d1f025c9b821e5b826543129562bb851533c60e5a9
SSDEEP 192:sxRNRLb7/fBsmZFwG0zoA8p4F/g6+WNIYo5wCYvG9IgIJ:sxRNJ7/fBsmZFpVQ/5IhPs
TLSH
T1D832B7166928A97B8CCBE21DBB65BF53D2F9103261D42E58F6FC961C04E7ADD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f74d0c4c332222742eb273794b38ec0bb1abb9189010f15678d1574d5c0e059c
MD5 2afdc8098b5bbab8a0f216742f021838
SHA1 f95416ad1e1fd501aa7c8f3d46a4464f9b9120d5
SHA512 9cfe3e8ee5b75579910a6d12598547c174f7725d4ca91290dd08f651d791618079e8af76b4317d9b742eda5a71b53bb0673aca4d10f072053bd984b97c222d05
SSDEEP 192:sxRORLb7/fBsTZFwG0zoA8p4F/g6+WNIYo5wCYvG9IgDAJ:sxROJ7/fBsTZFpVQ/5IhPA
TLSH
T1B832B7166938A97B8CCBE21DBB65BF53D2F9103261D42E58B6FC961C04E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 5b090cd593fb44909c8e5a10ca4646f41e0733c53f28f44aac409c2930145d69
MD5 088e25541d2d0b2a8ee85e8c218d3971
SHA1 47ace9578d9eb968c5a99c0075a82a74c1ccd999
SHA512 f229a53eac79e0cc75a0644d0e55fe6503431966e97c83cb3b82c603ab04b7e0a866fa82d8fc26656d93933f84cc542f8dd041192c3cedf0af4809913dc4bff9
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXNro98I:j26H0RWgs2f028F1+UoAYDCx9Tuqh0V/
TLSH
T15FB2EB2B640DCBBE5F800A9DDC196FDB6D9802C79B588D8047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 273B
SHA256 3ffb4f69e4ba0260cdebd3f2edcab099e731cbc80ecb9e35aa7d4b7183d95e79
MD5 1afe08c5e282f28082ca4b0fdb9d5c2b
SHA1 8994008801c84d6c3812fb4e433dfa4456b39b40
SHA512 ae488216c2529f2684359f1b7a1f5e441e7b8a7d6666f5a7b7081a5f879abe40d2bda068717de84c965275d31e9ab037aee4696b054d855cb9ff7e5e15f42ea1
TLSH
T1E5D02BF729952820ECBF97F61431A4940141B8A4D949EC8F251D93C310B02227C67C20
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

133cffa4-ed50-41bb-881e-8c860f41feb8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\133cffa4-ed50-41bb-881e-8c860f41feb8.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 f5573258e2d118f68e614a07c58dc73e0bbed2967ef46cc0636bf3a8d9403f44
MD5 bf10f479144ca71249c3a85d9b135ca5
SHA1 96655d1eab437aab6897dfa99b240d690ebe8cda
SHA512 de4bc0f200b7ccab0c3ac4467df2269c689bb274423f3c790161e85210abe8396217adfe961f2204af53a4d0b79e14198b78219b35e6393b4ab17bed2908fa04
SSDEEP 768:vY3lrS/TBOWvynZtWONXyer1IRCzni9nhy6Dqho:vY3lGDSIqnsTQo
TLSH
T169F2BE30D4A45E234CE6E3D6F14A3743BEF95067D6C44A90AAEE6F2E05D79AE030F416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 64588f8182f998a948770f5b8858a4cb566484f9e52280c4e4e6b5dc266693e2
MD5 86abf4a8b42d21718b4f6fdd4295b3bf
SHA1 1d88a0191ab1dbb7ac34ce2562e7a02d5766f404
SHA512 c9f720ba6f22f6267f7fb669c90d1ae758cda95c9c236f69dc2362a39544bd484b6a2d63144ecb3753ca8474d3aadb3d15071f8ed8099285cd37e908d210496a
SSDEEP 768:Xrv+4UNbdz3ks/TBOWvynZtSONXyer1IRCzniwneVH1SK7:XbsbV3zvSIqnjEH1l
TLSH
T1C703B032A1A89E334DE2A3D6B14773437FB85057C6840B90EDEA2F4E069B59D130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 6d4a1e0e477af063b717eb28ca8cd21fdb6e03945ed3dc68dd0edf83141956b9
MD5 598ee6d03c81c0af555a10f3494c1db7
SHA1 883e7cb1883b93f6269e6e3b41135c0b23507a3f
SHA512 9ec30da3bf8903a0ac4c827068742a894bed472ab793b03641e531f7466206df77297f1131d4691fa81a5756b519159d767f8010509ebaf8a3f429f2a0f093a1
SSDEEP 768:zY3ErS/TBOWvynZtWONXyer1IRCzni9nhy6Dqho:zY3EGDSIqnsTQo
TLSH
T1F7F2BF30D4A45E234CE6E3D6F14A3743BEF95067D6C44A90AAEE6F2E05D79AE030F416
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 cfbd35c2ccb1cd045850e0a7dbbe58d672a8ff716029b952cd3e3a5ff9cde751
MD5 e2d6a4f0e486f8589bc6d817e32d5a03
SHA1 ee07809a086eb8c2c51223b316097da6e5196a5c
SHA512 cdcaaa99ee4b706a28414227966ac6ca25242f14dcbcc395cd9810930eb5a8bfc53d6b9b6e52f1bd625731df583972e69d72990a7ff69a7262526aec20c32eea
SSDEEP 768:TFQy3LwgprS/TBOWvynZtxONXyer1IRCzni9nhy6Dqho:2y3bG4SIqnsTQo
TLSH
T1AE03BF3284948E378DFAE7C6F54A3343AEF94067D5C49AA0BADE6F1E019759D030F816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 798c3e4396138a5cacb9bead8b33901b1ccb03da1fc823314673042543f22143
MD5 e3f4f12bbc027829a4287b041f58770e
SHA1 a9a44c060ecf9f156d26613fc5dfc4fd8ded46a6
SHA512 7ff346497c1245ffca304667210baa494f3b7f8d2cef841ab5174293b618a635a0e76af8bc66772097835ee0176d1b0ec7fc7f5800ed432a0924929406be723a
SSDEEP 768:hrv+4UNbdz3+g/TBOWvy4ONXyer1IRCzniBheVH1SK7:hbsbV3ZZSIqnCEH1l
TLSH
T15403CF36A4A89E334DE2A3C6B14773437FB85057C6800B90EDDE2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download