e112dc41609b3b6397480edf1618615b1d08f669666deb04fbdcabd77c5e03a3

Analysis

max time kernel
899s
max time network
805s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
11/08/2026, 09:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 61KB
Sample260811-ldmwbsbn21
SHA256 e112dc41609b3b6397480edf1618615b1d08f669666deb04fbdcabd77c5e03a3
MD5 c1d64d469fbd95a3fc0acf9eb392bafb
SHA1 a5b3b0755ab33f013e2e698fddadbb36b04e1768
SHA512 16f293c68f05caaaae7ffd15604db7d342ee3656681b5c3d88956685f826d6f777a784d06235b31324c63a2ec18a4d1c15f282c512a67b9f74114e24c8fd584f
SSDEEP 1536:g6lWFhj36AebvFvgcxShjWmCSOpkNEANqfjk6KSsexhrjCuX4YHxhfnCPz5rOPj7:flWFNKAebvFvgcxShjWmCSOpkNEANqfB
TLSH
T1CA5341A3BB24E836E84F9BF5E010D504C042AA678A19D9D4F0DCB3B52F587E66F43943
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5652	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309139237284090"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2115213192-531537726-3295841909-1000\{A58086BC-E2AC-4CB7-B476-D33C85FEFD2B}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2115213192-531537726-3295841909-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4568 wrote to memory of 5392	4568	msedge.exe	89
PID 4568 wrote to memory of 5652	4568	msedge.exe	90
PID 4568 wrote to memory of 684	4568	msedge.exe	91
PID 4568 wrote to memory of 684	4568	msedge.exe	91
PID 4568 wrote to memory of 684	4568	msedge.exe	91
PID 4568 wrote to memory of 1876	4568	msedge.exe	92
PID 4568 wrote to memory of 1876	4568	msedge.exe	92
PID 4568 wrote to memory of 3432	4568	msedge.exe	94
PID 4568 wrote to memory of 5968	4568	msedge.exe	95
PID 4568 wrote to memory of 3432	4568	msedge.exe	94
PID 4568 wrote to memory of 3432	4568	msedge.exe	94
PID 4568 wrote to memory of 5968	4568	msedge.exe	95
PID 4568 wrote to memory of 5968	4568	msedge.exe	95
PID 4568 wrote to memory of 1072	4568	msedge.exe	96
PID 4568 wrote to memory of 1072	4568	msedge.exe	96
PID 4568 wrote to memory of 1072	4568	msedge.exe	96
PID 4568 wrote to memory of 4496	4568	msedge.exe	97
PID 4568 wrote to memory of 4496	4568	msedge.exe	97
PID 4568 wrote to memory of 4496	4568	msedge.exe	97
PID 4568 wrote to memory of 4824	4568	msedge.exe	100
PID 4568 wrote to memory of 3832	4568	msedge.exe	99
PID 4568 wrote to memory of 4824	4568	msedge.exe	100
PID 4568 wrote to memory of 3832	4568	msedge.exe	99
PID 4568 wrote to memory of 832	4568	msedge.exe	102
PID 4568 wrote to memory of 1180	4568	msedge.exe	106
PID 4568 wrote to memory of 5720	4568	msedge.exe	107
PID 4568 wrote to memory of 2080	4568	msedge.exe	108
PID 4568 wrote to memory of 4536	4568	msedge.exe	109
PID 4568 wrote to memory of 4536	4568	msedge.exe	109
PID 4568 wrote to memory of 1568	4568	msedge.exe	111
PID 4568 wrote to memory of 4192	4568	msedge.exe	112
PID 4568 wrote to memory of 4192	4568	msedge.exe	112
PID 4568 wrote to memory of 2404	4568	msedge.exe	113
PID 4568 wrote to memory of 2404	4568	msedge.exe	113
PID 4568 wrote to memory of 4028	4568	msedge.exe	114
PID 4568 wrote to memory of 4028	4568	msedge.exe	114
PID 4568 wrote to memory of 5584	4568	msedge.exe	115
PID 4568 wrote to memory of 5584	4568	msedge.exe	115
PID 4568 wrote to memory of 1860	4568	msedge.exe	120
PID 4568 wrote to memory of 1860	4568	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffdbc48c188,0x7ffdbc48c194,0x7ffdbc48c1a0
  2⤵
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,17206316530927419890,10712414567784236513,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=2056 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1552,i,9060290388290392958,13469127327210950336,262144 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,12099705490852223184,13563715186760730254,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:13
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,17437744410060172793,17379029260776561577,2097152 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3616,i,1479054256885633712,2688415591528858994,2097152 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
  2⤵
  PID:5968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4404,i,17339978318678000899,18007107069010849772,2097152 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,10325570661314213552,17003794727506723219,2097152 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:9
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3792,i,1654697072680084346,15280099336700621395,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3844 /prefetch:14
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3776,i,8043627466975866067,16178411531434970267,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3840 /prefetch:14
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,17881593320410573870,8324405479229865340,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,17881593320410573870,8324405479229865340,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,1543975140175528971,147471342325169258,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=600 /prefetch:14
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,1532399757318456886,16804890367342890846,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=6160 /prefetch:14
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,3035991196687720480,3635806718840685322,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2936,i,2601898487903698932,13510584929079522675,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:14
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,3887265279286714731,12931609768450729162,262144 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,12150828637353448165,1125910934745813844,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=5820 /prefetch:14
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5232,i,15594740777714455551,9630723896470567274,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:14
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,8828041814953477759,14173626042500076465,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=5644 /prefetch:14
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,6466268934835365262,3565414473477873544,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=6536 /prefetch:14
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,3880859076962526470,9472535643534184996,524288 --field-trial-handle=2024,i,12538070815928414998,4273563984453076320,262144 --variations-seed-version --mojo-platform-channel-handle=5944 /prefetch:14
  2⤵
  PID:1860

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1192

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6028

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4552

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c80f71026fa07cc9b3e69c8779d4b4b40710cf7bc2893b740943db0d0f79591a
MD5 590eca05f11ec72644a09f205b548fbc
SHA1 c6521700bee3b500259ee3a70292b90201f20597
SHA512 fddd457c35c61ceb727f99bd39f55314cdeb7d062798c573a377675121f972ed95109fec329f911c502139a1794b70e5a98a57dd3b21b5a70e6518890a361f66
TLSH
T1E7D02B7A37C40404C0D0747221F24602D530C520AC4C81088801702CCC207C3010B8EF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ee00825bbd5a4f21308ad2e10e5a9d3c4512f07fbd288ec8ac76788de6019e25
MD5 c3584e6bc22b3ad2f168ede48d20a993
SHA1 ffb4ecef8f65638ca17e16a32806195193977c7e
SHA512 5fd777359305e67e9f30fc404af9013a876846b1d6db271fa73dfcf2ee22fb25a8e26d4d0c970cc3a8219df11038dc6b4c2c411db652593bda1c3d7643753c0b
TLSH
T18AD02B7637C40404C0D0747621F34602D530C520584C81088801B03CCC207C3010A8DB
MD5 SHA1 SHA512 TLSH

Submit Download

1731d452-20a8-4220-bbb0-c848b759f8e8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1731d452-20a8-4220-bbb0-c848b759f8e8.tmp
Size 23KB
SHA256 a96ae741f27f8882d760fb1adb693d713c64d1085957f327c7a0ece20e8ee00b
MD5 9ecdb0c185e82e6bd0f6463c003d798a
SHA1 3f84991f985c9a23f6cdd7151c527301854404a6
SHA512 93a5ebf09eef543cd637f02f02c9ec360e15f64f31ca924cb137d8a893a8f009a695a0995b4f2852bfe07b6ccd8d29abee99fd68cadcea037ab8e69b8821c52e
SSDEEP 384:KAX0EdqfCtgNbFfVNKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVui9LZRGZrocml:K80EdwWgNhfVN8F1+UoAYDCx9Tuqh0V0
TLSH
T103B2B93B640DCB7E5F800AA9AC196FD77D9802C7A6988D4047FE994C02C77EA911A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 c0e8f103b35039f5395db891ef2d47c9ba39ca56d0430c3e5c4bf4cdd3878bd5
MD5 185a87693f376a1a72d20534c96e79e8
SHA1 d1ca4a86ec4233b5209def0da77fe82b484c3111
SHA512 0134f70a4ad2390d057105d0a578e8b02fec467258d6c2c0c0cd2808f2e3a979a1a905627aec8e40271ec534a9adb2dc8dce79a5495deafb8437f8fd5f3c4443
TLSH
T1FBE026C498C8C32FAF54A887526C930D8294760E93C8BA8E1B30ECC4B581040F2CBAA1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 c44e38a4177d7420fd3007a0cbef94581df4ab4a9cd59c53a033c6694720c7f0
MD5 91a2de122f44687fd534f1006dd75873
SHA1 b19d777b1f05d4e02c9f9e2e428939766424af34
SHA512 2ddf6ea122f639caaf5fc7adf5883591143f414fe8ecf92480f8c88f51e8b75cd67392ca69f69aa2772500bc54902244cb0ca4f1f481146b7434d8554e573413
TLSH
T18DE026C42AC8D22EAE4064C753E8530DC280360B92C8BB8E3B00ECD6B045A84B297AB1
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 1ed0c898b782b024a37a4f917566fd9daee1e8be8f7318f45aac31f11e37dd73
MD5 940c44d169ece4b37fef1507b6952c2d
SHA1 344d2a26db699e8edf986785c1e3d2a046c1ddab
SHA512 782b4f652609f9f538868fec5241fa1428b248564ee88ac3c47890879a09553aabca724b71c4fac6d68cb2b64bbed9af1ef5c98fec48271e48dc689306bc8238
TLSH
T1C04151D017A135D0DBE88EF15AD2BADD72F4D49E25075E502008EDB08A8AF2690CA87F
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9a6c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a9a6c.TMP
Size 2KB
SHA256 588c80523733c6b129eba7fd6341a167fda8b47389f59e30e28254c740bfe42b
MD5 0d45c9d8e8d26036721fd7c865c8d36c
SHA1 2362b6a392593719b2c4641f890dc40870c032f8
SHA512 e9d330c6e176d115148525a43bc05560cf11d471fb5ce86c70481184d61829e0f9be527329b3ff424fe038a6dd757a63537bf82258c12a5f0e8094809d74ab69
TLSH
T1C14151D017A135D0DBF88EF15ED2BADD72F4D4DE25075E502008ADB08A8AF2690CA87F
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 0bc22f2cf1d38f61a3eca60b2b4674bd4b765dc6143c0232713333705246243c
MD5 ace93d76a817799f0bb07fe52d0a80fb
SHA1 b0dce30f789de8b2ef99f6d3ae4cdc36ba5f2399
SHA512 77073644da9ed5d3fc681a88be0426e89a09c18f3aaeb6b9914d060a5fca95840ea258ee76b2c6531e9ff213f0d19ab5653bd4135fecff350a08dac3d5f2a40c
TLSH
T182618DF743B0867E9A1192F0EA196E1BCE5D0017436CB8A589E06E2763B34B1E04179F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 00d715055d7c076196ed25f642f5d67413ee0e17c37038a38c7116da98fc86ec
MD5 972081876f6dba274efbe8e11527e5e2
SHA1 5decc1a857267e6c1b249545bed8ccc899e4fb63
SHA512 fd1d6343dab4a92a77a1ac7af94f671234bfa025f283250af1cf39c7b605a97944586021a068bd759cf0bc41807e3638c0163dcd66cc10741032de9cf2fde40d
TLSH
T194518FF743B4467E9A1192F0EA196E2BCE5D0017476CB8A589F06E2763B34B1E00179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 c2cae5aab7ca59c5fd2417a2ca60dfa5f46b08e21ae339994b9f0ee24b5bd7c6
MD5 1bca8333f16d75f16156b80cd0547b2a
SHA1 fa8567534def3493891699069e22c8fd5a9cb87b
SHA512 f239a52653024d7b334641c40ce46afd55dc6c3c8f87d0cbb6027263e8cf114a9baac1ebcf6889d843b6a06767333d065f2ce58f5bb32951f05de07eebbd599d
SSDEEP 192:sxR8RTbI/fbsadFZltd73AtzzoA8p4J/g6+WNIYZFLI83GAIgD/J:sxR8VI/fbsadFDX7d8/5ISR1
TLSH
T12042B7156928A97B9CCBD20DBB55BF53D3F95032A1901E58A6FC970C04E7BDE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 52d1f2cd92433ed274878a72ce0d3373c10c2dd648dd366e022f284fbc1618bc
MD5 83c6f4288b51226bda44829750caeb91
SHA1 9e268812ff64a3df1f5cb9b824da4aca71ca4ab4
SHA512 14de6b13442ff9e96833de7c7bbe6e5379f27e60c66884a9a58b5471d17f33a0d600498f8cf5ca6c9a69e1a82015fb5ab574aaad3c6c0829dcb2eaa8f8ef4e02
SSDEEP 192:sxRrRTbI/fbs+FZr73AtzzoA8p4J/g6+WNIYZFLKa3GAIgIJ:sxRrVI/fbs+FF7d8/5ISbs
TLSH
T1DB32C7156928A93B5CCBD20DBB55BF53D7F95032A1902E58B6FC960C04EBADE220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 056a227911a8e2b7fadaa7ee0eb483440eecf58114fd4c4428cc663c4e965b75
MD5 30aac2b7f3a113b72e47133e607f87de
SHA1 9cd1b0c2047d948e1acdd79a72751f1dc23dd107
SHA512 88c5568791a003ae55921cb1f3bb934d7620f51b3e1a86deb4be47ca5219923c25deee6efa2d47bdaedb83196d94d6edab288da4f0f7d7cb17ff3d066e6b33b4
SSDEEP 192:sxR8RTbI/fbsadFZr73AtzzoA8p4J/g6+WNIYZFLKa3GAIgDZJ:sxR8VI/fbsadFF7d8/5ISb3
TLSH
T1F142D8156928A97B4CCBD21DBB55BF53D7F95032A1901E58A6FC960C04E7BDD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 273B
SHA256 1673dd38c0e3a6773e05305741a209791a749e236901840418daa903c83324a7
MD5 9cef3ff6315d1cc67e29023e39a126b7
SHA1 9c1b95a7016a4cf2d5b2cf7d4d11edf17981149e
SHA512 105a8340a5f1660abc35143459bc0dce3976540d3d85eafd4849c6edba06f5d5aa62c94f9ab569a0439324b9dc3622d9a1c1d3a02eb7b7ffbe7e58c236c45cef
TLSH
T137D02BF71EA62450DCFBC3D1147654E140407C549D8AECCF116D95DB14603107717D31
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 2474669192dcd763f9359065fb4c18c959fa0dfbede5117a4fa20e3b08a2f60a
MD5 a3e7b207142947fb0e3d2cc0fec150d8
SHA1 6d6a56ce98981f5433694ac0b2e837dbb12f4389
SHA512 67d5c9f3ce43adbb04f2c751384f15f7e84a3e0bdb3591fc8c23ad5b39981faf932bd96bf13082afb88fa4648bc6ba2804e8ab06c7753e7a2b00d1f89f86860a
TLSH
T195811501747612817D3E772C81BC891F468374B23459AAEF3BAC51611F6AE078EFD4D9
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 d20c017c590b46ed4c18a2db5e26a4b635b4402b88aee87a111c279a0a56c2d8
MD5 ce43385150d499529ae5c91c476f2ce9
SHA1 36576a22700899a853d2685472382a29c4806779
SHA512 00a54818aa3d3bd5e566f6517c4f78b599e884ea10d178262f372d1abd8f817acbbfaa9d4db6149f9ac865b26bb3d1b1c6adfb7f1e226d4c22922b9a351a0f39
SSDEEP 96:KRiVAE+imkWivPgMkK4BgGkckEP+k5HWLa2Q44eWIdFgWeK4rgEec+W10FdiKWcc:CiVAE+imbiv4MYBgGLkEP+k5HWLa2Q4+
TLSH
T1CB915201747A12817D3F7A1C81BC891F568374B23409AAFF3BAC41A11F6AE064EFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

b7b5b7c2-9312-40b7-b53a-0d095a224763.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b7b5b7c2-9312-40b7-b53a-0d095a224763.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 3f6eb03d09e4f999f9b15216d94b27e5b0b9f78eb372b96400aa18518ac3c5cf
MD5 d86be20cfc5ba8d9d717c83c8112c01f
SHA1 e77dad14b32587e641d8d9a5302ceb0089ba06ec
SHA512 5b3516281b6aaad93765fec27234e2629ceae04c8a3c9808e74601a2436c5b20e07d18fa59c92dc2948fa6130ab8bdfa3dc07fa3fedb9ea4933c088503e84b37
SSDEEP 768:bG3d21+LeSFOUx+1X4fouOToPvB2thtA9VAgXPi9PQ:bG3Klsnnwthtt6PD
TLSH
T175F2C071B8A85D53DDE9D7D8720A32425FF48163F1C01FD85ADDA70D0987AAE070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 fe5f21a93d79f817731ed904248c0be35b4a877b9ebff032e96f13a98f380f28
MD5 204fe79742e566a8181443e0ef125ff1
SHA1 6a72aa809c79ad7cdff37dfe79cad6d48ffe9dc0
SHA512 e5bc8b51d893deb7634ba97fb815e3495f9cde5ce9b5d6b8707848a1df6217e3d00ee5704103c3ee6228968b536eef1bfaaf345b50a3364f198e8f21a3728075
SSDEEP 768:hG3U21+LeSFOUx+1X4fouOToPvB2thtA9VAgXPi9PQ:hG3Hlsnnwthtt6PD
TLSH
T130F2C071B8A85D57DDE9D7D8720A32425FF48163F1C01FD86ADDA70D0987AAE070BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 71b076d0b0fd9e30cc602efc7ce9541947cf2bdfc420348f24660a8ce2ce148e
MD5 e6d8d3162f1a2075ed605ed6b3fae503
SHA1 4e922bfbf3214a16e476e959711c6d6018ea477d
SHA512 d8364b7d2b5d570586405f9ae3852213233aa7b1201727e0bcde9c99f76016702beffa380196ecc906babc192b5e542379bc6615704bd2cd0576b1ecb0e69488
SSDEEP 768:cFQ33PwgN21+LeSFOUx+KX4fouOToPvB2thtA9VAgXPi9PQ:P33UQsnnwthtt6PD
TLSH
T17503B073A8988967EDE9DBD4B30A32429FF081A3E5C06FD4ABCDA60D05975DD070BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 8003e1530060344979e887c1cfe57a8493d4a804193d46e9c7b2b9d2b8a4bca4
MD5 17d44021bc116976f071e69e5353ff7b
SHA1 058bbbcfc6286d95ed6a3f53450dd9a50441e292
SHA512 ba4150b3d56e3fceaf90ed6a83001969381e6dfeb6bfa380ade4deffef39345052480f2cfebdbfa575fb424b90dd370adebfdf2bf9c3d072bd0db78735fa491a
SSDEEP 768:Frv+4UNbdH3u2P+LeSFOUx+xX4fouOToPvB2thtA9VABXeVH1SlX:Fbsbh3LBsnnwthttVEH1Y
TLSH
T1EA03CF32A4AC8A33DDE6D398710B72432FF4915396800FD49EDD2B4D069B9DE170BC6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 351554bf5a261bb4fffeab577549b4ab6bc5d49b519e31325d36221e1c3289d2
MD5 fd5c684b3fa47b43414d6863f06ab69d
SHA1 dacef2e6a17979d254a1cae622ff5c26db58b98d
SHA512 445f346b2e9bcd6c4caf63687c3a135392aabb8cd929545a991b815f98b139e23664204a8763100edd4ad2feb0b552c53da3c588b576105cc302d2212b130a08
SSDEEP 768:grv+4UNbdH3hEP+LeSFOUxbX4fouOToPvB2thtA9VAwXeVH1SlX:gbsbh3zsnnwthttOEH1Y
TLSH
T1CE03CF32A8A88933DDE6D388310B72532FF4916396900FC4DDDD2B4D069B9DE570BD66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cc1dff2e-0c19-4b74-9377-0965ee032de1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\cc1dff2e-0c19-4b74-9377-0965ee032de1.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download