hxxps://emerge-creatives[.]com/so/a7Q0IlsH8/c?w=Q-EOPVQ1ak1AQoIlIHQNuRVqJCOBwLQKYpP8NFYPKeE[.]eyJ1IjoiaHR0cHM6Ly93d3cuZW1lcmdlLWNyZWF0aXZlcy5jb20vd3NxLWFpLWJ1c2luZXNzLWlubm92YXRpb24tbWFuYWdlbWVudCIsInIiOiIwZGFmNzIwOC0yOWI4LTQ4YmItOTcwZS03NzE5MTgzYzU3NGEiLCJtIjoibWFpbCIsImMiOiIzMmRlODQ5Mi05MDY5LTRkMTAtYTIzNC01OWZhNzE5Njk3MzMifQ

Analysis

user interaction
yes
max time kernel
140s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
18/08/2026, 03:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://emerge-creatives.com/so/a7Q0IlsH8/c?w=Q-EOPVQ1ak1AQoIlIHQNuRVqJCOBwLQKYpP8NFYPKeE.eyJ1IjoiaHR0cHM6Ly93d3cuZW1lcmdlLWNyZWF0aXZlcy5jb20vd3NxLWFpLWJ1c2luZXNzLWlubm92YXRpb24tbWFuYWdlbWVudCIsInIiOiIwZGFmNzIwOC0yOWI4LTQ4YmItOTcwZS03NzE5MTgzYzU3NGEiLCJtIjoibWFpbCIsImMiOiIzMmRlODQ5Mi05MDY5LTRkMTAtYTIzNC01OWZhNzE5Njk3MzMifQ
Sample260818-ej5vrsfc46

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
464	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134314991669518953"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{C3826A6A-4E31-4982-AC33-862BEACE7001}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1104	msedge.exe
1104	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe
1768	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 1768 wrote to memory of 4524	1768	msedge.exe	87
PID 1768 wrote to memory of 464	1768	msedge.exe	89
PID 1768 wrote to memory of 4056	1768	msedge.exe	90
PID 1768 wrote to memory of 4056	1768	msedge.exe	90
PID 1768 wrote to memory of 4056	1768	msedge.exe	90
PID 1768 wrote to memory of 2808	1768	msedge.exe	91
PID 1768 wrote to memory of 2808	1768	msedge.exe	91
PID 1768 wrote to memory of 4192	1768	msedge.exe	92
PID 1768 wrote to memory of 3408	1768	msedge.exe	93
PID 1768 wrote to memory of 4192	1768	msedge.exe	92
PID 1768 wrote to memory of 4192	1768	msedge.exe	92
PID 1768 wrote to memory of 3408	1768	msedge.exe	93
PID 1768 wrote to memory of 3408	1768	msedge.exe	93
PID 1768 wrote to memory of 2884	1768	msedge.exe	94
PID 1768 wrote to memory of 1232	1768	msedge.exe	95
PID 1768 wrote to memory of 2884	1768	msedge.exe	94
PID 1768 wrote to memory of 2884	1768	msedge.exe	94
PID 1768 wrote to memory of 1232	1768	msedge.exe	95
PID 1768 wrote to memory of 1232	1768	msedge.exe	95
PID 1768 wrote to memory of 1840	1768	msedge.exe	98
PID 1768 wrote to memory of 1840	1768	msedge.exe	98
PID 1768 wrote to memory of 3396	1768	msedge.exe	99
PID 1768 wrote to memory of 3396	1768	msedge.exe	99
PID 1768 wrote to memory of 3492	1768	msedge.exe	101
PID 1768 wrote to memory of 4076	1768	msedge.exe	106
PID 1768 wrote to memory of 4076	1768	msedge.exe	106
PID 1768 wrote to memory of 4076	1768	msedge.exe	106
PID 1768 wrote to memory of 5380	1768	msedge.exe	111
PID 1768 wrote to memory of 5388	1768	msedge.exe	112
PID 1768 wrote to memory of 5396	1768	msedge.exe	113
PID 1768 wrote to memory of 5728	1768	msedge.exe	115
PID 1768 wrote to memory of 5728	1768	msedge.exe	115
PID 1768 wrote to memory of 1104	1768	msedge.exe	117
PID 1768 wrote to memory of 6004	1768	msedge.exe	118
PID 1768 wrote to memory of 6004	1768	msedge.exe	118
PID 1768 wrote to memory of 6004	1768	msedge.exe	118
PID 1768 wrote to memory of 6012	1768	msedge.exe	119
PID 1768 wrote to memory of 6012	1768	msedge.exe	119
PID 1768 wrote to memory of 6012	1768	msedge.exe	119
PID 1768 wrote to memory of 980	1768	msedge.exe	120
PID 1768 wrote to memory of 980	1768	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://emerge-creatives.com/so/a7Q0IlsH8/c?w=Q-EOPVQ1ak1AQoIlIHQNuRVqJCOBwLQKYpP8NFYPKeE.eyJ1IjoiaHR0cHM6Ly93d3cuZW1lcmdlLWNyZWF0aXZlcy5jb20vd3NxLWFpLWJ1c2luZXNzLWlubm92YXRpb24tbWFuYWdlbWVudCIsInIiOiIwZGFmNzIwOC0yOWI4LTQ4YmItOTcwZS03NzE5MTgzYzU3NGEiLCJtIjoibWFpbCIsImMiOiIzMmRlODQ5Mi05MDY5LTRkMTAtYTIzNC01OWZhNzE5Njk3MzMifQ
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff807ddc188,0x7ff807ddc194,0x7ff807ddc1a0
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,3209487036301250175,4687214935140578646,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:3
  2⤵
  - System Time Discovery
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14453305933483388029,2522409609309103488,262144 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:2
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2396,i,2916261322638119186,6371040455157782787,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16607144009260139117,1793777210102070860,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,16982844755370531144,1236375709533671964,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,13003660061203288680,10947227389810612850,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,16680841705640736955,150203082041522526,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,11550545031674947178,17075980516212362658,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,16226744649697963651,11022807865937138086,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,6386666636272632193,12940658775549679820,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,6386666636272632193,12940658775549679820,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6280,i,13460649138269129224,12976324220346379870,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,10034494761934622177,13487644470925793333,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:8
  2⤵
  PID:5380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3408,i,1701888731329631993,5222633397878427014,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,13816147357066090935,4681772963275375008,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=4724 /prefetch:8
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5080,i,16925633165854365392,3679860810795493695,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6112,i,15715470858012659750,13798098372166032068,262144 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5016,i,5485046300282876804,2612834191436149831,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=3536,i,6132402357491791480,15244823142760445316,2097152 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1000,i,1467739629061549510,1721950266216250470,524288 --field-trial-handle=2680,i,7290013008078505774,2383441270703433515,262144 --variations-seed-version --mojo-platform-channel-handle=5012 /prefetch:8
  2⤵
  PID:980

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4104

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 337373c4da28ee3002914faa7f66bd64bd0d39f2478ab28111896aef3d732e8e
MD5 1538b94629725dbea32dff25f55639b2
SHA1 133e292c7d10ee2edc74eda507e40b826be644bf
SHA512 ace9ab652f654068c864bb79cea4a34770b9e3e2dfeab9c984cbcd6625ccf3ed273271281737948f7076a7204abb9af1697268a6d42c8b81e2eed910356306c4
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1DFB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_000095

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
Size 24KB
SHA256 19d95357b2648a805bd609b7732489af6fb037ec53a704d56d08e5fe70b78430
MD5 3432608af470bbca69013983170bf818
SHA1 ed0042b8f92c8b23430b81c4f89f5e043ab972dd
SHA512 0e9862974a5d8142511b0f586923b26e83918b0ea82584efb745addb2e054d346de2b8f26e7ac1b863a8cdf4622a181fb57bb95f89211189327cfd444487bcf6
SSDEEP 768:AZKSD3JdE56u1GHQ3ZUI1Sv0SuO30Q86w/z+On:AHbJdu6u1D3ZxXSuU86I+g
TLSH
T1DBB2E1DBCC7408FAD7462B58E93D483C79A281127A219801B39F55FEF2B8AE4791C735
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000096

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
Size 25KB
SHA256 39ccc7f3ad8c80a05c07414873ef460f69d2b77bb4e28e8c8f09acbf2862aed7
MD5 9a2cbc1e93946fa77442e7f79b7a5fb0
SHA1 af92888ca34b145dffe449860791509b7e5d8089
SHA512 8cf13e2c4b6c3384ee989bc553a5c3682e6778fb36aff82b61505d77ea91c44a5faecdc05f8cc1056e620ef59faecb93f7861b6898b662bc8862e43c8ca7351b
SSDEEP 768:mW7UgLVSgY6a+WxCnvI0Ngqp8K/jgTuxJ6lUUz2p1:mFyEKIagQET86lUxb
TLSH
T10EC2E191AC836A6FB66BFE13E2A82F84EA3454F2677571ED020CCC786661324135563C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 49KB
SHA256 5376177e74d130366e484dc741e88e673ed9445a7b3205c9ff792958ac62fc89
MD5 44a6eab55f662472dc5b31137ec09240
SHA1 eff266c8728370ddf22f2f4afacbcf3dfd7e91dd
SHA512 d694db312acf7eb6a0a74f72e9cc3847ef0838fa264e86d2caf34de7f05968756862d50d63985062dc5fb654decbceb8bef80cedc1af6a09440891729b368070
SSDEEP 1536:cLT0CUxH/FXg1jzTnhYTFaOdk+cGdbzPC1nxh:cH0CUxtm2F7Xcnn3
TLSH
T1693302FBAD8169110B3A8437AB8C42EC3C70289F48F9C84EA315E96C67EF1177B57121
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000ab

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
Size 21KB
SHA256 ed113303beb3555c02d2135726b6a427c77f87d94c58d26d31f2f2b94afe713f
MD5 65fc798b4e69d432468158372ca739a0
SHA1 e32d7fc746528b5135cfe6f0a4b44f08ff1ef637
SHA512 e249d16ce37d2a77ea084c344d7a2fde70264f16af601c586e161f1da225d27ab99d8417162fed90bb1f51406569a858e0a5f5b9d6faebde1466241ba8c4bb27
SSDEEP 384:XfC7UiGePAsaYlJKW4MzUFVtW2wk8q2kfELDJt3hE/s9/6Oyo:PziGeBcW4MV2wk8RlxNO/w6to
TLSH
T11EA2E1798004A1C2D7B971A1F4621A8A428EFC147C0F92583B477D66BE71B6531C7BCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 8f087dee9cb19b9aa706181a4b0b00dd5434a9a371191f0431a4e497601f534c
MD5 2e75819da3dd5395976c9a7618047271
SHA1 1fb3d093ac4ce928eb77914eab0f535442eb8261
SHA512 196e1d633dd6e35d9bc46e1ed8e2a32f16ef81569a291bc99dc6ae1e4cc45afffaa886315f0259b47dd53e2f3682ae8e9bc07cca6273509b75f93770b1ffa742
SSDEEP 96:3f+FDEi24T9Szk+UKIBzQ++c19Vo2Ol6fRGok39KChv5Uc2j:m9Thd19C2O/oMRE
TLSH
T1EBC1B3058592D0B2FB5DA13EC9F20C173427C24B05429F2FAE61AF2CBD07A9465BBDA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58ffe7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ffe7.TMP
Size 3KB
SHA256 eea681e62ecd4ce7b51fa092ba3c08a5b369d50d02e719c178bebea27c6de94b
MD5 babec3cabf8d0b0b4b5bb9b7435da157
SHA1 0691482c2be981195588f478f548ff0f2a6b2394
SHA512 2a3485c3f6e8576c3109c9ebb56563ab64c97ab39c56a7146af0946c60f1ed5ed5ac3d8135d88dfb704d44b014296482f387f659f557d38cebe08b161b5e7bfa
TLSH
T116716109829304B2F385993DCCF2551B7878C74A0A5B1F72CC10BF3DFD05B11AA1AC05
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 1628de99447bcbc70e00bdda46ca46b4206c992e12df646f2061a4296fc117ce
MD5 d9ee32d239a9d390bdbd0910f5b0638a
SHA1 4fca0be07761cd3e7496272a068e2746183fd042
SHA512 def0ea9d17a27af63f63bca53c9e9234dceee8b1ce28ca7277dc774b2d1126cb45370c0b8cdcefb143636db50fb809ff598f72204a5cbf97f921685b9db70a59
SSDEEP 192:Dj+c+T5eyyOcfYer23F13izg0DXeUJ/VbRxdN/P/XUuQdqns//T:Dj+c+T5eyyOcfYer23F13izg0DXeUJ/8
TLSH
T1D4028AEB87E4823DDD2652F56618BE16EE190A90432C3C19C9E8EF6FF3F1464D140A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 b941b6a3fc04ba6609dd6ba636f34fc31979174e9e52abd0507f8fe2155eb022
MD5 939496a25cad9dc3da1d413de2747d4a
SHA1 d0c0ce33e56bd4489fcba04418db5150390dd617
SHA512 046e7c64d665f43844cd97b1968b356fdb5d9593bc0fe3ce6cd7c51d579cab7836c68235b291c52e9a4e9cd6f78daaa90395a0dfb9fab393f4036b50dfc76633
SSDEEP 192:sxZ+R9yM/jK1Ml8Mkv/f2sOdvGIdpm5HW6+WNe73/YHWZB7IgrJ:sxZ+PMv/f2sO1n+HbO/79
TLSH
T1B952E816AA34A977CCCBD209FA52BF53D6F5057292901E449DFCCA1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 49e0a5cd6524489c6828b076061528452036ce2b21651030e96b0a56b7f56df6
MD5 a63ba3efa0dc7666f991dd40c6d7cbcf
SHA1 3b51e49420aa3eeb2ffd1e49c6f151ab6c82c4b5
SHA512 b4ea556cf9f56d7d4cd722a76e3ea09ff1596e0e87528fb66c220023947b2b83853e9cea944569162d2a5a8405c5e00331d122d91faf278fe9884c9a127c66b9
SSDEEP 192:sxZ+R9yM/jK1Ml8UQQykv/f2sGdKeIdp08HW6+WNe4EqYHo0z7Ig5AJ:sxZ+PqQxv/f2sGcPBHbGq2S
TLSH
T14E52F852AA349977CCDBD20DFA51BF53D6F5057292901E44ADFCCA1C00E6AED221781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 d3b5b5b79b3f55d27ae93a4aa511c8f34f96b48f5a7a31e90f6a018d5fdcd3f0
MD5 207a1443ba10b33ab182ae2922b2c6be
SHA1 49297bddc93d8a74838adc65e5061f3b1457e349
SHA512 9acffdb7e3015386adb3ccefb28eea201655bbd9807cb23bf304968aa737e5975e159be5d4ba4a1c889cf06229e6aa723b53ee3e1e1903a92d8c707ab25cdda5
SSDEEP 768:YPUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RXroVP09n:YPUZYTMWvg0Pou1ja7eLZmREa9n
TLSH
T131D20B2F280CCB7E4F844E5DEC266F967ED801CB5A584D5447EA884C03CB6EF512B59B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 6fbe7587777b3ff5b2c763f97b7304f69c967b026cae4eb19c68c73b895dec11
MD5 122524ea572d76ab36ac3186f941c10e
SHA1 22dbab2c8e929bdc7c75fe07c2b29f8badcecefd
SHA512 181e048ef9db4d720147d5218d04ad21f905721e8a0058904bc0eacd6b57f6edadc723ba148064f8b316fd8feddec1c59a2e555c6f506bf573e512ffed4e9383
SSDEEP 96:KA1eK2AgHWKIAWSi0KDi0+0KjKWG36K0IDXSKU4Sg:E0lPUzN1Zg
TLSH
T115F1055272BA02127C7F2A0893D4976FCE42B1633418E52B7BAC01B58D67E229CFD5CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9cc56873-6be2-4583-a642-cccf60e50e8f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\9cc56873-6be2-4583-a642-cccf60e50e8f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 045f74142359fabfd5ecaf2ba965ca925823635099bdcc1d14f7f72f79feb8f7
MD5 e843d3357720ef59f23878f0ef28cc1b
SHA1 2862abf5f32b53d5d58986948ad2460713ebe328
SHA512 0345f2856e009e381e309cfad1f517c62a3b118caf8b262e64f1622b395ca729da5012472114e439e395854240f56dbedee13387905a7eb13c75e579b3827382
SSDEEP 384:QwZcIhsNQAgG152mfzX5od+d8yiXXINySllYJTfY81FPagBuN:QOhvKzO1INZuTHV3BuN
TLSH
T137927D729924AC77ADABF155B84B36074FF88127D7896FC4C6FC2F1D019A5AC031A836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 5583f44c6300eec586248fdc5715126b90bf360ce9a750fc13894ecbb2c9ab49
MD5 f521b6b631bcda13b5b0bc0ee0dd7759
SHA1 334f7ecc821814d5f611c5020fe13714e254ed9b
SHA512 8cde059c6ec9f89e9b0e2a6aebc268b192b3201c3f196683aaa6b04e74fd2884ce04d737536d9eeced66c6388c9cb898a5158d1a237e63afc020edd62e2ca5b6
SSDEEP 384:sXiFiZcIdsNQ8TUNTUlIlZgG152afzX5od+d8yiXXqNySllYJTfY81FPagBuN:sSFQd5wg0OzO1qNZuTHV3BuN
TLSH
T1B1D23BF244D79876E9AEA747B77E2D024EFCC167B6446A80B7D81A1CCC560BFC306825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 ac1144b8dd708c4007cf1c678a971711f358f8fd7fce9702c534f5890eee8bfa
MD5 f70fad0593404be654fa88b930796883
SHA1 590d08d5941638ca1860d278688b8e168a9b2d33
SHA512 32dd8838a48fe5d53e4832d642fbeb79855abf8637cd51872222d6b76ee64071b2feaf626494b38524f8533f9e0e373f5b213c01b47bfd7a8c7708e367a960d0
SSDEEP 192:yON761VWQmiUyscgGX5Obd+j1jzoryiyR//aP3EQU6:yON76WOgGX5od+d8yipMQU6
TLSH
T12A02C736A8686CBB8EE2BE49B44B37135FD5106BEA956F80D6EC1F1C00D765C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7c620940974d54fc417283f844f94d5132574f370c02f491f11ba58ea13d402c
MD5 89e83a78eacf3eddcb12284a519b4012
SHA1 807356177c754f5013ed15bbf0ce39c26010fa36
SHA512 f7464cf76013c9b1854e6618fb391255ceb1cb73e799c6143425cf18d3cc16db9a8d155308c1289c3eb7c42b96d7bde793b35c2efd4e8f4789fc9340df1ee53a
SSDEEP 384:0wZcIhsNQZgG152mfzX5od+d8yiXXINySllYJTfY81FPagBuN:0OhqKzO1INZuTHV3BuN
TLSH
T120927E729924AC77ADABF155B84736074FF88127D7896FC4C6FC1F1D019A59C031A836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3acda64b8a993cf46b993af0918e901852ea327ce1bceb421913bcf09f97c84
MD5 03bb4b495c6f50890e427fc03c1a0115
SHA1 00908f4b88d7a335ce3cade831d76f956b1e1f43
SHA512 e4fcaa4182d0d9406ff9e77c9909b65e878508c8c6bdbc173517c3af7bafd101081941db423397726f9d7a80ae0301a38a88bc523fe62ec9b66b27df23bda147
SSDEEP 192:WONx61UWQmiUyDc9GX5Obd+j1jzoryiyR+XjTojJrquU6:WONx6lD9GX5od+d8yiXXYNU6
TLSH
T1CC12F932A468AC6B5DE2B595B44B31139EE5512BEB896F80D6EC2F1C00DB59C530AC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bccdc47a2ab3303bbc063b32892b35ada5c9448e590922831e678e27e15a7c0c
MD5 97a0e84125f7c4c466bf027e46b2d5bf
SHA1 d6e5b76a6413dc77ad98eb1e0f9c996ac18b0357
SHA512 b2be70d8c89e5b5a42c2a745ff6394b857a6a59c9e2e4fcc435cc9350fe7f3a566008cd80dd378d6d0be94efcf5e70bf4d5285150cacc00da82c7be5280cd4eb
TLSH
T1FB41E748A6FD2148B3B36F5A9BF6A8AD487FB9772E06D15D00110D4E0A26B44DC62737
MD5 SHA1 SHA512 TLSH

Submit Download