eba87afaf81ada7659a78b836690174f823255b74ab1378543370a0f449007b0

Analysis

max time kernel
898s
max time network
729s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/08/2026, 09:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 6KB
Sample260820-k2bbrstbmc
SHA256 eba87afaf81ada7659a78b836690174f823255b74ab1378543370a0f449007b0
MD5 c1064ae01967232292299cb3825c5135
SHA1 8055b30828ea8917a9dea3dce053571df57aa0b5
SHA512 50a95db5ef1efccb8c376fa06a8fad208a7987c237ab22659bd75630f9e8d9c6c6f9131a38b6dda723064cff35ef6a5a3d02408395c362370c8226b2dfc3d013
SSDEEP 96:JJGwaWjww1qS/4q7mqH9ZFyfTfIzrHLHMb9hOHKb6Vwruxq7KT+/0FbkVaM14:DRnMnKd7XdZFwjIHrsbOqbD710dOaM14
TLSH
T14CD19323F3D014A168664929BA13FBBDBF782A0147140F707818377EAB994F75F167A8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4868	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134316903362103417"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3797332335-34111092-3597280141-1000\{69D142EE-EA74-45F8-AB08-A846CA8CDB39}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3668	msedge.exe
3668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe
4644	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4644 wrote to memory of 4768	4644	msedge.exe	88
PID 4644 wrote to memory of 4868	4644	msedge.exe	90
PID 4644 wrote to memory of 3984	4644	msedge.exe	91
PID 4644 wrote to memory of 3984	4644	msedge.exe	91
PID 4644 wrote to memory of 3984	4644	msedge.exe	91
PID 4644 wrote to memory of 632	4644	msedge.exe	92
PID 4644 wrote to memory of 632	4644	msedge.exe	92
PID 4644 wrote to memory of 944	4644	msedge.exe	94
PID 4644 wrote to memory of 944	4644	msedge.exe	94
PID 4644 wrote to memory of 944	4644	msedge.exe	94
PID 4644 wrote to memory of 5880	4644	msedge.exe	95
PID 4644 wrote to memory of 5880	4644	msedge.exe	95
PID 4644 wrote to memory of 5880	4644	msedge.exe	95
PID 4644 wrote to memory of 1608	4644	msedge.exe	96
PID 4644 wrote to memory of 828	4644	msedge.exe	97
PID 4644 wrote to memory of 1608	4644	msedge.exe	96
PID 4644 wrote to memory of 1608	4644	msedge.exe	96
PID 4644 wrote to memory of 828	4644	msedge.exe	97
PID 4644 wrote to memory of 828	4644	msedge.exe	97
PID 4644 wrote to memory of 5056	4644	msedge.exe	100
PID 4644 wrote to memory of 5692	4644	msedge.exe	99
PID 4644 wrote to memory of 5056	4644	msedge.exe	100
PID 4644 wrote to memory of 5692	4644	msedge.exe	99
PID 4644 wrote to memory of 5900	4644	msedge.exe	102
PID 4644 wrote to memory of 4504	4644	msedge.exe	106
PID 4644 wrote to memory of 3012	4644	msedge.exe	107
PID 4644 wrote to memory of 4556	4644	msedge.exe	108
PID 4644 wrote to memory of 1660	4644	msedge.exe	109
PID 4644 wrote to memory of 1660	4644	msedge.exe	109
PID 4644 wrote to memory of 3668	4644	msedge.exe	111
PID 4644 wrote to memory of 2640	4644	msedge.exe	112
PID 4644 wrote to memory of 2640	4644	msedge.exe	112
PID 4644 wrote to memory of 4556	4644	msedge.exe	113
PID 4644 wrote to memory of 4556	4644	msedge.exe	113
PID 4644 wrote to memory of 5972	4644	msedge.exe	114
PID 4644 wrote to memory of 5972	4644	msedge.exe	114
PID 4644 wrote to memory of 4384	4644	msedge.exe	115
PID 4644 wrote to memory of 4384	4644	msedge.exe	115
PID 4644 wrote to memory of 4236	4644	msedge.exe	117
PID 4644 wrote to memory of 4236	4644	msedge.exe	117

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffec25dc188,0x7ffec25dc194,0x7ffec25dc1a0
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1780,i,3796558972185288771,11237613015018131414,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=2556 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,2673912687810731464,3237383818077054593,262144 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,15744571553683641201,13635325337473836243,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:13
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,14058970188893022808,380277877374656971,2097152 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,15022738597248501446,10539167682798600771,2097152 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4336,i,17669402472483879811,12841351834825060154,2097152 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:9
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4316,i,11980570572675399643,10049320460682705827,2097152 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5392,i,13040932437319537628,10417660365981429479,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:5692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5384,i,10304006584844343118,16804449527461503730,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15441918067390588280,1104435802552578167,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15441918067390588280,1104435802552578167,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
  2⤵
  PID:5900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,503511919185636386,16698252708051092738,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4476,i,10587530784308079784,441234843021406155,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4456,i,9766778208515520144,43900129980581510,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3184,i,3448036862293217805,6032403577609790609,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5796,i,5691641351034994164,4346090355807634543,262144 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,16721189096202610391,12843020153184225522,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,3395217460979441479,12230402574049012888,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=5204 /prefetch:14
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,10281382762799237388,16181751489547057170,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:14
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,1543639176105562857,16302419889792339683,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:14
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,222416858615092740,11698217141093449623,524288 --field-trial-handle=2468,i,3625835185704002897,11255446058416985947,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
  2⤵
  PID:4236

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1848

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2836

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5576

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5524

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e413e02b9e80ee8d76d52c1043fc32251e2d7634d4b2fbd970df9ace9d91831a
MD5 22959b3a06a842ac30237dd57e8a3801
SHA1 0b7c28071a592034aa2607038000f085c7bb6362
SHA512 644add9ab912ad7fdfc55bc7a1b84482c75cc9bc69a59d169bae63a0400619d999846ebbadb0ef2bd6d35c2bd08a5f07053b600874dd5dfcbda7e8f3076131fe
TLSH
T1A5D02BE476408A0CC980203335F6524092018910D801D1480040B325CC845C1257F0DF
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 8aaa68aad07ba45abe53bd513aa5f7e7b21bd1b29db6e1d5c1e0a79a5f4eb890
MD5 74012bbce5fada7634c1da1b567562b3
SHA1 09db27f38f27e35986cfd407b57f6f83c8fc59f8
SHA512 c1a6a98f972793c84274c29552107bfe07b775c7c8121e5fdf137ebf9a7cc3f4eb43fe9eadfc842e7b92ca7281bbcea3d660bdd8fc9adc56add068510c41e48d
TLSH
T1FBD02BE07640890CC980203335F75240920189108401D1480040F335CC845C1257E0CF
MD5 SHA1 SHA512 TLSH

Submit Download

11347908-d2d4-402d-bd24-77deff02e64c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\11347908-d2d4-402d-bd24-77deff02e64c.tmp
Size 13KB
SHA256 76289332d300abd833df89ec958a5ad6c9392acdcf7f639946aceb2e57559390
MD5 d086fb905bcacd05b01df507e9ee9f4c
SHA1 8d2fa026ae13e2f72c73db21b529b918e288edb9
SHA512 426444d0c54ac322a287f65886ba7682bfb68ea681d1bf15be309dc046b4b7f231e4b4ff42353a732650e4df9faa4e471f9732a0b56f208c2589b2cbad850c4e
SSDEEP 192:sxRS/yM/jK1Ml8wbI/fOsS3bprQ5OzoA8p4P/g6+WNIYn8U9hXGoIgIJ:sxRS7lI/fOsGb42/5IT6Bs
TLSH
T1C252D8156A38A97BCCDBD20DFA517F53D6F81573A1941E04AAFC9E0C00E6AED220381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 3a9766935c3ec17138c9c9016acbbfdc29f92d141049cb4620c3b7de770f9345
MD5 48ccb613e5f34b3671cc9c6a765360c0
SHA1 fa9f28fe85686cf727da9d9ad89210e5ec07d999
SHA512 43dbe1c80b2e01e5ab1131c3d96753a9eb9a0d9e88cda49bcb8d9be313cd3c17dcd8d1082033a32baebaaaa1ff003b7931079116608516eca260f24778d8423d
TLSH
T1B1E07DD40ACCC27EE704644B516C670EA390370BF7C8ED0A3B00C988B483D41F7E26A2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 205e7e235e890826b926d832c4c0cd8645e102dc124f31ce1c05cf34a1427e1a
MD5 5a5fdaffd990e3586f801637d302ea42
SHA1 4c74534a87a4aa5e7c31bbbbf6c17219f23ab208
SHA512 8c2bffe105f77942866110ee8df6ab94da926f64a53d53deaf6ad388c8f54a29890acdfec31b8f82e5ebdb2fd1f92f8a260fa0032678ab3c376e4331087b2101
TLSH
T157E0268586CEC26EF601B547A16C530CD281371B92C9F9CA370886977406C84E2936D0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 b97698790799c508f4daee748758fc0682a10f42434dabf21153f7f75474167b
MD5 cc57960411d24462f490b99120fa5fdb
SHA1 afdf4d6c56f321cbc8ebfe641f1d2a04b19ddb5a
SHA512 dfbedf2938ad07afa281d0791795547d9cc1b97d6f62ddf76579d34de24b9bb9f63964deb776510bba06ee891734fa3040397fbe2c5d57be99050c9b35f99a46
TLSH
T114E0208657CDC35DF6447487517C934CA681375BD2C4EE49170086D97043E44AB835D0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 eaa64b92aba48de028ca82a338b96181faa7d9b39d8ce68937cd6a6422622a35
MD5 fc7a29199291313120f4417671b9bb72
SHA1 ec1d3e247308eb50f82e310ab9ba9f06d2e73e9c
SHA512 2242c4c3c1aec844020fc394b703d07c52b824e5d6670bf0992e728c566f4b280313c679faa8f68de09329fd0fdda0eb6a1b34ab9e87a061714c18d0e9b1bd65
TLSH
T14B61FF5493611EF2CBE94AB3F2F05C5833E88446668B2A0DC05EAFF51446F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5978ef.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5978ef.TMP
Size 3KB
SHA256 1934e9602a5c7d93d5d29cac04e74b49abca0418bef21ee28bb637bd6bf7460c
MD5 79d1f6dff615057f476aa0a888327d65
SHA1 280bb569810a050b7957d3dbd2071e33bfa02a9a
SHA512 7d813aad2dda623d58dee1e231a1367de50191f2cfa9f6ace7b27cd2d3c3be5407dabf8e0550a111dbfb5a40bfeabda3204c80e5cdbb8a95f11e77d5d6814adb
TLSH
T11C61DD5593611EF2CBE94AB3F2F06C9833E88446668B2A0DC05EAFF51506F5D93E1633
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3f490a57fe0da98690eb79398c3596da07a75bffe927ffd2debde082db429475
MD5 f6e5a05ba65d9da63ba4596891b924e4
SHA1 ca117cfa0cfbd21a214ba4890186128a9adcc4a4
SHA512 215852ad92900913d8b1af2c646ca46b670f125177128b851c03b3198baedcdc7fc5c5f0bb32919d9484792d214afbda8632ce8e8b05dbe873b7dd1f44a59126
TLSH
T132217BF747F4957E9A1192F0AA186E1FCE2D0411435C79AAC5E0AE2793E3462E041BAB
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 ce7e2ceab4e3eb3287d6ffdb3a7c6c3c1ca9f792007d013d0a290522591a3727
MD5 b11ee30bbc8bffe817a4ea624d8e226a
SHA1 c67c00b9869aa3d32a476b6244de5b5560dd5710
SHA512 6a62e9c677d851335222e92e1dfe726a64d73bb6d3318afb4b926e773fa406f8f8a6406e76b128648854722db20887f775066e79bffc10506a44edc3ec541b21
TLSH
T1AC217CF743B4957E9A11D2F0EA08AF1FCF6D0411431C79AAC5E06D2793F34A2E041AAB
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 edf2de5327d2469fcbc54d352ecb0139c22989e3117641169767bef13c32a1b3
MD5 10aa65121d21d2b86c1c5b93f2174156
SHA1 420a5dacb1fc9eaa42b70054cb6e406b19d18b08
SHA512 8c2f03f3fee02f4f38483707025dedc18d4a523eba513616222d991b05c55813f0401e659e18baca4bdc25c6b0bc2f2993e4fbb04e44ed2e7de28f96722ba799
SSDEEP 192:sxRx/yM/jK1Ml8wbI/fOsu3bprQ5OzoA8p4P/g6+WNIYn8U9hXGoIgDHJ:sxRx7lI/fOsab42/5IT6B1
TLSH
T1F852D8156A386D7BCCDBD209FA517F53D6F81573A1941E44AAFC9E0C00E66ED221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 4ea8420821495e17f9f497844717c589d1157bf77ce49025d669b3bf43234025
MD5 b2a07640617716ea4eebd505f05d82b1
SHA1 90fd5ef4d16bcf4f35d92138e67b6e67f21ecb37
SHA512 c3c35b54440bad8c6e060581732eccd26a7608a1c5ce16320f489a9d51ed5fce09124a92a17f2b5913f71baf41999f60d8d0dc9e74d84b9f5f07103b5f57e091
SSDEEP 192:sxRx/yM/jK1Ml8UQWbI/fOsu3VprQ5OzoA8peP/g6+WNIYn8dNhXGoIgDZJ:sxRx7qoI/fOsaV4U/5ITRBv
TLSH
T14362C815AA38697BDCDBD209FA517F63D2F85572A1941E04AAFCDE0C00E76DD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 3217e38e9956203407ee7d2c744fd51f3c8e98912d831d5b724a1d9994abf5ab
MD5 08fe6f0479b5719296729dcf848cec0e
SHA1 88eede26994bec7d064c22de265abc693b2a4c6d
SHA512 2c1d45ab47aab774b193dfbce004a40c1bc0ac106bc23a20b60c8899dcdf98f20648aad443577c7ec21bfa7164edf09188dde533ba95a7ca7cdfc879bdd428bf
SSDEEP 768:wGedp6WgoufDM8F1+UoAYDCx9Tuqh0VfUC9xbog/OVIu4YyroSh8d5U:wGedp6WgoufDMu1jatVYpn2
TLSH
T173C20B3B640CC77E4F844EADEC29AEDB6DD801CB9B984D5447EA890C03C67EB511A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index
Size 792B
SHA256 6825f39a94e19e98e1d93d1a934dc8ab251018462cfd81472d0688034d0b0d14
MD5 e43128cac626c69cce133d7c7179de80
SHA1 408a85050d3c187b5bbc5fe80831d823cb2a3ae4
SHA512 04e110bb467d47edce05b77c9f2ebface719f54188d82b9640d1b5df8cb7cbfb6efe030d903b796a9a730698cf49d27b68ae621b265b0f4e5ab84f7781db3d16
TLSH
T14101AC47DCE669C3CC1269BB657E240A333909FD1009DE57006DA8399DA66398540758
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5dbb73.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8ee8ad58-4f1c-459c-bc95-4ac98d1cfc38\index-dir\the-real-index~RFe5dbb73.TMP
Size 792B
SHA256 4083b4018c0c817c37b4e1db2cd97f5832826b7a43e9d418f4432e9c7d24d8ce
MD5 eb289e1269836f25606b5c56560f05ca
SHA1 9b86929f6ff224f1a26bb5cd39b881c538c0c83c
SHA512 05aecaac753862a256ec230f810c3dbcba15a35e442e2644e16c146946cf0da41cf5c461a3cede1d99f3ecf5665dbce77ed8a608926fe9e4f402eb6636535a2c
TLSH
T1600120E780E1FC52CD06A4F9314E601A733E48203119DA4B209E7C7D5D626788681AA9
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0d9031c8b9ba24481a0c676ef596ef961bcfe9ce96fe847dcd1941e77999d576
MD5 17a7588ee75406121e58e184075d09eb
SHA1 7e8885439672ee7e6104c5da5230f6a5d7c71219
SHA512 b1e570abe9ec06496249c732c4d18206ebff619ccf0251087a59a7fc5ab54672ce66a695d15b04726a43e53c7da6a983cdbb37abfe72bb2e4a54ca2cd26ba19e
TLSH
T17BE020773EF72804FCEFD7DF1831645105107554844DBD4F6816E2D714B276434A9C65
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 57948db11fdf22a11d946044721aff333d15a56e5ec4d83cfd4b834d2918e6cb
MD5 8aa0664ef82f5a2886863d5731c508ad
SHA1 e8ebfd5432d5e89ab7a3fbcc600f9ee5d3dc70b4
SHA512 db0b632bcaa9a36d2a367712db6e4801f0ff394f6ff392ece1dbf6873c26f39cce9a5efb8bcdf32b64ce2603339e3c387479ee8611703f1c535795a5a88dce63
SSDEEP 96:KReTieYgQGWAltgeGK4DgcGcW+9M+XHklQUuSW0Wyf/gc0K4xgW0cUUfOrN2K+Yc:CeTieYgQxAl+eODgc1W+9M+XHklQUuSE
TLSH
T1FD916111767A07503DBE7A4D80B69D6B628535623204F42B3FE905E14F67E028DFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

cab448d0-442d-4499-98a7-d577e7d01f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\cab448d0-442d-4499-98a7-d577e7d01f61.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 3083be201b66aa13ec88b81584d38bd0e45421e060d011840dfb4e09560d0610
MD5 8303ec2b208225e93084e0e79a0f0417
SHA1 f5f1dbda9cfb709e545f7ded9f25b88af137abb2
SHA512 4eeac9387bcb03d5480262d311758ce9756c5e5611dfa0b5bc54ad814f18020116b789b793bcb0dae821452a5b4d6adbc16a65c80ac6070a92e679dc4351852b
SSDEEP 768:8rv+4UNbdr36F4DZIO0CEl8saNzc4ReyIsP3XeVH1S5F:8bsb93Piatc44bsPXEH1W
TLSH
T10913BE32EC789977ACF69682B44775137EF4521B82881E94D9DE1F0C0A8B1DC135F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 613a96598463422c96e28918aeb20f6c338c7472cedd89ad9d3a990ab2017983
MD5 013adabb99aaa5b03394da743e37d207
SHA1 32c48e0dc9b831a3f04466b84bcfe5eea8d412ba
SHA512 1f30e890c8d5d6274520b1d1c25a1115547adae82bbcc1b25150ad0e999780c709f8a81bf0867beda763260ffc15208eff08360a2c6e8fc18fa27959e4109c8e
SSDEEP 768:Urv+4UNbds3QiDZIO0CEl8s8Nzc4ReyIs23XeVH1S5D:UbsbS3Ni8tc44bsKXEH1Y
TLSH
T1D803CF32E8789977ACF69682B44775533EF4521B82C81E90D9EE2F0C4A4B1DD131F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 c2e9a9b214c20f079c7abea97bc73a4f8bff1ce802c5c35bd418e91aa42173fd
MD5 b3e542dc11193049b020bb8ee6e5ecdc
SHA1 47472e14c14fab62fc49ef96b853d27e94394446
SHA512 5cd0fd86c5c1e8bddfadc24338870936f6702828f6fe91bbc333518660a721b9180649ee9e6e1204c96636f80947f481854c16527531a12c97e74c4a524638b7
SSDEEP 768:x432R4DZIO0CEl8saNzc4ReyIsP3XffrIH:x43Liatc44bsPXfDIH
TLSH
T16EF2BF35AC649867ACFA9382B5473613BEF4912BC2CC2D9499ED6F1C098B6DD035B813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 41KB
SHA256 3f2d7c8fd1013873d7d0ed82ab7fdf0b8f3584d059766ed34494e0709c881614
MD5 08849a99b87cfa8591d9600c1964840c
SHA1 b87c901732cc8f1a97ecbeeb1c037b861d354c49
SHA512 de3cc078cb08dc2e54f5f557b7a5fa0ab7e1406d8fb370c102a7ba66a658971e3bc51b2653bf1d3fcd532520723bbc9533209a0ea6d9e9d153d46569dfa2c858
SSDEEP 768:brv+4UNbdr3BR4DZIO0CEl8saNzc4ReyIsP3XeVH1S5F:bbsb932iatc44bsPXEH1W
TLSH
T15413BF32AC789977ACF6A682B44775137EF4511B82C81E94D5EE5F0C0A8B1DD035F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d8d5d37523674f23c7c257347d4d36d01c1418811d8850dc919561f6998a2c9b
MD5 c2608aaae2dbd1e4508d8d8f530d3557
SHA1 b762a34460e3c22ad003cf2c61d5abb5c1281310
SHA512 804e7bea50431ff513ce8eb0b3f857d737b87074f3eaf2b102fdbbf6f2cddb8999d3a07a203755b49198c117f9091b474654bd547aa92df3150e6e74aad1c709
SSDEEP 768:YFQb3GwgjR4DZIO0CEl8shNzc4ReyIsP3XffrIH:7b3Rihtc44bsPXfDIH
TLSH
T186F2AE329CA4C9BBACFA9B82FA4A3213BEF15167C1D86D90D6DD5F1C154B2DC034B812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 eb6d380e5484888a38dda620c62a4eeddc13445cd116a8d31edc92cf5c50d15a
MD5 a92613144797946bbe7a79b0ba193473
SHA1 bd9a11cf908e8dd8001be5ad6515604e3bfd9c6c
SHA512 530b2fd3de73146bc57f9af396a3b0def07bd8bd43ad9227fd4cf48d700464e91574717dbbff8ce87c18f3540e014ffb5dba356e45058bcfb3131a74598b8453
SSDEEP 768:6rv+4UNbds3miDZIO0CEl8dNzc4ReyIsXSeVH1S5D:6bsbS3TDtc44bsiEH1Y
TLSH
T1E603CF32A8689977ACF65786B44B76133EF4612B82C81ED4D5DE2F0C464B5DD130F923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

89dbe655-cf7c-49be-8e48-ec1d2d534ebb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\89dbe655-cf7c-49be-8e48-ec1d2d534ebb.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download