c21b71414dc8c79c590f22552672ab171023c54b1fcdc7be6d0919cf5290db12

Analysis

max time kernel
899s
max time network
733s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
21/08/2026, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
file.html
Size 59KB
Sample260821-seysjsscra
SHA256 c21b71414dc8c79c590f22552672ab171023c54b1fcdc7be6d0919cf5290db12
MD5 5120bb210cd4ca37e2de0361fc8d0b50
SHA1 747fe17b7a0da91fc3fde2f55849d23bceb4f28c
SHA512 801f05f39a5e4ec8c3f45bd83f222854507730b4f9ece86b467ca59772820ddf2e19dce45ad64a08690a3b427cf7e1b572e8333bcd7e6c86f40f567e1c09967c
SSDEEP 768:M5hHm8Ga/zHaVrqsboV9sbFkGXMI7KUyuatxL0eTiuYIEY7Ux/Cs:M5hHm8GuHaoV9wOGCjtt09Iix/Cs
TLSH
T14A53D85FB9A241311313B1B96B7B530DB23290438605DE12BAFC439C9FC9F968D926DE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5324	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134317981919141958"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2246396966-3025826688-3847171515-1000\{6EBC7D4E-7C9F-40EB-A448-2569BAF01DA6}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2246396966-3025826688-3847171515-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4132	msedge.exe
4132	msedge.exe

Suspicious behavior: LoadsDriver 8 IoCs

pid
4
4
4
4
4
4
4
4

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe
5956	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 5956 wrote to memory of 2884	5956	msedge.exe	88
PID 5956 wrote to memory of 1440	5956	msedge.exe	89
PID 5956 wrote to memory of 5324	5956	msedge.exe	90
PID 5956 wrote to memory of 1440	5956	msedge.exe	89
PID 5956 wrote to memory of 1440	5956	msedge.exe	89
PID 5956 wrote to memory of 5320	5956	msedge.exe	91
PID 5956 wrote to memory of 5320	5956	msedge.exe	91
PID 5956 wrote to memory of 2768	5956	msedge.exe	92
PID 5956 wrote to memory of 2768	5956	msedge.exe	92
PID 5956 wrote to memory of 2768	5956	msedge.exe	92
PID 5956 wrote to memory of 5836	5956	msedge.exe	93
PID 5956 wrote to memory of 5836	5956	msedge.exe	93
PID 5956 wrote to memory of 5836	5956	msedge.exe	93
PID 5956 wrote to memory of 996	5956	msedge.exe	96
PID 5956 wrote to memory of 5628	5956	msedge.exe	95
PID 5956 wrote to memory of 996	5956	msedge.exe	96
PID 5956 wrote to memory of 996	5956	msedge.exe	96
PID 5956 wrote to memory of 5628	5956	msedge.exe	95
PID 5956 wrote to memory of 5628	5956	msedge.exe	95
PID 5956 wrote to memory of 3724	5956	msedge.exe	98
PID 5956 wrote to memory of 3724	5956	msedge.exe	98
PID 5956 wrote to memory of 5100	5956	msedge.exe	99
PID 5956 wrote to memory of 5100	5956	msedge.exe	99
PID 5956 wrote to memory of 3952	5956	msedge.exe	101
PID 5956 wrote to memory of 956	5956	msedge.exe	105
PID 5956 wrote to memory of 4600	5956	msedge.exe	106
PID 5956 wrote to memory of 808	5956	msedge.exe	107
PID 5956 wrote to memory of 252	5956	msedge.exe	108
PID 5956 wrote to memory of 252	5956	msedge.exe	108
PID 5956 wrote to memory of 2556	5956	msedge.exe	109
PID 5956 wrote to memory of 2556	5956	msedge.exe	109
PID 5956 wrote to memory of 4132	5956	msedge.exe	111
PID 5956 wrote to memory of 3720	5956	msedge.exe	112
PID 5956 wrote to memory of 3720	5956	msedge.exe	112
PID 5956 wrote to memory of 3724	5956	msedge.exe	113
PID 5956 wrote to memory of 3724	5956	msedge.exe	113
PID 5956 wrote to memory of 2032	5956	msedge.exe	114
PID 5956 wrote to memory of 2032	5956	msedge.exe	114
PID 5956 wrote to memory of 864	5956	msedge.exe	115
PID 5956 wrote to memory of 864	5956	msedge.exe	115
PID 5956 wrote to memory of 4984	5956	msedge.exe	120
PID 5956 wrote to memory of 4984	5956	msedge.exe	120

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\file.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb9e33c188,0x7ffb9e33c194,0x7ffb9e33c1a0
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,1617086028270474587,16445190042086797895,262144 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,1037648692762626847,10875021495957169625,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2060,i,15882307937211831923,6618152493687449902,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:13
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,1632538764893766504,8511616939204279200,2097152 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3592,i,11568001790418806234,11018264238235087699,2097152 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3524,i,1891009243086937047,16084341222261316697,2097152 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,1254958619017458210,824870864323007214,2097152 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:9
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,3620282116101778534,218040561661878431,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,7903642600047452262,6113323327640255038,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,17000555547248032923,3812744898495178694,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,17000555547248032923,3812744898495178694,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:14
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,15494655428645347520,11386530168452439727,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:14
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,10200572078383990712,3463981189727002968,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:14
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,14074357805853678509,1316693107348369031,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=3676 /prefetch:14
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2664,i,6261735732824045751,6593226125918200278,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:14
  2⤵
  PID:252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,11297680268915400574,13127252598496203573,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=5400 /prefetch:14
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6216,i,16248882935991659473,5250947902338392764,262144 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,602267327477625359,11442108141057707897,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:14
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,15188471222286546167,13694370237197734614,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=1088 /prefetch:14
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,4568192895450959694,2518624387360724042,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,7806241754755906451,16859927886800923355,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,15695533971703000424,234920639232968724,524288 --field-trial-handle=2356,i,12635842966489285093,16706657270250035048,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:14
  2⤵
  PID:4984

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4188

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4900

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1140

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3432

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08a3eccff4cd9b05162ffe0d083662ea8cd60457899147f42dbbf95a0a97d97e
MD5 394c25b8b347a39d61b9cf28babb5c77
SHA1 c7334bcf8642ac580d30cf31659724fe1ab323c9
SHA512 8e5c09dada01bf020bbf53884d65940c521dc62e17d9ce99fe6c571edde4b95c7c7716f2eda97b70568b2cbac8823e7afed5a9bac7be39d1acc6fc95c23a4b1c
TLSH
T1F6D0C038762962C2C92725B2CC3063007330007030B587425071440C8E3489667CF3C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 168dc438fa355b9b84e416f9d4caca14da218ad190d72da09fe489277625815d
MD5 39064a84dfec9bbd8c4b789b6d7a7c62
SHA1 5d817a4df5ed7bd1eac0c4bc0464a76007ad0c46
SHA512 3a4f32a1ad3eb6c391e6d11f4f6ba07c4d21cc935ddd8fd93306857b9e0cfda06c39786a872cae88f394320921a63296ad4df0e61334710db192febec2f48618
TLSH
T1B5D0C034763961C2C92725B2CC3163007320007030B587425171840C8E3489667CF3C3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 372259f17be983eccd50bd566416198792dc31d147106b3428a8eddfd355a8b0
MD5 c097a01c6b519676cd5a065a094cc781
SHA1 713e9883224740344872cd59bedd694ab590e857
SHA512 f879237b4cdf43d43ae574b3f0ee39ed91e123d59b63143044084b148711e409f9f23475aceef7f7ead44bc330483807c88c49d0854d82ebce67cb161addc054
TLSH
T12DE07DA425CAC37EA64064C752FCB38F8388360EE2D8A94E27048885F201D50B6C67D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 0994706225631ec851f20ef70b3d2141f55cdd85980349fbb747e167a6f39673
MD5 8c4f877169ebeb9a47fb5aff45cbf466
SHA1 c448424b6cc33100c5fececb1f78f9f7ca2ae807
SHA512 e51cdab4d82fc28e7620b275b23603f7db1f28b9aa8c975248a7289aa7e44f17b95ca65474e67f09cc3a5042b1310f52e9c24e3aad3ddbef5fc97bd2c0ce3b42
TLSH
T1CEE07DA528CAC26FB60674CB617C57CE8292360FDBCCA94E17048C84F041C43B6C26D5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4c377cf785f039b7940288bed2aa864c7fe54a53f4a8110b59a9c6d8586036bc
MD5 4f56f6eb420c01066c320a8710e181d0
SHA1 4569487f918cfa9566f47d8df9e59fd88c3355d0
SHA512 4a7532d6c2d72ceb3791497804a6231f881759e76205e4bdd4ca3c38e7e25093528929d1a69aeabe01427b7a3ffa3f490ad8c1566b16c0c624ad2a8cc98863c3
TLSH
T17EE086A416CAC3BEA70464C751ACB35DC294360FD6D8A98E17088486F181E85A3AA7E0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4e6b7657d8abfdcfc1e93fe9b4e32f6c151034fd1a6b8fa88bee9dbcd4dcbb8a
MD5 948ce2e41d4dcea3183d2abffbcc01ac
SHA1 55c8933655d4c0e6b38918ee04c590f5e8efd9a9
SHA512 165183439e9aea3814585444ccc66d4297975d53f65c8857865f2e62b31d7b4a0e4f1b07f42dab256e080df22ed42ddad5ae00037c7b6ed58375d687b534df11
TLSH
T158E086E465CEC26FAA0478CB626C534D8294764FA7C8B94E2704DD94F141DA6A293AD0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 48a7f2feb245f05c7a80911450084f07c039362acbd0c8e07954348152eb8b3b
MD5 b6beadfcc34fbd2ac3af2e817d4927a9
SHA1 ad35ef46fbc650e025f6635f6688f273151b8cc1
SHA512 e4de0bff6ab60eb166b942c97ad29b4ed2086a68a6b63adc2db0b672551a60df3bf0c3fe8b82aabf5754d856e8323b454db83cd1fab55d402e5a5ad1fbe44429
TLSH
T14161D894032E4DE3FB658671D0E150DEF2F488C4939B2E2D1DF0E678A88EF756447425
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a33d3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a33d3.TMP
Size 3KB
SHA256 e7a054a8593e633709adc785b03261fc0945e417b5604714ccd7accd678fa9b0
MD5 c6caa19f59867a3473f6f778e83c457c
SHA1 d9e19b812f79fdffa182c0833f593ba9382d6f56
SHA512 a88aa693869d26b823d26a8abb8c98549f38a3b6f12e03f4167e45e2765e978040b44fc253b8529d8f822492db5c92cf45a204eb5c0a49a6a2ddecaed3ee0643
TLSH
T13D61C894032E8DE3FB6586B1D0E150DEF2F888C4979B2E2D4DF1D6B8A48EF356447425
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

50569945-b6e4-4dc3-9f63-88e4a05a4221.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\50569945-b6e4-4dc3-9f63-88e4a05a4221.tmp
Size 4KB
SHA256 8644ff6fa2fff64983b09984e88069cff53a95683a73820a3571ce92af6e3900
MD5 823cea39a779ba9354d5700349c29554
SHA1 a79f06dac964184620f52ae8635747fc35d67f80
SHA512 9eb845c8032d65d33041fa7d7c87047bd303fab8ad29854fdda3f6d82066fe634e0c64d52e529e8a480378e4a939a5de6e0d50508c95298e65e74325c1bb7222
SSDEEP 96:DKOxnaYWVaZaiZMwwzM8pGZCnfk6xxKOwQ:D5xnaJVaZaiZMwwY8pGZCnfk67NT
TLSH
T1B1919BB7C3E4877E891152F09B257E2ACE2D151A432C3C5688F4AF1F63E24B1D24169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 631eb1da08a5730c3036d22c763fc9fb8e7ee1fe6ce10c3427c42bbb41606bdb
MD5 155a2e71f7b3a5a19b07b1731a9eac74
SHA1 59959e072a55a8cdc971d55d1084c0b7c7c87cc4
SHA512 20966a299c0c141fdd72f30e88271b723c3c8d64f729c39f949dfbc4380de2fc5d5a4e39fa5e4640846a05a02e0ba2479511375c59e95bc44d16cf6a2efa41cf
TLSH
T12581AFFB83E4877E891196F09A25AE1BCE2D1117432C7C6689F4AF1B63E20B1D14179F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 5e902c45ee6fab8c8ec31753cb693d16f26461a8e4da15d51201e4680a7408d2
MD5 056aeba5edc20da2379cac5fca5fbbcf
SHA1 7b1fe10659e7475ead756c46775cd49368d89a5c
SHA512 58aca33228a13b9643edc816c255736d8e61a3084d7306bbd7af9c0f22adf0b61483f006277a1ceba406db75a4b4709b07efdb91c171a380b65c6a3ddaab7be6
SSDEEP 192:sxR32gpRJyM/jK1Ml8wbq6/fws9ON9/hkzoA8p45/g6+WNIYZ7PqHsEFGSIgDpJ:sxR32gpplh/fwsgN9ZFc/5Ism3
TLSH
T16152C715AA24993BCCCBD20DFA567F53D6F81572A2901E44AEFC9A1C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 acd4178812b5a56bf5b55aa39299a4b87b7205b5038b89dc6336112a89f4f322
MD5 c8e7caaae8e1c3a400a12a22c3ad0048
SHA1 23d399f8cc9fb650b8b7213c38a6006d35184727
SHA512 103e26964cd73239824093d027b08f39740caf7dd508903c26e73737794f2b6797f7bcfdd6f90e2dea7b6af908423677d4e13fba853e75ca0d2b481955a8d33d
SSDEEP 192:sxR32geRJyM/jK1Ml8wbq6/fwsLN9/hkzoA8p45/g6+WNIYZ7PqHsEFGSIgIJ:sxR32geplh/fwsLN9ZFc/5Isms
TLSH
T19152B7156A24993BCCDBD20DFA567F53D6F81563A2901E44AEFCDA1C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9c0578ad715aaa9f1df67c338358ee30dc2f753c92ccaf8e9fe5bb2d01f56bbd
MD5 407f895c71cc80746e3f57a5117c15cc
SHA1 e11ab75c029d3c564053662d79c816dd9891670d
SHA512 314a3168ef1dca4a2adb46521fbbfcbd1ed57d43ddbd4aa1fbbf9ed603be59499a6ec0a2a4c7e887a986ea34704665ca11704d3d2507410c19d3242be2e93915
SSDEEP 192:sxR32gpRJyM/jK1Ml8UQ1bq6/fws9ONq/JkzoA8pe5/g6+WNIYZ7P59BsEFGSIg1:sxR32gpLqth/fwsgNqBFq/5I/m1
TLSH
T17162C715AA24993BDCCBD20DFA527F53D2F81572A2901E44AEFCDA1C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 abd74dd7dde51a5575ef47103615d277e7f2848d55dc3e16433d3bd2587252ac
MD5 b4e3988ed1ed10dc784ba3b86fb918f8
SHA1 50066d704c67710410e2d81f2d50ad5679be2db2
SHA512 6bd9de80cece65f710f6ec0d653335d9c53356519de16b3ff528f4a2552c61e1ae437eb8cc2672d9149efe6db225a61c0c6b33600134582a328c9bf975cc5ea5
SSDEEP 192:sxR32gpRJyM/jK1Ml8wbq6/fws9ONq/JkzoA8p45/g6+WNIYZ7P59BsEFGSIgDPJ:sxR32gpLlh/fwsgNqBFc/5I/m1
TLSH
T1E362C715AA24997BDCCBD20DFA527F53D6F81563A2901E44AEFCDA1C00E7ADD221381F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d7bab248dedc198a2df2780aa66b84414deda0fdfcc9ba9def0041e848cd1cda
MD5 19888ff9c93adefc134d5e4cb35b03ee
SHA1 69809d9e15c51fc796ac67fb6e4ac1e49da92403
SHA512 ecbe53a36faf11ee9ac88e89da977d5a785c4e641ff23a627656ec03d0c0e3467bd91299986f2da59e378f94123e646d0697666c47dfe1ead4e25bfbbec6d18c
SSDEEP 768:kfISEvWgd5fWb8F1+UoAYDCx9Tuqh0VfUC9xbog/OVMSV2lroHh0w0+p:kfISEvWgd5fWbu1jaBU2eHh0wDp
TLSH
T1CCC20C2B640CC77F4F805D9CEC25AED6ADD801CB97988D5447EA890C03C77EB522A5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ca33153-38b0-44da-bcd8-5b58efbd9028\index-dir\the-real-index
Size 1KB
SHA256 256930a1305f796b7d833ae4ef46afcc08f03ace21eb37af72d76294ed9ac8a4
MD5 00bcd83c1d6129c0ce2b0f5212e78979
SHA1 7f1ec68a5e1d02012a32569effa0b65a90053ef0
SHA512 4304b642c678415acf4ffe7dd8654e8fbb9a3cc2da7144e6684a6a1e63961c2221bc58c752e20a833d330528cd41a5f663fb21380f912a4ca97ef6585ee21b14
TLSH
T121116073CCC25C4BEC29AAB1A67A109E2B3B84FC1709DF87002C59349DCA9286985689
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e75ba.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1ca33153-38b0-44da-bcd8-5b58efbd9028\index-dir\the-real-index~RFe5e75ba.TMP
Size 1KB
SHA256 e2730d2d1ffe5fbea2c85f3eba785a865cb342df1f5115a30dc841aba6f62668
MD5 a63afdfa5197d1b2f1da90548f8f9fe7
SHA1 c0486494ca5f448480a537cb9149c2b9f8dc8aee
SHA512 051757c26dee1f5cdffd03c4aba5b01fb135d083138480d951bb8591986221e48d08c74282c7ce85b2f82957eaa2e8dd17950301156d76b8d3ab1f94ef9cbdbb
TLSH
T13D114EB380839C47DC25A0B4E29B219A3B3BD834225AC74B309E6D644C93A1C5C25555
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 26fc8e0789ae73b6009d969f42910869992110339e5d59756d09b9fed094ed1c
MD5 f2dc805f2a1f2964e3edfdd5c6f69f15
SHA1 40f5b933cefb9b0a555a3670c9f8003a53883b3b
SHA512 7b0ea29d9ffd51297280eef4e2ba50033f502321463a91f3e5cb3ce8545f6d81837726cd6e42568a36a8e4e25e6670f3f4bd75c558f3f03c944f780d1473b786
TLSH
T1ECE068BB2ADA1864F85F87EB343294A14101795086459C4FA02982C328B1355206BC61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 0bb0b8c08ff4f6a3199a19dbd0579ed7fdf216641a32ccc2056b99e087c5091b
MD5 2582b5759da35165be12c984835507b2
SHA1 a20ae0ec249c3718f3af012f4a769514226fd6bb
SHA512 9cc44bf3b6da1a1877f597a75a4915ed6a5f97f397d1a1dfeaf48b91ee5a058c26a157899405d8b9b2fa82194c59696be57b4fbcaac1a5fde773d78754b81fa4
SSDEEP 24:KSitLEitHitWitIPitNSitmitGitx1itaitBDitsI4itSitxKXitOhPitoitx1Ro:KsSIfKjCsLyhIIHK1WsVlIRK+EcjyD
TLSH
T166911686B1FB06007CBE350C90A4D62B9691B473305DAD6B3BE921750F66F025EFE9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

1b1d6070-e2ef-4295-952d-24d7d8bacd83.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1b1d6070-e2ef-4295-952d-24d7d8bacd83.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 28622f9fec71615bb98bd6eb6502d4c6685fbe6921c182ee072c0e6f4299021f
MD5 c1f71de715fabfa0580c85853fdc1ca7
SHA1 ce5de5f27d01377226158947012c719061f287d9
SHA512 5f582a0b9632ee48df901f10eda65c742ed60be40d0d055d1714ab3d735aa1af8c65628af4966bf8b49c434014a2599f422cff9d1c949a83d0263ba39e0e3ee4
SSDEEP 768:Jrv+4UNbdq3PWq3LjLo0Aam6aQMGdjWca4GhfwGPeU/:Jbsbc3UWmaME6pBH
TLSH
T19CF2AF32A86CD9739DB79695F25F7647BEB0526389C80E80C9DD6B0D439B08E230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 20628d37bb46a556ec6b7a3879b782252c62b9945e412d46398b5979b61b2fcd
MD5 f8bfbf417ac855b7fd5dd2bcf7a711bf
SHA1 2f99dee52650bac5c309dc8fda7a08b0c8a0e7df
SHA512 5eff670fcf84205f772ebc2e8c4639bea8586ca0c3351d62d5e9bd018f1e6861b70bc9a394ad2a3994e8ff8475b06a29d68951255af5df5eef2f54f10af266aa
SSDEEP 768:rrv+4UNbdL3+tsq3LjLoJAam6aQMGdjWca4Ghf9Gm2:rbsbZ3+E7maME6pGB
TLSH
T1C9F2AE32A86CD9739DB3A695F21F6643BEB4526384C84E84C9DD6B0D429B0DE230BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 7457b4aa12be2018b11c317b32b2c16d7fd9b489ef712e95bb1a3e92e6d8e4c9
MD5 f257b689229bbdde1db0b3f1767e8c5d
SHA1 3c55d790ad43204a7e568e8f8397265a4f4c8e5a
SHA512 587c6710e0e6695a78d6d93efea44bd3cb8759cbdc3d3bccab7b4af5a9dfc4c4345c22039d984e5fa2c5f28b3cc1a5f612715766634e0408314b9f533db3e5ea
SSDEEP 768:II3VIsq3LjLoeAam6aQMGdjWca4Ghf9GN1:II3VLwmaME6pGL
TLSH
T1C9E29E725CA89C779CA7E695F71B2643FEF0926384D84E84C9DD6B0D029719E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 ce8699fd90777be1ee76178a6a999406aa3b6b13b2298f42e313828e50be2923
MD5 7d037d38318c82616c5cc6fe289fa986
SHA1 38d8c7c1cfbf12b008da7bb974e4afc919e88f92
SHA512 03bf5f3b59e295923016e7c7e4c2c9606a56e81e8537ae6c6990e15f5c5ffb900d64b59044367d8466635a124d424008f81fd942e2bc911379ff72f4dd15b570
SSDEEP 768:BI3+Isq3LjLoeAam6aQMGdjWca4Ghf9GN1:BI3+LwmaME6pGL
TLSH
T126E29E725CA89C779CA7A695F71B2743FEF0926384D84E84C9DD6B0D029719E230BC1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 83607d0eb4d137e888294c949e2cf49f1650e06ed82da241b6b28bf34e05e5c6
MD5 04c60cde5cb7d452c737d9481bce8dc2
SHA1 eaddaf6b0382fd01558f5bbf694f1c8eadbcca18
SHA512 96420ae09f02253d95ab34885dfdc8bdc23db4e751f512f4c2f9dcf79005740151bbe05adcff79572262cb9fd42dcf45b0aeabd27c1e70ccdbb7b2368819ee48
SSDEEP 768:YFQJ3swg4Isq3LjLCAam6aQMGdjWca4Ghf9GN1:7J3r3maME6pGL
TLSH
T130E29E725C94C97B9DA7AB95F71F2243EEF052A3C4D89E80DADC6A0D029719D130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 638b72bba766b9bfd394c904cd11ec1d07b59f55138f6e19e439256e53f2716f
MD5 032e40efbf9ef1bb52472cfe154f0f02
SHA1 f2a808e50bc1f6f0492c4cd4452234bd437fc1df
SHA512 d3dd38fdaa1d9a0f53f383ac678195148fbed0958245d119fba5d8d814773a3a90e439f7d312f04e7c7464e08b773b2cbe3618a05952ccb17b34483ecf6ae9f7
SSDEEP 768:/rv+4UNbdq3v9q3LoAAam6aQMGdjWca4GhfBcPeU/:/bsbc3FKmaME6pUH
TLSH
T121F2AE31A8689973DDB79A99F21F6787BEF421A384D40E80CDD96B0D439708E2307D27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download