hxxps://cmresource[.]org/

Analysis

user interaction
yes
max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 17:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://cmresource.org/
Sample260826-vp9znsshpe

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3716	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322378779069286"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{ED960AE4-A880-4AD1-9CCF-ED1E82EDE4FF}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4628	msedge.exe
4628	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe
1088	msedge.exe

Suspicious use of WriteProcessMemory 41 IoCs

description	pid	Process	procid_target
PID 1088 wrote to memory of 1400	1088	msedge.exe	85
PID 1088 wrote to memory of 3716	1088	msedge.exe	86
PID 1088 wrote to memory of 4716	1088	msedge.exe	87
PID 1088 wrote to memory of 4716	1088	msedge.exe	87
PID 1088 wrote to memory of 4716	1088	msedge.exe	87
PID 1088 wrote to memory of 1508	1088	msedge.exe	88
PID 1088 wrote to memory of 1508	1088	msedge.exe	88
PID 1088 wrote to memory of 4508	1088	msedge.exe	90
PID 1088 wrote to memory of 5084	1088	msedge.exe	91
PID 1088 wrote to memory of 4508	1088	msedge.exe	90
PID 1088 wrote to memory of 4508	1088	msedge.exe	90
PID 1088 wrote to memory of 5084	1088	msedge.exe	91
PID 1088 wrote to memory of 5084	1088	msedge.exe	91
PID 1088 wrote to memory of 704	1088	msedge.exe	92
PID 1088 wrote to memory of 3664	1088	msedge.exe	93
PID 1088 wrote to memory of 704	1088	msedge.exe	92
PID 1088 wrote to memory of 704	1088	msedge.exe	92
PID 1088 wrote to memory of 3664	1088	msedge.exe	93
PID 1088 wrote to memory of 3664	1088	msedge.exe	93
PID 1088 wrote to memory of 3156	1088	msedge.exe	98
PID 1088 wrote to memory of 3156	1088	msedge.exe	98
PID 1088 wrote to memory of 3108	1088	msedge.exe	99
PID 1088 wrote to memory of 3108	1088	msedge.exe	99
PID 1088 wrote to memory of 1280	1088	msedge.exe	100
PID 1088 wrote to memory of 1280	1088	msedge.exe	100
PID 1088 wrote to memory of 1280	1088	msedge.exe	100
PID 1088 wrote to memory of 4300	1088	msedge.exe	103
PID 1088 wrote to memory of 4840	1088	msedge.exe	104
PID 1088 wrote to memory of 4840	1088	msedge.exe	104
PID 1088 wrote to memory of 4840	1088	msedge.exe	104
PID 1088 wrote to memory of 60	1088	msedge.exe	105
PID 1088 wrote to memory of 60	1088	msedge.exe	105
PID 1088 wrote to memory of 60	1088	msedge.exe	105
PID 1088 wrote to memory of 5728	1088	msedge.exe	118
PID 1088 wrote to memory of 5736	1088	msedge.exe	119
PID 1088 wrote to memory of 5744	1088	msedge.exe	120
PID 1088 wrote to memory of 5988	1088	msedge.exe	122
PID 1088 wrote to memory of 5988	1088	msedge.exe	122
PID 1088 wrote to memory of 656	1088	msedge.exe	124
PID 1088 wrote to memory of 656	1088	msedge.exe	124
PID 1088 wrote to memory of 4628	1088	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://cmresource.org/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ffbf4cec188,0x7ffbf4cec194,0x7ffbf4cec1a0
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1812,i,13445553663732963914,1751770505393571782,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,15665914631734736958,14842182523043703181,262144 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2660,i,9589254412600904879,14503868909934506171,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,13716518268894307243,5396126844997841437,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,2783155436826033102,1449800560333733940,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,15278584635153108631,3056143530797958392,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,4334330806518527354,5799643964408806783,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:2
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,4252698322841961084,4454279688255438339,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5160,i,7331917651827849933,15389464997181647784,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=5228 /prefetch:8
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5760,i,997704297021090108,5551079446556507695,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,14642494321331030638,10023992079592613290,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,14642494321331030638,10023992079592613290,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6456,i,13688201666645209489,15150148010648872749,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6696,i,221689449331368338,1601969057008766463,2097152 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,3099845476947881733,418991520176218685,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=120,i,8434611839840916465,6757687986662274700,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4560,i,13619639470067088604,1714833083054305774,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=4356 /prefetch:8
  2⤵
  PID:5744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,15313946499529465550,4189150628010970791,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,3951441694926443682,9665326744656871501,524288 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6444,i,10444274831297662630,12649013633958587333,262144 --field-trial-handle=2220,i,8211990641367167251,1206401999676091606,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 2055c4d546219cced747cd67c13d4c735cdba633495ce6cf178011997e57db84
MD5 6a2c264045a6b4ae247256017b50ab63
SHA1 a95cd8f455e303404fbe461955b502abb11936a8
SHA512 d0175e0b5f0500f10169fc104884412b8e3f6e1c069546c992d3ec9378e7f49f49e2f488fda32d2dbde2fb271980c3e3c288b0ae341d5e4b030b8b77e034d526
TLSH
T1FCE0D8256A9CC1790DC0D4CBA06CE696915073DB958CEA6E6314748D1C514057374294
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000be

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
Size 236KB
SHA256 c9133cc6c740cde6117ce08b05f1e8fe2392a8a84b9ace7ae8b6a1c864cffc0b
MD5 2062f44a3c686b79b99a3e1331157d78
SHA1 47a20334d36222bb8ef633bfcc6c6e4bd68b2d3e
SHA512 b712956eeb6c6028952bf81a2a98d45ef33f031b255f0c94cbe255c8101a60dc2d96fbd9c92d878450369a0023e697928fdc05897c467165a345cb22153a7862
SSDEEP 6144:qKBPp7WF0N0bWKt9scXEEq6+PjNAa4f2KLM4/fwgt4:Ftp7nCuQEBlPjN9uJLdw84
TLSH
T1E834230C98EC97649AED885546551C2FB6D764E3CBDF10F82C82DDEE01D26BA320E5BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 4d372ecc13281d94e4460b36ff490b0993c3b736d187cad49640a60f8fdaf5c4
MD5 05ad7235b83e36c85593b7060f3fa752
SHA1 dfde737b0d600cc206026c6afad51743961a8bd7
SHA512 da54e54d3083b0258e9001552f9548da6c059f412443ff4b4cbdf3cef8901a147a321da1799a656e75b9bd044e0edbadeeef193fda86b17c7c0fb041a95d81e6
SSDEEP 48:OcIgm/G/Zp15kAJE6WYOBLJMetSTP3GLHiz9NjsEWouhm/pa9kunlTRKxzGYJ8sA:RZEpFHwT/WR7nlEFGc56ScXGUSo
TLSH
T1C1B1846B8C8B0193EF210931C5DA2B33377D9D9A4B07BE8B1644507D643E7A2F1D6C68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58de45.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58de45.TMP
Size 3KB
SHA256 fe4e1ee32e3b1c6b3524ce5cbf4f3f46911ce7ace6a62f5cb9700b7fa39512a8
MD5 cf519047884ea2d6ba42c7a849144166
SHA1 913e225684674d01172224725d33d71e310991e2
SHA512 36b82f12cdaff0cd7df0deea16e403f9788d1bfd57a7626c94d01cf504331dbc42e1bdb540477db9631914a6914f02db394ba00ce44c858367a9b46b6a264ba8
TLSH
T1CD71816F8D4201D3EF211131D5DA1A03373E8DA94903BED6115898BDB82EB67F0D9D78
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 aa185d73c11af1691ef8ee648bcc4bd9b34c3649f8d357151600bad8bac87e30
MD5 4161ff7a91cf7cddca8ae7268420a194
SHA1 cfbba3e76879ad1f7dd4fbabdd1088d99229ec2b
SHA512 99c5dced8a9de5dde04c87719c9d86c16bca32b5c54cbdc9389f4f0156adfa865d5d470f2290661d9edc68068c3360e82690b5399c70e997958ee1bb7eb1c87e
SSDEEP 192:DkY61cIj5Zei40GXCdx8AYZk1s5MVaJUn3xssi0r6oH6EZdNPHT:DkY61cIj5Zei40GXCdx8NZk1s5MVaJUt
TLSH
T1F5028BB6D2E4C56E8B1219F197253E1ACD5A1528432C3C3799D5FF8B93F24B2E201A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 9944b0bc29c8dda57366b444ccec05a062c83905c15c5cec5d5984dda09272fc
MD5 afbb5311a5937e270a3de82e3b2c36e2
SHA1 67dc0e7a16c8d08d0bf77ccbcd00e6daafe12df3
SHA512 a1cbe66262e3f416e14bf697a2800747d9c6bedd0a6f3c25fd8c5f6953f6916a058dbeae85fa1fd6703311774521894ad286ad210f596b95b413069a7034597d
SSDEEP 192:sxZmRPyM/jK1Ml8Mko/fhsXLPgIdpDdHW6+WNxUN8C/Yw0YETIgrJ:sxZm/Mo/fhsbPhxHbxUH/i9
TLSH
T16E52E8016A38AD77CCDBD209FA55BB53D6F9047292940E44A9FCDA1C04E6BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 284625d7f592555eb29f6cc21315445daec365dff7e16bd7046d57c8135eb651
MD5 7dc58f5a020d0cbc3d4c4bfc342a5c30
SHA1 9e454e9f58d5c80bd17c448062b12263d4f7938e
SHA512 64d49f7f4871b0184247cd059f70fd1ac1344ca0d5602704d669fb7e4de4c6d7b55201a058528773f7292502aad45cf32b7923fdf721d6a1d846d3df5df6580e
SSDEEP 192:sxZmRPyM/jK1Ml8UQ9ko/fhsdLjgIdpNdHW6+WNxUN8C/YwlZLTIg5XJ:sxZmZqWo/fhspjh7HbxUH/BD
TLSH
T19252E7116A38AD77CCDBD209F945BB93D6F5447292940E44AAFCDA1C05E3BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 8e5aae7ebecdbd6158c4d52bf63c02606597b7c08ba2d26027f54407d98f3c3a
MD5 85df3ee0bd111165816e291617cb4a5f
SHA1 68f9387b69edbcd9a3998db4af68768a091064a4
SHA512 7c5f9e4077817c016b14cbf88711197122586e6d76f8a448065e86d2087d397c4cdd2829460743d6776440981abcbece8e2af8259494f298c2eeadb03290f71b
SSDEEP 192:sxZmRPyM/jK1Ml8Mko/fhsdLPgIdpDdHW6+WNxUN8C/Yw0YETIg59J:sxZmZMo/fhspPhxHbxUH/iN
TLSH
T19752E8116A38AD77CCDBD209FA45BB53D6F9047292940E44A9FCDA1C04E2BED2207C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 9da3aa1dee4c1fa6f333a1be267703e91129ba8302ce83e70e4e84255f130a37
MD5 06b5c583297f76719375432d3c9911df
SHA1 f9f638d8f82602ffc497140753880037f438d5a7
SHA512 abfebd65304c90447f9bde6a7f15a3009975ed58a9880254955cfd6cac943f4319563722b968ebd278f2d1dcef14af6338f89d77b28273fef7193c68f22c67e3
SSDEEP 768:hS4jeXmWvmKLE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhPLlrZ+dWrohXcaa86:hS4jeXmWvmKLEu1jacPLZQdt226
TLSH
T1C4D2F93B284CCB7E4F844E5CED26AE976ED801CB6A584D5047FA894C03C77EB512B49B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 b9d4d695969f4c623fdcb5ff94d41c054fea65722d801248a50cb08b2b1a0d53
MD5 ddfde2b7a4bf3076f4437828d8c77b80
SHA1 0f6f16a5876754814d9fe61c85f9114d9271a0aa
SHA512 2f6aa93fd57a2494a447880e63539283b69329541196facacee16a8c41fa1b43829cd235492b53a5f510b1d3a3e430150f244cfbd22682be5a64bb5c93a7352f
SSDEEP 48:KMUIjKJSUjyxEIHK1+ctoIbKFCcLyQQH8QWZ:KMUAKJSayEQK1+GoQKFCqp
TLSH
T11891932139BA02016D7F251D81B88F175A53B6E3345CA53B3BAD40A64E6BE145DFCECC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 154B
SHA256 7f6d02ea720b9477ded63f88c2f01bc05aef439587d29297c93de768b461477d
MD5 11c58330b8c1af8664c4dec6391855d1
SHA1 efdb4bac6f00ca8b10d9c7990dd1027876408727
SHA512 b814ba014c5f5ee70a4323dde46da540598388fec24d90a5e9ac1b391e37cde451435dd9d0160100cfd415dbb7b2db0d1111451f156d336015f92f3c7945372c
TLSH
T17BC04CEB1994D9CB4F74ADE82024BB2DE227824D8CD5CDE8E848500561B5AA28802924
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe58dd1c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe58dd1c.TMP
Size 161B
SHA256 5062036eab9fac54be4fcb147bd8107070358d117e363136aa6b93228b0a1b22
MD5 e72421eaf32996c9612fa002d94c22f3
SHA1 3854da327f1b4fe699f55b5ae600081bb9b2be51
SHA512 f20a8ebda09a0d1b05a7dc9db8ad66a61363eb7901d13985860568541e004c464c072bca35e118c3bc0b2163f403bab81831d2d7bb2400f5bb52c4f5ccfcba00
TLSH
T105C080D7155088C70B7058D42020761DD1278D0D4CC0CCD8E804300170746538501920
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe594646.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe594646.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 65f9b12f5632ae7073c176002b800521792df125e3f923723e90768c25fbd606
MD5 0d53fb9234ce278a3f34b238829baaeb
SHA1 fdee579f7bceeda27662f1796c359c0292173e5e
SHA512 56d38f707f7c38ca703a5e8c0717d1a17d36b8b37fd337db92612f60d993b7d1e4a73bd2c1a1f8d67f888409e591fc39d4186827ac8ca4b50f42faee5da2d1a6
SSDEEP 384:EiFiZcIesNL8TUNTUlIlUp0eff+68R+XGxJrEpFT2aL+LBNj5IhoX:fFQeKwgk3ZEh6iaWN5iY
TLSH
T117C21AF298EB9876D8AD5743E73E2E138EBCC063B5856A50B3985A1CCC561BFD306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 07c41d424b32b89e478fdec47f22dc535278fdfe54b2cb3385e49797473107f6
MD5 189d92e310055fd2d99cc69f23f47b46
SHA1 535ee7c7b76a2bd3e340583b783d10970dbed2ab
SHA512 3091feedc5383e6262b8c0ea318985f78c4f3fdb9a77b363c8c68a80281d9152dfc80662d67eb525e1894d262b7d94ab237bb85cb549296d2f306452a85b3377
SSDEEP 192:EON86hZ0QmiUywopc/+jVIjzorRV5wOZT2T3U6:EON86okpu+68R02T2zU6
TLSH
T13002E935ACBC6C778EE2AE45F48727235FE4212BA9956F84D6E81B1C00C779C2307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6faca63fbf5e8a78d4f9f7704c276c7ec6e0e1ce83dd95151a9d82f638a869f4
MD5 9d1445c5f488da8eca8dbf13d0bd5658
SHA1 5636b9f9e6cdadb61ca7df57ea661d41c6999214
SHA512 84ae715eebe728a5bfa627da7c3e085d1a4dea8b4b1499a0a42380d90951cc9be5743e542c626b2e0f19e296d0d7195a8cbb42ca4d2fa68ccc0ab6a3702d01db
SSDEEP 192:u6LsNplQrZExKQmiU1WFQ4H/+jVIjzorR+XKFuSJrE05cFTT2XqRLU8:PsNplp0Yff+68R+XGxJrEHFT2aLU8
TLSH
T13032F932A878AC779DE2A140F44736639FF41167AAC92F94D2EC6B1C04DB79C131B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 07a7309ac16196fce3ed7b0fd4d9538fb4cdb41519e046ac51fe8eb67f654f9a
MD5 e89be725540e8fd40e9157916df55a44
SHA1 f02f7eaf4636c475e4642341f5602d9f8100377a
SHA512 26025bbd46481f8f0c26286582deb0008b967f1d4500883fad84cc9c01b80c8f90c63a56484884d560cd84d761d1514ce1d8fd9b055b1e3a2a5a5a20a9ea98c0
SSDEEP 192:hONc6hZAQmiUyno9c/+jVIjzorR+XKFuSJrE15cOqT2XqRLU6:hONc6M59u+68R+XGxJrEw9T2aLU6
TLSH
T18312FB35A46CAC679DD2A591F48732139EE51127EE8A7F84D2EC2F1C00DB76C130AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 619e1e74933332b9dbdd5f4df0413be55029b827319a33bda9c70df66a658400
MD5 cf64cd64b8f7700d5cf0772443d0c5c4
SHA1 d436a67f70d04add76defb7ea4c7323eb11587c3
SHA512 b09366106c5053c7ae447b1537f71b05e29c6b585eb2c0ba3005f67419a5a33a319282985a378fca89b8657a2ff7e46393e4273305adb76fb0f632f46b868c9c
SSDEEP 384:mZcIhsNpUp0Yff+68R+XGxJrEHFT2aL+LBNj5IhoX:0hT3ZEheiaWN5iY
TLSH
T111826C72987CAC779CA6A251F54B33139FF44077A6C96F80D1FCAB1D049A6A9130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

24684c73-2cfe-4d8a-a53e-3a4b70a5dbd6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\24684c73-2cfe-4d8a-a53e-3a4b70a5dbd6.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 f7b0b872d7a37d2525121160a47415190adc5cf46dc59e866d9d020b09452354
MD5 466a2653a5632f5c4a32b88065b8b2e4
SHA1 93d7788cc5c5a46eaa6c93b762cc1c833faeadbd
SHA512 825a0b5c76c363484e9d04c1dd74876a61e77eb8d2c2a0f98865db5560a5b20112a0dfba360273ca68e1092739dccb929b438a0533835073c0fbda7ee522b2a6
TLSH
T1F241F858BAE91148B3B72E19ABF6B86E547F7D672E0AD59E00110D4F0623A40C8B1B37
MD5 SHA1 SHA512 TLSH

Submit Download