ed6c9efcd2a109d0a6065a75529a28c2ff8added97727ba59c05e0f8465aac20

Resubmissions

27/08/2026, 04:37

260827-e8v2vsxwhx3

27/08/2026, 04:11

260827-er24vazale8

Analysis

max time kernel
900s
max time network
735s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/08/2026, 04:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 66KB
Sample260827-e8v2vsxwhx
SHA256 ed6c9efcd2a109d0a6065a75529a28c2ff8added97727ba59c05e0f8465aac20
MD5 fa751a3bed0f5150174107a5b2905e6e
SHA1 6f27afa4873a9e19b425fb9dffb525e730d808b0
SHA512 a75d9d17aefba9e2c00dd33bdd62059df3af631f5531660709329dd033766d48c1e79176cc592e27d3113a00c5c7cb3098eb25c48be3024e6821ce6bb625767d
SSDEEP 768:927Na7n1iwl6jyu4yPWXAM7PFcWsrScWrSe:mNmnUw0uu4yP6B7PqWsOXOe
TLSH
T138633271DA561C8F40FAA5E4E01E2B56D0C7819CD3522BE0B32DB5B778CDC623E5638A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2280	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134322790448494660"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{ABF3A946-FC52-4B42-A3DB-33E58C9821C1}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3028	msedge.exe
3028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 1156 wrote to memory of 3796	1156	msedge.exe	85
PID 1156 wrote to memory of 3732	1156	msedge.exe	87
PID 1156 wrote to memory of 2280	1156	msedge.exe	86
PID 1156 wrote to memory of 3732	1156	msedge.exe	87
PID 1156 wrote to memory of 3732	1156	msedge.exe	87
PID 1156 wrote to memory of 2552	1156	msedge.exe	89
PID 1156 wrote to memory of 2552	1156	msedge.exe	89
PID 1156 wrote to memory of 3844	1156	msedge.exe	90
PID 1156 wrote to memory of 3008	1156	msedge.exe	91
PID 1156 wrote to memory of 3844	1156	msedge.exe	90
PID 1156 wrote to memory of 3844	1156	msedge.exe	90
PID 1156 wrote to memory of 3008	1156	msedge.exe	91
PID 1156 wrote to memory of 3008	1156	msedge.exe	91
PID 1156 wrote to memory of 2180	1156	msedge.exe	92
PID 1156 wrote to memory of 2180	1156	msedge.exe	92
PID 1156 wrote to memory of 2180	1156	msedge.exe	92
PID 1156 wrote to memory of 3820	1156	msedge.exe	93
PID 1156 wrote to memory of 3820	1156	msedge.exe	93
PID 1156 wrote to memory of 3820	1156	msedge.exe	93
PID 1156 wrote to memory of 1096	1156	msedge.exe	99
PID 1156 wrote to memory of 1096	1156	msedge.exe	99
PID 1156 wrote to memory of 4724	1156	msedge.exe	100
PID 1156 wrote to memory of 4724	1156	msedge.exe	100
PID 1156 wrote to memory of 3416	1156	msedge.exe	103
PID 1156 wrote to memory of 1244	1156	msedge.exe	109
PID 1156 wrote to memory of 2976	1156	msedge.exe	110
PID 1156 wrote to memory of 2960	1156	msedge.exe	111
PID 1156 wrote to memory of 4052	1156	msedge.exe	112
PID 1156 wrote to memory of 4052	1156	msedge.exe	112
PID 1156 wrote to memory of 3028	1156	msedge.exe	114
PID 1156 wrote to memory of 1172	1156	msedge.exe	115
PID 1156 wrote to memory of 1172	1156	msedge.exe	115
PID 1156 wrote to memory of 1816	1156	msedge.exe	116
PID 1156 wrote to memory of 1816	1156	msedge.exe	116
PID 1156 wrote to memory of 4592	1156	msedge.exe	117
PID 1156 wrote to memory of 4592	1156	msedge.exe	117
PID 1156 wrote to memory of 2100	1156	msedge.exe	118
PID 1156 wrote to memory of 2100	1156	msedge.exe	118
PID 1156 wrote to memory of 4864	1156	msedge.exe	119
PID 1156 wrote to memory of 4864	1156	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffa5408c188,0x7ffa5408c194,0x7ffa5408c1a0
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1944,i,16411362132012291686,15929315208438073917,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,4778463803827403521,1250140716452101413,262144 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2384,i,14740083315058666476,6814338482796436354,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,1915867327137984988,2678794207444100723,2097152 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,17660806919456529816,15940418713744155460,2097152 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4136,i,1395464089461192605,1762780907029382492,2097152 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4168,i,1104637641446297238,9418922482633696299,2097152 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:2
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,9681006683670025296,12348612218905786244,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,16707514845301487701,4722817523512654247,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,9385314362138526872,5424511800543581495,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5712,i,9385314362138526872,5424511800543581495,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,5348791742383675487,3167517176058620988,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,12224005291475792153,11185582554519965250,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4600,i,2327637287682460570,6225358473448904202,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,12572968034781266621,15024377391173661016,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5684,i,681747400194225103,7961122663362277201,262144 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,6314617154628888649,11546469342608159473,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:8
  2⤵
  PID:1172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,2909255022482769121,16918489650710277021,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,3852027488326024887,7953443157942199968,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1512,i,13003490355435016559,13615110026696023386,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1492,i,920184735019107129,15572942323721380799,524288 --field-trial-handle=2264,i,14995224034024625292,9353441733630157012,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:4864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3228

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 bd5dff6b6a2953b678276fe774acb1020dcf956eee918258c4fbcebd9799de50
MD5 ad9e9cc59d40b3c4a865c23e526c194b
SHA1 ec6e5c23153f46461256dc2ee3316df628e2eda9
SHA512 781d6d2d74c84caa1d22367f03cb2eef3a2125624c47277182248dc2b092992ad8756b1ea9759b2d56ee2b90c008cd691688382416e421209d33f546892f8550
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T14FB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a612efa1a3f1d4ee262abb96d63f3b4a31c2ad6c544574be7246db0f52212e1d
MD5 e0045423d265fbb4204e2ccf9cf4e729
SHA1 5cd430c76a965b7d49eb6f686349a92180871674
SHA512 e0fe72d7795acfb0a22d0da2bf0fda4779e67429fc7f0868abc95950b557948a8b07360e9f45a7446cbe79ca28b10086e9e6f63cce1bc4e718efef8261f1e913
TLSH
T11BD09B55754D7415D31B01315411E360955A4462A172D2457120440DB97C81857E5257
MD5 SHA1 SHA512 TLSH

Submit Download

78cad09d-1149-4ebc-a025-985d0fe5bbe6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78cad09d-1149-4ebc-a025-985d0fe5bbe6.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 e3cbe4afcaa6edaf10f7f984037567eae94f1f880493941cbf2901675837b823
MD5 0a5225115ee6e8fcf16a5a81f32f21af
SHA1 e0a7f5fa6b9c9df1fad8b9de8a9498dda04a3ac4
SHA512 3536f38203472ae3fb7b1c092a9b7562ef06d1084b3d6c9a4ed619a11b02adcd39347222b93eb2eab597eb2710e73f74b576aaf6ba4d75881f1ccd142e9ca0b0
SSDEEP 192:rjAl6kUcc6666666YYYYYYYYYYYYYYYYYYYMsLO:rjAl6kUcc6666666YYYYYYYYYYYYYYYs
TLSH
T133E17E078AD4E79B8F0620DB4FA8925C0071370EEBDCD958539D89DD314E8EAF9F1A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 6KB
SHA256 340770f1998be37574a3668ea05bfc90f8cd4bcc8be804ba955d7c03a83e46e9
MD5 6aab3db42a204b414053633419ce6355
SHA1 ba88bd0318a1b4ffd0ad4c511234912ba2b0ee36
SHA512 23f367439ac2450da6a17ba420cc0ecb2c2a174919f1163421b299d0ebc755609fc73f79b5066d489c05f8a7277afeeb5cfb5ce199a8ca4b96c9a3efe47712b6
SSDEEP 192:BjkB6asTTTT7EEEEEEEEEEEEEEuuuuuuuuuMmLO:BjkB6asTTTT7EEEEEEEEEEEEEEuuuuuQ
TLSH
T1FDE1AF468AE5E79B8F1A618B8FA4925C00743709EBDCD508176C89DD304F8BBF9F96D0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 1feb3e31ee770fd9547278d7fdb2ac711f93e5e8d55974df296f32fea26e201c
MD5 09c73db2761ea420a07985c7aaa6fbca
SHA1 ab63e390c9b31e766ff6225bbdcc15f39ceb078f
SHA512 e2120cdbdf750de360bbd2980bef3d03791d054477ef0ef289e0bd40d833e632e01496ef21198ab55a4c0953fad5fb76c995bdee78f0fb35579f47a38907ed2a
TLSH
T1BF714EF912AB34A1D7248230D4D306FDB4774455DB237D51C1009DBC69C6BD993EEC18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe588884.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe588884.TMP
Size 3KB
SHA256 c1e29f708db6d59d8c383898393a351ae3fefd01444508eea63c02554527111f
MD5 5c040c4ffaf2eecbab94af0165a04a3d
SHA1 6e01ea208e7d0c6522061d84c0d2d5bdbeda4036
SHA512 7de599e915a5e535906988f5c5b57af36dd8e210c5133c2db8ed189f631cc6f3a0f5bf603410b769c3174b01fe474604dd5ffa080f9a4b3bc74ddd21ecbacac2
TLSH
T138714EF912AB3461D7248231D4D306FDB4774055DB237D51C1409DBC69C6BE993EEC18
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 689b01d3329180a576c1be0f8f9badae93ec2b3bc20c16fb27458df71f718188
MD5 5ba4bce49f092bfbd1b98a98d98dc589
SHA1 aea61385a2f2b63e5426c074b439bd6f0ad57325
SHA512 0d9a8155484b856ae0df9c475604c82c87aafde117b6abe25eb21b97bc522e913013efa347f14f52b5c9c2d285ec977e3bdfb18154d14f042f9861f4a24f41a1
TLSH
T116218CF3C7D5856ECD0556F09A24AE2BDE1D060642283C15C9D4EF6BD7E3071E10655B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 14ebad034b26ce9bb06a7fdeb5b48a5edca414906ace74a4f251e9f82d28f933
MD5 120f71af9386497eafa5752c472ca7aa
SHA1 3662e32965e358e588c189d98591ff578330d0da
SHA512 5b52a0fee5ae57e186b78524e6142bb79ce1dd74321f7fb40599e0ea945002b7ab0bea14e1a38451cb554cfb8f3521955542512d214332c65df92aa60b95428f
TLSH
T1DF21A0F387D5855EC90556F09A14EE2BDE1D0505422C7C29C9D4FF67D3E3072E102A5B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 4371838ac3eb0a94a86014313d7565dfbe370599196079ceb9a0e4e21f6f588a
MD5 6133fd08cbc6a8be170324515284a9de
SHA1 0df420fba1f5a1e8ac4148dfc38ba470b4620900
SHA512 7b1b9fdccba3b786b062e02a07da27990a252e12b66e5f80a87b342487deeeeef05f4fb0c7ea05f8fb5740d14a385508c1684ef60a6c384438349249863658d6
SSDEEP 192:sxZfRzyM/jK1Ml8Mk1/f/srhbIdpdAHW6+WNGYHjO7bIgrJ:sxZfhM1/f/srhEeHbGj9
TLSH
T17842E6156B74A977CCCBD20DFA45BF53D6F90572A2900E44A9FCCA1C04E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 5119580418635bfe88894f5bdc12f98c88676db6eabf12f5fde5d7d7a83bc473
MD5 f8617981c7dfa095921b7c05c4a5a325
SHA1 22219264133914d44b181352e2c1828f69890f28
SHA512 531a33d7218a093831077196283534055301b821541e10e6edff47eb7e6ddc6900643116d347983a9f60c65cfdd6f4e280fa4a1c5478d625ff557128d54ec279
SSDEEP 192:sxZfRzyM/jK1Ml8UQqk1/f/sxdbIdpHAHW6+WNGYHMpWbIg5pJ:sxZfhq51/f/sxdEgHbGeR
TLSH
T1E952E6156A786D77CCDBD20DFA41BF53D6F50472A2900E44AAFCCA1C05E6AED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 10872e5aeb129f09a3ac1b39f7994c9a717e421cf244cbff31f64b65dec09ac7
MD5 b8b30d30436099bcc7176703b9136027
SHA1 9f4561b61da24bcf9d2a902869f6740bb09fa402
SHA512 dbad56ccba3761d269900a1152f4ab5c25c1ed6955d3a609aff206728c50233076fe60e3f4115257476e9949d6e5f5e03b90bae7cc299ef1440d909439920714
SSDEEP 768:bWUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RgroVt0l:bWUZYTMWvg0Pou1ja7eLZmRrsl
TLSH
T10ED21A2B284CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA884C03CB7EF512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 1KB
SHA256 be625897ca89178795d0b7e58a8cb4c90b5a3c94cd309e218d3e1ed6560a3a37
MD5 445c5d218f2c23e38fe91988cb13ca76
SHA1 ed47d81873b6b5be4e8c85f3646ef9434f86028d
SHA512 fc30d4453d11af7a2185bf8b0bc2a60be08c5216ddee113a71a643b4c6febfc542b303153caf87020a0ed1b8b064f84c2a962723f5ef57d52abc80908d5d8a80
TLSH
T12F21EF4D9EA0898FF96451B61576B5E0B37098CD4F12A2139C3C31326E2235936575DD
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cced1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe5cced1.TMP
Size 1KB
SHA256 1d0799e796af3c46f9bc0289f84d239268cb14d215685bf72048861cf9c5a20c
MD5 ebf42775950eda72bf91b748a0da1fbb
SHA1 97d564508ed6b2abb4df42d09208c57396ded187
SHA512 6ad40616f9ce0fe47ee7dd11e0d75fbd7f286905d98ea9b53c96f8a2cb549b773aa9fc2043c8f124d4846e0554e6cb72443a56027d673bd193f8d3d8d599fcc8
TLSH
T1AA2118894AD18E1BF994507B0967B8F8737488005711B393953C62755D25B8D1B4F0CD
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 da05141a02521e555874779b1c2116f5870f04efd830e5d08dcf3f8f55e3e0e2
MD5 e9b18c92201fbb5a26effbb9a2c9848c
SHA1 f3cf2140039e154495593b04790507c7d982b65b
SHA512 4465a30e2e263820204df087f6dac185753f33c5855a3fc9c8a7114e0e1cf3ad6979abb447a20aa5cf71f661c7bbf8378ada1517d05d273ef8c6b3caeef02b9e
TLSH
T1B1E068F32DFB1810AD6BC3D65471A4A4410138A8C64CAD8E00AAA2A310B23002806C22
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 82ce01c58895ee7c5b9c47856cd3b4ed48c52dca1c3f12d84091b39c222cf656
MD5 6946c5797d8e8c0e33ee3ae4d1b75b6d
SHA1 6c50a6ee12aca9caa2ea872e198d8737156f5071
SHA512 67539af2a1803736c68e6068141e477e046eec013cb08558d75f5ebcfef71057f36ff32203f536d4f96fe100874a0f10613f54293342c9580684eddef8c8de90
SSDEEP 96:KA1eK2Aoz2Ksom9WB9v3Hm1XoNX+TKvKX4Tz8UDS6wqUti+sOSb1iTqXmbKviXQC:E0BFlz
TLSH
T1FDB1360332B712437C3D2908A399977B4B45F2A33424A86B7FA944B25D66E740DFD8ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a37bc2a7-fa9b-4c2b-b3f0-3ac3b6c0cf12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a37bc2a7-fa9b-4c2b-b3f0-3ac3b6c0cf12.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 2f95c6b94fb33f1b8f17bff5e827782789409c445ce029acdea379b00ecb7bed
MD5 5f10d80efc63f09b5d7f9b1a626ba7d9
SHA1 d832168cf33a7e16d81a0dfc8a6e6aefb521923a
SHA512 1d70523a4bb6ee16b338306fa76df8a9db96de8b74ad8aa61792257819dc80fc41b89019893fb62630d1909611dfa0dfebf1639613c337de5a3c792c09b1a051
SSDEEP 384:XZcIhsNprBkCUCzX5od+KOrE28+HBbsFvvoC:fhD2OzOrELgkHd
TLSH
T1D8825B7259A8AC775EF2E10AF94736035FB84077D7C86E80D1EC6B2D01DA6AC131BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 43ea7819e22c4bb12da646d82bbcb8767275942b3ec83200c9a6e2157ceaca5c
MD5 822f17915de954516f45d160a0915568
SHA1 aadaeae0dc7c77ccb038928392ff8dc262c02951
SHA512 a0981ca69d8dd877b524607621d03fbbfc20a03119d9fcb53a924a257fd258ccab094e7521aa16bd76eff2a83791dfc639641df908c531ab7823c9c6f9edc83e
SSDEEP 384:TiFiZcIjsNL8TUNTUlIl6BkCUCzX5od+KOrI28+HBbsFvvoC:+FQj+wgB2OzOrILgkHd
TLSH
T11FA25B735D98DC7BAEF6D649F94B32038FB440B7DA85AA90E2D86B2C01971EC130BD15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 35530e8bbb57fea8f75ff8f5a246febe489d8e6ce806a6b85b27ccc84a204092
MD5 ae6d57bdedbecae6572e59d8335f79b0
SHA1 9f405674abcf2c7adb09a37dd4d55916de1b391f
SHA512 55be3a487cdf43f053ad4d9fda8cde6d5881f739a910fd34fc0f14d375bcdd94bcbf02a739077d717d136723f4183943a8ad31a90613b0a9930ddb3a054ace0d
SSDEEP 192:yONc61VWQmiUy1YgGX5Obd+juOFmI/aoN93s5U6:yONc6W/gGX5od+KO6l5U6
TLSH
T15B02E73569687CA78EF2BE49F88737135FA8207BEA506F84D6E81B1C00D765C2306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 33cd2001ec897f1266fd92294f169c504e4c26556cf030477ed6224d41224268
MD5 2d84ec6512e9b5fefd6d8bb026cb51e2
SHA1 b2261d11f16971c27857d5dadb90b1b9aaf95f65
SHA512 ee52800632877a699df3ed6b24d92ee9f523c85d349f464a78219870812f1f6eadf5d13e6e65d3ba1ee9abb6e643df33bc1ce038f97741293d9403ad05938c1a
SSDEEP 384:PZcIhsNp6BkCUCzX5od+KOrE28+HBbsFvvoC:Hha2OzOrELgkHd
TLSH
T151825B7259A8AC735DF2E10AF98736135FB84077D7C86E80D1EC6B2D01DA6AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a54338e7647a532b9ba46f6502de7a72ff29c3ffe307f5f5098385ad90930210
MD5 8ecc325c4dcb243be34df3b70b040321
SHA1 d08409b899c95d3d3ac9d2ebb647dbb0d061a8fa
SHA512 329f5429a11a78757244cde073a8f6b7d16fb39b5ea9f2c33624ba0d0c77c1d88229a843c4b9d689426e9e2f437239178e7f53befae8c6ba9f8eb9951b4dd960
SSDEEP 192:iONk61XWQmiUypYeGX5Obd+juOFm0beWjJoNBqS8U6:iONk68xeGX5od+KOr728U6
TLSH
T1B312FA3269A8BC674EE3E549F84732135FA55177DA457FC0D2EC2B2C01DB69C230AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a70ec314-0e53-44f4-a799-ebff615b34d8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a70ec314-0e53-44f4-a799-ebff615b34d8.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 40a9da94c6b2e04b0f5a0a2ccc296c9f7fb24bba92121e46ccb3e0ba98996638
MD5 6c6c27bd1383f130a9cb6fd8bb1e6c1d
SHA1 ea54e6d32a5e939c47b90255f30fe5ba46c61490
SHA512 e530bd73bd9a12f499f3729eeee7808ca047df1bdfb06da5c39318fc8c01b74af41b641c5a08bdd76bd74077f2648eb8470cb885303a997a7cb342e6154a973c
TLSH
T115412858A6E9110CB3B76E5AABF6A46E487FBC772F07D45E00010D4F0632A00C971B37
MD5 SHA1 SHA512 TLSH

Submit Download