32f4c1e4c036d78d5bce0ddad05acdba6da51f8ccacf6deec8bb3fe529ec6ea7

Resubmissions

07/09/2026, 18:50

260907-xhamca1zdv3

07/09/2026, 18:47

260907-xflxlatcke3

Analysis

max time kernel
898s
max time network
737s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 18:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
YP-PDF-COMIC46.html
Size 592B
Sample260907-xhamca1zdv
SHA256 32f4c1e4c036d78d5bce0ddad05acdba6da51f8ccacf6deec8bb3fe529ec6ea7
MD5 80d85d8dee5d6b66ea68013f7ca3284a
SHA1 ab76976452eb1b2c8769b60b59b311a2c699ee7a
SHA512 9c49d0fa94c81633203e9310866e046f40c7dddb94e9a6b7f7ee4a2204360c1e1714a90212a3da390af1073058bfda27c0051159e594a220b551eb4e61343078
TLSH
T1E3F0C8DB1F01387F2D238131B4C35168CF68095ABBE821E28358111F76CA0415EF2FAD
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2432	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332806706103980"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1738198120-2966725515-3980530802-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1738198120-2966725515-3980530802-1000\{FC05FEF4-BCAB-4FA7-97E7-3DE6C61B2EC0}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3340	msedge.exe
3340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe
3124	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 2636	3124	msedge.exe	87
PID 3124 wrote to memory of 4860	3124	msedge.exe	89
PID 3124 wrote to memory of 2432	3124	msedge.exe	91
PID 3124 wrote to memory of 4216	3124	msedge.exe	92
PID 3124 wrote to memory of 4860	3124	msedge.exe	89
PID 3124 wrote to memory of 4860	3124	msedge.exe	89
PID 3124 wrote to memory of 4216	3124	msedge.exe	92
PID 3124 wrote to memory of 2420	3124	msedge.exe	93
PID 3124 wrote to memory of 1344	3124	msedge.exe	94
PID 3124 wrote to memory of 2420	3124	msedge.exe	93
PID 3124 wrote to memory of 2420	3124	msedge.exe	93
PID 3124 wrote to memory of 1344	3124	msedge.exe	94
PID 3124 wrote to memory of 1344	3124	msedge.exe	94
PID 3124 wrote to memory of 3964	3124	msedge.exe	95
PID 3124 wrote to memory of 3964	3124	msedge.exe	95
PID 3124 wrote to memory of 3964	3124	msedge.exe	95
PID 3124 wrote to memory of 2964	3124	msedge.exe	96
PID 3124 wrote to memory of 2964	3124	msedge.exe	96
PID 3124 wrote to memory of 2964	3124	msedge.exe	96
PID 3124 wrote to memory of 4852	3124	msedge.exe	98
PID 3124 wrote to memory of 4852	3124	msedge.exe	98
PID 3124 wrote to memory of 4000	3124	msedge.exe	99
PID 3124 wrote to memory of 4000	3124	msedge.exe	99
PID 3124 wrote to memory of 460	3124	msedge.exe	101
PID 3124 wrote to memory of 2544	3124	msedge.exe	105
PID 3124 wrote to memory of 4432	3124	msedge.exe	106
PID 3124 wrote to memory of 1836	3124	msedge.exe	107
PID 3124 wrote to memory of 5588	3124	msedge.exe	108
PID 3124 wrote to memory of 5588	3124	msedge.exe	108
PID 3124 wrote to memory of 3340	3124	msedge.exe	110
PID 3124 wrote to memory of 2420	3124	msedge.exe	111
PID 3124 wrote to memory of 2420	3124	msedge.exe	111
PID 3124 wrote to memory of 4168	3124	msedge.exe	112
PID 3124 wrote to memory of 4168	3124	msedge.exe	112
PID 3124 wrote to memory of 4832	3124	msedge.exe	113
PID 3124 wrote to memory of 4832	3124	msedge.exe	113
PID 3124 wrote to memory of 5336	3124	msedge.exe	115
PID 3124 wrote to memory of 5336	3124	msedge.exe	115
PID 3124 wrote to memory of 4172	3124	msedge.exe	119
PID 3124 wrote to memory of 4172	3124	msedge.exe	119

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\YP-PDF-COMIC46.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2f0,0x7ffebc87c188,0x7ffebc87c194,0x7ffebc87c1a0
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1540,i,6666639895465435242,12544430724130187084,262144 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,6567508497996000752,15470910220799916520,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3236 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,8679172019477025621,17760616351092830351,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:13
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,8917823140635190881,11811848441166624761,2097152 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3612,i,6179859165111987176,2544253192257777971,2097152 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4304,i,7224125687964981729,1293090836389390717,2097152 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=4924 /prefetch:9
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,6115159953477630826,5103908676368444340,2097152 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,818374792071960220,4410899460042914031,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:14
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,16565518856103508626,6271955410293976143,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,801173935929966068,2908829197492854059,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,801173935929966068,2908829197492854059,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,7616602559639538863,7228401411086143112,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
  2⤵
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4908,i,2659565795860812698,8406833844339662943,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=3808 /prefetch:14
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4904,i,669670538464557302,2653398190925540184,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:14
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5360,i,6747130947300352914,15876921819102278807,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:14
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6532,i,5695679733729596713,9667218826346212637,262144 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,3469248914317224319,15141574967538688864,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,16695592626393177534,3415582014317315113,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=2464 /prefetch:14
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,1030852653194722325,13425650163565016731,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3540,i,7499542683611712835,19911787506257909,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,3118820979516881592,8544585032861712223,524288 --field-trial-handle=2284,i,18273977738995412881,3938928482213115069,262144 --variations-seed-version --mojo-platform-channel-handle=5348 /prefetch:14
  2⤵
  PID:4172

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4272

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3560

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1316

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1912

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ac1b1f93ff87eb876027f4166d705375c0f5d3d22dcb03f6a66f6100e88dd10f
MD5 b99f03c5cfe71b03836f8b5fcf09425b
SHA1 8a5078499c0b5ea40183efb77f9c1028c196409c
SHA512 6b9feec4ead7bf05f67d0d480907e21a3b770d8d12dedd2b0d785904186eac7448583e61abacb23582948de55c8ea2043bfd6908efd7faecdd82cee91404cfe6
TLSH
T16DD02BE037909D18C440353163D0122091006C30880923090100A02C8D3E2C3054F0BE
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c95a47aec5edba88214fad580cb869417b6620a91d8ee97e2d0b7801d3372be5
MD5 aad5f2ca0dd16bb2ea6c7757ea569c50
SHA1 5228b0b132542be004ea1bb32f3748964d065af5
SHA512 9d59c0291d741bd9d6cf50c22972d4baef00e7c1a48d6a3311a6cc82c04ceeba6e2be9458334cb954878915cc9eb91a8fd8bc4a47c966d57a2a05d6ee8211640
TLSH
T1D4D09BE177A19D18C545353567D1522591416D31451927194241E13D9D7E2C3455F0AA
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 7763a9017383dc9eae4680bae70e1339b21a2cfbe435fb6c57bf4b0e4d742061
MD5 324fd2b176c0324c2d5567bc76ab5ec6
SHA1 28c0df48285172af7c75d4b59cf73d50e4c69efd
SHA512 3116222722a6dfcdcc7db62383c548eb75bf57345b126ce0d645e03dc9996cafc6a5c80e352f716ca12c0910d2d51897e1164e51f6534c8562ce35f04ecda722
TLSH
T179E0208408C4C2DD770464C7457C9F8D81C13B0ED2CC6B0D1700E544B103159B691761
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 1dcfbcb4e1c47797e5c37f828c93da3599f37e66b01be1e63966f787d61083b8
MD5 625e5f3f51ae02879408afcfc19d2cc1
SHA1 25c8a24b1e39a508ea6cc99ebcdda57b94ab4ff4
SHA512 6c239da48bdf67ee9237b14ddf3b5a31edf900740cfb33315e32af3c75c31c9f9c924430adeac46f2518cfcfa3a930243750a4d1c8064e541605b3149bf71a00
TLSH
T1FFE086D505C9D66EB3087887567C674C82E57B0AA7CC6B4E17058C88F243587AF96FA0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9c4d1a80dc36699713f88354541e83e6c04365616d66d44f4a1a81cb2f263c8b
MD5 4f1dbd7f645442b6469b19734f2f9780
SHA1 0e6f9e37d4add13408e3736e88787ea1ba651541
SHA512 5d9e4d0c4e1d16bfdc05e08048ad6276414027ffc451c74e2f52f3f733631e6900f3a2617ce1c08a341ac65a6e21309b3d84223469bb9ad915b832c055f75c61
TLSH
T19EE0DF9818C8C22EB210748B46BC570CD2E0BB0F93C87B0A1B04C885B24304ABBD66A0
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 e755998587b846c30ded7afe9a63cfe3383c62af5781fcbd29a45cc33e93c046
MD5 02a77fd84b194da36e98621ea4d27c94
SHA1 12b596044c69361e39f41c851f134dccdc8e2a90
SHA512 2f4394aaff7eb55ddb8785bbfe2e70149d035acb0375168613b17c25669bc9179e79c024a724b34287290b262a87b15a640178119489c146094789641d1a64c1
TLSH
T118516397B36E28C1D7B586F1DCDD944432F5C86822236F01865CAC7C1E06F0A6DC207B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3143.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3143.TMP
Size 2KB
SHA256 e95decaca86713810504a996740cfee53f42235094fa896fc21065302b34b65d
MD5 b4b764ed0b1e302a7acb9ca7c3cf86a7
SHA1 01f7cbafba66eb32ae58e46f296e186e4363611a
SHA512 3a2ec1d1580743617823f476cc3f4d0588a31a6aa32a08b7b31d539584c03ec9381e40670690ca64fd5dab5f99b6e8473f6c54c04951b337b7683772fdc58f11
TLSH
T198517497B36E29C1D7B596F1DCDD944832F5C86822236F01855CAC7C1E0AF0A6DC203B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 5f3ffee82e1c8299e5af2e9229d36beefe1909df51494fc69a1533b522c43049
MD5 56f13bda67aa124277e5ffaf9a9ea29f
SHA1 31cccaf0af4dfa0b5d019328137dc327feac2dab
SHA512 a40bc097272393de2a6b7254edb87858b063d2efe15b689260ef9152566bb800605e9dc6c7a55b1af366c613996dbaa97fdc45d1c06048ab9370affdea47e6d1
TLSH
T1EF31C2F783F4857E8A1196F0AA14AE1FCE2D0511431C7C6AC5E4AE2793F3472E041A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 f65d9792adfbfdf6c433763fc39396197a8ecb6df119ad55bcf81ab92c25414e
MD5 cc7fce01c118299a050d341ce90fd421
SHA1 6188838090f4c2a8e80e1b1bcde6bbe635358c37
SHA512 d07d798104f278ed09963b09b29bac5c2a5085dca64bb41a2c3f2430874a09a39e9918ae051e73d2f692f3243c4dd6688d91ba8f54173cd826c00c1ee973d449
TLSH
T1D131BEF787B4856E9A0196F0AA18AE1FCE2C0511431C7C6985E0AE2793F3472E041B6B
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 6c465b78c902441b7d9536d8aac164ba41beebc071fe75afdc8f0875e4db223d
MD5 dbdb0d34952c0d0e16ee02f64a668a7d
SHA1 4575f456e4e911dacb4f01495b53814884c4b8bf
SHA512 58b2af03ab7331d30e9ebd53fb1bb6ac2bab817a290b0bcca5466e5d6147e360784aff3376deb2af54298e1aaf8a36a0b9c661977cf05616b1c85d39f8339b6f
SSDEEP 192:sxRAR6bC/fFsDp+wGyzoA8p4qy/g6+WNIYoQ+CYVGy7IgDHJ:sxRAeC/fFsDp+p/Fy/5IMWTl
TLSH
T19A32B8156968697B9CC7E61DBB66BF53E2F9103261D42E58B7FC860C00E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 bee97512378d2f8a32ed656d1dd647a5c919c1c9540f9c63ff13ce5da5ea5297
MD5 f84d9e20c146ebfdacfe185f10c2baa0
SHA1 1b44d49f4d4e94cf04d4899bd40e73c7aa3089f0
SHA512 47c41e64d9da3f87634ae1287460748422d9200463f4c6896974a72e989eaab55634e01504a8f7f7660f9a56ebbc71912dfe4b7291833a8cd87f1d128fa1867d
SSDEEP 192:sxRDR6bC/fFsgrwGyzoA8p4qy/g6+WNIYo5QCYVGy7IgIJ:sxRDeC/fFsgrp/Fy/5IJWTs
TLSH
T16732B8166968A93B8CC7E61DBB65BF53D2F91032A1D42E58B7FC960C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 c668f85ad8b9fe571a2582082476011903e20983cd46838dab87e073c0821fdc
MD5 e3530daf197683e786542f1c37c85141
SHA1 342f0512cc5a7280a9b7ec93e122655c7dcfbb06
SHA512 d6bcc893ced083339141c61be5d7382a964b1b8c95ef54fcf7c25cd1b2c3237bf8c1328bca517fc12c14417a74ede5202af4bc48b88a6ce0805623efc665f54c
SSDEEP 192:sxRAR6bC/fFsDrwGyzoA8p4qy/g6+WNIYo5QCYVGy7IgDxJ:sxRAeC/fFsDrp/Fy/5IJWTn
TLSH
T17F32C8166968A93B8CC7D61DBB65BF53D2F9103261D42E58B7FC860C04EB6DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 9cc2dbc42efd899a87531bb7ae8c4baaef5bf19df038dd639753db34fbb282e3
MD5 b85bdfddf4604785558f30e9d90aa40c
SHA1 c01ebb928e161ae3bdcd2fc7054a18fee6bcad70
SHA512 4be69834fd119ea687663c5aa4112e32445ff028188ae874aa62e0af26627b86d586a90d120c5ec4c71db3eaa0890f9ad3374e6870e704a85c9528970dd3305d
SSDEEP 384:jzK6H0dfCtgsqFf02KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVvf9uaRXAro98U:j26H0RWgs2f028F1+UoAYDCx9Tuqh0V0
TLSH
T1BCB2DB2B640DCBBE5F800A9DDC19AFDB6D9802C79B588D4047FE994C03C77EA911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e43ff61a-51d3-4238-9a35-615feafe23a3\index-dir\the-real-index
Size 360B
SHA256 a86702ee671feba462a7c5529e0154472dc675356e04505d50a4e8a3e13242ad
MD5 069f53d4e704fad2b88723a451f3ef60
SHA1 34e13461a4d18bc879d575d114464d63be34f8af
SHA512 64abdc7b6769ece506414a2dcfdb1ec7dd79975134198072db40184beb080956c7dbf692dca687b6dfcd1d76bb8808cd7737dbf0ec445786a054a4047442771e
TLSH
T18FE0EB8A8CA3080BCA333D7606B7622F333B02FD2500AE1700FC001D9603A3C4201209
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e730b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e43ff61a-51d3-4238-9a35-615feafe23a3\index-dir\the-real-index~RFe5e730b.TMP
Size 360B
SHA256 92d2f6b09015ed8f8e0043311a907e16b2f1267ca65357b78f49a8cb2eac9db7
MD5 bc82ad3bad47d495301198aa9e393bb2
SHA1 2bf226b26df03a023a810cdc525668e404753648
SHA512 c3226a900186cf0a55bb587b34c8db10a2550390c30468804ed03755f8862246973d2167e2407e1df20a717fb83f9503da477ec50a9e0f85d89ef97e8be9dfe8
TLSH
T1BFE095CF44D15E53CD1659751543631F333F0C382515E61B50EE545F55237FC854560A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 82323c551e68911996470815fa192aea24a770adb5e5604ae0f0b7ff6a57d2db
MD5 0027f4c89a300effce13e831f62bb7e9
SHA1 d94613b0aad757ea9b9ee28268149bd207951c80
SHA512 a9239b6968b22b3543567bd139accb7d20706240e992aa3b5517064273b19462fc3f60b23b0f206a8e00a62c9cac7d8bac8f4e1313dd01cee3ba322c5b5e22b9
TLSH
T1F4E0D8B32EE77824FCAB97E92871A5AC0281B959C409EC4F211ED7C710F12517C6AC25
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 5bc06e5d37ee47c630f6e7c3d557675462a5e9199775efd9656e5e5f827e236c
MD5 a7caf6504d08395ce2b7b70b2b548bd3
SHA1 f88b4c0fdd92c53b5b66fe7aba479e0506f2e2eb
SHA512 ae0857f2e99712f93e534b01333e2cadaf11c7b10e5373d03fd348dac7694cef688d79015671d19d884351634aa1829b532ce61a08d0bfd2eb38cddecb9f892e
SSDEEP 768:Mrv+4UNbdb3WgP/TBOWJLt169ONXyer1IRCzni9ZcTR2:MbsbN3WUC9SIqn+cTR2
TLSH
T1EE03B031A498AE334DE2E2D6B1077743BFF8505785C50A50EADE2F9E068B99E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 f2c4c780908b57c5f89d46cee3795905cf416f0b55990d29511dd7458e0265b2
MD5 961db818e4662a50083e12b072704a4f
SHA1 76d918ef267d5cb5f5576a8c679a594a94835096
SHA512 6c9e395ccfc819dd53b10d7ac607009a4cc66c29dbc9ab5d6b4833eb4c651de1fd407421c340e58555dc0066784818705a7dff059ed21d9c6a44cc35b249558d
SSDEEP 768:xrv+4UNbdz3ed/TBOWJLt16/ONXyer1IRCzniwZeVH1SK7:xbsbV3AC/SIqn1EH1l
TLSH
T1D503C032A198AE334DE2A3D5B14772037FB86057C6C40B90DDEA2F9E069B59E130F957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 507842265d1d83b73d3ce7e9df14cb8f0356a7ee12541c8eef7ce373edf7a87f
MD5 1945eec7e6e0b860e807ba1f2655780e
SHA1 37ad97b45c9eae0b19e91cfa9e244d70feb29a61
SHA512 42c22e172bcbb8a7625132d5d8cee417c5c79b3f5f42deaa32eba3196a83464b548fcd171b2f9950377539529efd6faff3fdc74bd0450bb2882fbdf91e1c1fae
SSDEEP 768:prv+4UNbdb3l1P/TBOWJLt16IONXyer1IRCzni9ZcTR2:pbsbN3lRCISIqn+cTR2
TLSH
T14A03BF31A598AE334DE2E2D6B10773437FF8605786C50650E9EE2F9E068B99E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 40KB
SHA256 a6abacccf06c0efb0e75604238779dd4392f2f49f3b36123663b619de9ea5639
MD5 7957061b1ff246f7957f61a1d4fe3eb8
SHA1 3407568256a4a0468cdcbd78f784f1c631503aff
SHA512 062514d3414827417b4b93ba2cae1868a2ddaa4458409ff2d4db2403d417b1785033f808c07e6b1a94e3c339052a944fd0c210dea4ec4a79c33e625289796562
SSDEEP 768:Krv+4UNbdg3WgP/TBOWJLt166ONXyer1IRCzni9ZcTR2:KbsbO3WUC6SIqn+cTR2
TLSH
T12803BF31A498AE334DE2E2D6B1077343BFF8115785C50A50EADE2F9E068B99E130F917
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 534f7f93ea2419ccf621f6ec4516bb78061d9392c0801f4d3cacc234eea02e52
MD5 b87305411bf500110937d27e57c73c70
SHA1 d917998655ea722587b9ae24b85c50359a4051c1
SHA512 fa1769fe0bb43f1c823c6daa1d463ca1c23e5cacfae6025794a01c17ac2e51d9ea37cbedc22969965698a902ec869e48e8a0adee26d2199d3bbab4ea8dbf03f1
SSDEEP 768:Ov3WgP/TBOWJLt16/ONXyer1IRCzni9ZcTRkd0:Ov3WUC/SIqn+cTRkd0
TLSH
T13AF2BE71A494AD374CE6E3D6B2473343BEF85157C6C84A40AAEE2F1E05C7A5E030B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 38KB
SHA256 4dd21179f57bf517fcad5d4c06fa0cd51c25481273c3f5b726d71dad27e82ce0
MD5 62071dd328fbecfaf87315269555dce3
SHA1 fa8bb63c1b368dfdf1121fcb4cf9139966389c27
SHA512 5443a06bccd43472685caf22a1c45d6f991cff12fba9b3a4144ee5a94b79f1150702976287dafbfeced04b52fb50ad935fd93b6d3d989cc3b5a0d16526936e33
SSDEEP 768:hrv+4UNbdz3PI/TBOWJLtJONXyer1IRCzniBTeVH1SK7:hbsbV3QzSIqnMEH1l
TLSH
T1BC03CF36A4A89E338CE2A3D6B14773037FB86057C6840B90E9DE2F4E069B59D130B957
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

45d4b70e-410e-4379-99ea-dc44c14a5918.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\45d4b70e-410e-4379-99ea-dc44c14a5918.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download