hxxp://brvrcz-3b[.]myshopify[.]com

Resubmissions

16/09/2026, 14:28

260916-rs4ehs1gme3

16/09/2026, 14:05

260916-rdzg1svz7m3

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
16/09/2026, 14:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://brvrcz-3b.myshopify.com
Sample260916-rs4ehs1gme

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3592	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134340425139191304"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{AF76C3F4-C034-4401-B634-0335BE62613D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2864	msedge.exe
2864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe
4148	msedge.exe

Suspicious use of WriteProcessMemory 42 IoCs

description	pid	Process	procid_target
PID 4148 wrote to memory of 5012	4148	msedge.exe	84
PID 4148 wrote to memory of 3592	4148	msedge.exe	86
PID 4148 wrote to memory of 1564	4148	msedge.exe	87
PID 4148 wrote to memory of 1564	4148	msedge.exe	87
PID 4148 wrote to memory of 1564	4148	msedge.exe	87
PID 4148 wrote to memory of 1396	4148	msedge.exe	88
PID 4148 wrote to memory of 1396	4148	msedge.exe	88
PID 4148 wrote to memory of 1968	4148	msedge.exe	89
PID 4148 wrote to memory of 1968	4148	msedge.exe	89
PID 4148 wrote to memory of 1968	4148	msedge.exe	89
PID 4148 wrote to memory of 1748	4148	msedge.exe	90
PID 4148 wrote to memory of 1748	4148	msedge.exe	90
PID 4148 wrote to memory of 1748	4148	msedge.exe	90
PID 4148 wrote to memory of 1688	4148	msedge.exe	92
PID 4148 wrote to memory of 1688	4148	msedge.exe	92
PID 4148 wrote to memory of 1688	4148	msedge.exe	92
PID 4148 wrote to memory of 1984	4148	msedge.exe	93
PID 4148 wrote to memory of 1984	4148	msedge.exe	93
PID 4148 wrote to memory of 1984	4148	msedge.exe	93
PID 4148 wrote to memory of 4120	4148	msedge.exe	97
PID 4148 wrote to memory of 4120	4148	msedge.exe	97
PID 4148 wrote to memory of 4120	4148	msedge.exe	97
PID 4148 wrote to memory of 4948	4148	msedge.exe	98
PID 4148 wrote to memory of 4948	4148	msedge.exe	98
PID 4148 wrote to memory of 4948	4148	msedge.exe	98
PID 4148 wrote to memory of 3544	4148	msedge.exe	99
PID 4148 wrote to memory of 3544	4148	msedge.exe	99
PID 4148 wrote to memory of 4360	4148	msedge.exe	100
PID 4148 wrote to memory of 4360	4148	msedge.exe	100
PID 4148 wrote to memory of 536	4148	msedge.exe	101
PID 4148 wrote to memory of 536	4148	msedge.exe	101
PID 4148 wrote to memory of 536	4148	msedge.exe	101
PID 4148 wrote to memory of 4868	4148	msedge.exe	103
PID 4148 wrote to memory of 4868	4148	msedge.exe	103
PID 4148 wrote to memory of 4868	4148	msedge.exe	103
PID 4148 wrote to memory of 3656	4148	msedge.exe	105
PID 4148 wrote to memory of 1096	4148	msedge.exe	111
PID 4148 wrote to memory of 3660	4148	msedge.exe	112
PID 4148 wrote to memory of 1860	4148	msedge.exe	113
PID 4148 wrote to memory of 5088	4148	msedge.exe	114
PID 4148 wrote to memory of 5088	4148	msedge.exe	114
PID 4148 wrote to memory of 2864	4148	msedge.exe	116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://brvrcz-3b.myshopify.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7fff704bc188,0x7fff704bc194,0x7fff704bc1a0
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,14592658745568936591,17688683891223247495,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,12283816168866739839,6432861567228612294,262144 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2356,i,17251123419275577279,17609917713565921449,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,2591794990370784757,8465596525867053497,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,5748053077619134086,16917258657015532931,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,11521097841170518259,11342828136407536808,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,3429500945699885289,14246796274583298225,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4280,i,12607440485253039577,11572822130899271674,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3504,i,12399880770713378118,3442459673981962368,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,4683059755611638921,13155123804687277554,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4000,i,6677628313648936414,17510405212937087910,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5780,i,8968740063241162723,11476182902928447726,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,17951139033299467015,17083042319600581256,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6432,i,11275489850558187022,15106755760590821068,2097152 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,17951139033299467015,17083042319600581256,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,8098105389040951974,1604395532686973043,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4316,i,18182672404692587439,16918431687712805824,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4304,i,9624047591800322785,18183698513607993368,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,962031314709755075,4631685658556753139,524288 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=760,i,2333805951682942945,8888096673915256325,262144 --field-trial-handle=2312,i,10034173269112776368,16910049571091436137,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1768

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

f_0000a0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
Size 77KB
SHA256 2fbf4bfc00dc913ddc98cac2cad9907862fedc34c3837be1337f40e32a8989c3
MD5 f1cef9e62b700f5f794a925dde204113
SHA1 f626f64bfae8356ac5e7b8a2953f12c0d0960565
SHA512 2dc28409eeb9999a4879887cf6f533edfcb5224de76664d5f54e8d84440f6eb32f9a1724aff4a81796198d7c4fa6107248591c09b1db3aec3c41c34dbf9716d8
SSDEEP 1536:1PiyCqLU5BRwSrGwrhaxHRaiGnRjKAUXpQiP1G7Lix++j:pi1aGGwrsLadG87I5j
TLSH
T18B7302440849F76C2ED7B3C63A7C807EE8F1E616779F8D246985C981D24E68FCA03D11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
Size 70KB
SHA256 e1f82da3906ae2d89248cf0af5787a91cd5cac5f58ae86fa8f11e9db9940608f
MD5 acb455d36f860bf44bd1cd4e5644d58f
SHA1 108728ca969dcd89b93ce227021dd79eac263901
SHA512 c84d17eed775203be21e7b07c72d55b03787bdc45466688de577e44cf92cf1174e546391425efc7c2342b34fd56feecf5f0715cc3cb5816c66d049a383bf5fd3
SSDEEP 1536:Urk19/i8mpxOdHQ+rqLlcDjbsojQ0iV5CVg:UA9/idIddbPda5CVg
TLSH
T10D6302910CA7FAE94AFA370F778DAB9CC36E41786F08469243931CBE1A15F61714C729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a7

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
Size 77KB
SHA256 0ecebff55aa2a9ed72d61610682523d616b7b9a423236b93d6e5df0a2855660a
MD5 4b3fc5c217d4063d016b31f8409cf8b1
SHA1 f1af368d82dee3f5715b26d8ad1b12a0b714b7f6
SHA512 a98280d0c327a136de329d4ab1d9eac7f62995f32a131919f4196d05fe99639d7a2a1bfb42bba320f488fe44999b57c3bcb50726ed4dd27f9e68a59c172f88c1
SSDEEP 1536:oPw77ChpONnSZA1FLs3AYtseh+BcbQ0reKAUIlKywZXX9ORB8lLUm:oPUwpMAQ+jguQI2o59OqLUm
TLSH
T1BF7302F28862EF14B465213F30271C0ED27A53C9A516E8DBE4DD140CB9FE7857B2BA16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000a9

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
Size 70KB
SHA256 1b776bdd11ad94647cd6e5bc5e741571f160b8f5ebd272b31cb9e3cef472b367
MD5 da020ea61a575feb6d4f061a4279e0ce
SHA1 f963edb2ecb5afb506a0abd4d09b7a01a202d3d1
SHA512 ef3c894d7d2dd931cb53560949ebe303120c666cdfb21da1fafdcb4d73bda97afc3eb7510968aa63783b6fd1c02ba02083d0f7d2b09ec2a0cc5a1c61bfcb629e
SSDEEP 1536:qruXtG9Hjj0HqlSJgWjHyXPlJYCi9sifk7smsD68yYYhFPrptOcYucQMth/JJ1:WotG90K8h4Jxiqv7ZsmNuL/p
TLSH
T1A06302077EAF16B630F53C87A954604F7E0CE5BD78A3C09664CDD1A7A729230422F629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 9c06f7a96f7a1ab31446c65b32e355a93873ce5ce4c6135d3ee34634319f1aa4
MD5 ba6f008bf046cb8fcc8d571bea535126
SHA1 41a6695dbdccb32eeae661b086a1f771ccb95da9
SHA512 969a5c43c69e3f6eaf6ec89a2bb431dc65909cafd4d95954a0e8244b9eeda46ca40112ae57d7d26dd1e914a95a1f7f879a9e346c8ed5d337f2cceffd578b7289
SSDEEP 96:F8kYiRB+qT9EKH8DrehQU8tfR+kCGyQX4NeX9+x7:F8WUKH83ehMphXWetq7
TLSH
T122B13E8011E80858FF90F271C2EA18A7B13B687E9AE79B33F081F5B9584339131D4CB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59765f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59765f.TMP
Size 3KB
SHA256 e00f4efd7953294f8b873c3ca3d85144fd2ad95ea58a1ee894f9c0f896a6e0d6
MD5 6b6f4a71024c3436b388367ee9baf54c
SHA1 5d782871b04370e4239d4aa66642bea2f665e4da
SHA512 7145de6917045e6a3cd773c668be5dc2e1411ba8be0d3505a729f3ed857c5e6b273d98386626a6246b75ca2f178e6fbb050c9a40f0cc9acda534cd963ddf271b
TLSH
T15F615FC152B0486DFB68E37286FA10A7B5348C728EE3ED72E454F8F95C0632071648BE
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 789b4cc5a7c8feb3701da24d6ccfe76325b70062cfd69744b1beaa721d64c2bd
MD5 18e1a00e8c27c06caac0eb119796d16f
SHA1 c88cc4af10bab6d7e308ffabcf5cb2f5bf9e97a6
SHA512 371c7235807d1f0c4a9d3e8756a0baff8fdfdfa7161408ffa7b12cc7f35d8dd49d5d32b937bd4e940179cd20c70cbcd7ff24db5a1837d52a30067e059b5683dd
SSDEEP 384:DXr/EnEUNOoke/edJCtdx7Jc1HKyGzP8/ZWbKVYmG+PIPNxq06RPK6KXKMyLV7zc:cSQWx52
TLSH
T1B2428CA6C3E48B7DD80296F057242D16CEA90928537C3C5789D9EE9BA3D24B3D34174F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 34045396a5a058983af1ff9da1a13adfa92d67b689e1c7768d5d97ab5421967b
MD5 bd0296ea2c0487f1284a6f141431b6d2
SHA1 696afde86748d239e8c277175b61a20460f79fef
SHA512 2a38bf05d76c6282b0434a977e49cba165e7679ac645db907508d109a9bc3788c01a06fe78b3fc2ffcf4e1eaa980249528724c61a60c71f3f766cf6474dcc64c
SSDEEP 192:sxZ7RtWm/fLsfYvIdp0y5HW6+WN9uN/YrPuDIgrJ:sxZ7im/fLsgAlHbm/p9
TLSH
T15E22B7527E38A57B8CC7E209BA19BF53D6F9103291951E58EAFC861C05E6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4bb6a444ec2ba0d064b4bdf3aad886f9e76f62a68972fe9b4f8b20edc320a29d
MD5 c36d2ac52a72f3a57dbba855c79ea2d6
SHA1 991a2abac9568a4d6c4fec028be6e25bbf71a8f9
SHA512 454bbdd96abcd11ce43f7d2d7a65f44b33d587f49875810aec28812e7bf8dae426846949e2978c68f637302b8c28c9512cefc7cceb5f196e1989ca301a06d858
SSDEEP 192:sxZ7RtWm/fLsCYvIdpKy5HW6+WN9uN/YrBuDIg5FJ:sxZ7im/fLs1APHbm/Jd
TLSH
T12722C8567A28A97B8CC7E20DBB15BF53E6F5503291911E48EAFC871C05E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b58ddd20aa5bd944f6afdbfab0583cfdfb6d83bfb807ba6fa753ed4d7bac1dd5
MD5 e7256c9e2a0130b169857101ff543c82
SHA1 bf36a00171d9dfcac3b279544f2d03306841bd88
SHA512 953b84657d73c83b69c6b055812d1593f4dd4c75df03a31967d7c4ee4349dfb38a87dfd96d92429b1fd8b1004e39beb505c33163b0bced2bb1fc1bfb253c4229
SSDEEP 192:sxZ7RtWm/fLs1YvIdp0y5HW6+WN9uN/YrPuDIg53J:sxZ7im/fLsyAlHbm/pb
TLSH
T1A322B756BE38A57B8CC7E209BB15BF53D6F9103291951E48EAFC871C05E6BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 210cb13f7faf719ae5e06e774dbbe1265c2c103d929f876bb7e771ffb8c4c769
MD5 080429f7f3ee82812bfc7330840ea048
SHA1 86dfaab6a8f09a6b0d15c7b10813d7d8aea503e2
SHA512 445511fe79a2fabd079ff78c61b65b34f20d057a55b63e018d68caa1f633d417cc2c7b163c71b3810bd0ae0b7ff6f84f9375d96c6b17612b491f271963b64515
SSDEEP 192:sxZ7RtWm/fLsCYvIdp0y5HW6+WN9uN/YrTuDIg5FJ:sxZ7im/fLs1AlHbm/7d
TLSH
T14F22C8567A28A97B8CC7E20DBB15BF53E6F5503291911E48EAFC871C05E7BDD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 2e0cb556e3f2deb425a2a27d8c3e009bf21664682395a9f5e47052fbc1d0b083
MD5 1ae9286e933ba28cee9c3fb7d1d2f4bc
SHA1 2679c32789806d24fda128c53c08019196145d82
SHA512 8fa54009ba16b01ffd8523aa3f442599b8ef2d628299c81ace4ce7c6e04d5475e5c87eb57b8987376d6600380c5efc70baf0775db8bfc7e8389868d447d3c38b
SSDEEP 768:day4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2TberoRyQ:day4J/DWvbtBhu1jajiLm0b1oQ
TLSH
T1BDC2FA3B684CCB7E4FC01A9DED5E6F973E9802C79A948D4047FA994C02C77EA51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 2KB
SHA256 b1c9d6a662a75035b174caf6eebade16b3e065d7ab64b5deadf3df05ac806f5c
MD5 0f92eec71e7b80147b83843ef19104f5
SHA1 70a4c4630419c26e5682eccc6e5367a2895cc3e4
SHA512 620933d07382917d5fb8acaabbca3d2e6dd98156cca740375302d54b7e2ad5859ce88761333229ededa47170072484a87b77c010a7ab3152d7a8d86557d96d8e
TLSH
T19C51C98E84674ABBCD203170DCFA14347BB05694DA175A4321DF71743FE1AB0AE5B24E
MD5 SHA1 SHA512 TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe59d642.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59d642.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3bd8f8a22c9a728c3591742a7dd29da12d5867b715bcc6f63435138ee5c59144
MD5 5c9c15c868da414b5af6164bd09cd900
SHA1 f964ca0754138e078ff718708ce8965eb8f349e4
SHA512 300ca53ec41821bfe96a32dcab3bbf14cbe0cdd881a728a20985d0d35b104561de838661e2272a544de9820451026798fc3a89f063757637848db9280d9a675e
SSDEEP 192:1ONT6wlDgQmiUycDKW4X58gZYjzorxJiDlk5U6:1ONT6kgYW4X58EA8xJi0U6
TLSH
T13C020938F9787C6B9EF2AE09F58A26139FE5106BE6552F40C6E81B1D00D765C2306923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ddc77f916aaabea4dbc1e85bb8362d13434223177f4e687dd31d425ac525b71b
MD5 4f3ee4c56e13317d4e6d3b09f3b28b91
SHA1 7d52576d5330399fa97cef1916a1fc3932e2994d
SHA512 612ccf7e938299fd16ad1a28a1796e9d79a6cc3cefa1ef8cbc6ca509177668fab0de3b6a0810fec033a56e3ea18fb701f692434af5d758c528b361eb4a57c729
SSDEEP 384:RZcIDsNfDOOZmbuDHX58EA8xJjXd+7O6R2Feosh7Ulos:5D2Draqd+7TRvYv
TLSH
T1AE826B35A878AD3B19F7E149B5463A139FF89067D3895B90D6EC9F1E00DA6A8030AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 526fdef015ebac85fee98fb026059a5abb60d75bfe56f282fdb27172a0ca73c1
MD5 705d7f5fc6c0cb9f75ae847d9ab18bab
SHA1 ae5f8619835ab4ec4c60ac79b1e8e18f537d5387
SHA512 5c77ee1bccccfae4ddbc3e5149e3898cbac8334ea16d433468ba69809822848183e95ae52bcc2c35457507b932c172bf77420dad79f4b3ccb0e47e97c6736f6f
SSDEEP 384:yZcIDsNfiOOZuuDHX58EA8xJjXd+7O6R2Feosh7Ulos:ADJlraqd+7TRvYv
TLSH
T111826B35A878AD3B19F7E149B5463A139FF89067D7895F90D6FC9F1E00DA6A8030AC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 80bc8fd63f9c825014f6c4341766b8ae1acabe69d8e1e1fd3d17dd25e930ad77
MD5 1340302931382daef56cbc6de01f9e17
SHA1 bf6aebbd0b12d4fde6df269f759bde84c69504dc
SHA512 4df0abd44449a9c99e5e7c6cf8f985347d9e0a04359d9db79aaeac69b47ee1bbdf1c1133d9667e5129411da7888c965fae1761879c25a8396f883a07645e70e5
SSDEEP 384:niFiZcIEdsNB8TUNTUlIliOOZuIDHX58EA8xJjXZ+7O6R2Feosh7Ulos:iFQCUwgyTraqZ+7TRvYv
TLSH
T192C229F258D7983AD9AE9747A73D2D028EBCC053B5855A50F3D85A1DCC861BFC30AC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7393eb533e7c5ca0285f1dce8e42e0100cf3d462a09ca5eab048654f7b44c682
MD5 ce787711a39724be33da19615ffe28ab
SHA1 2a6ec4d0d2d0878c27b075b110ca8e3d860f6c7a
SHA512 80cbfe54a806813a513219f61104cbe5992a80592786d4ae077d3989aa5144990c48dbd3d275889eeb0b30b8c47ea0de888dab9193b6f1e899b25351d3dbed39
SSDEEP 192:1ONC6wlD45QmiUycZKR4X58gZYjzorxJjXVbveM/nU6:1ONC6kMuR4X58EA8xJjXc+U6
TLSH
T141120735B9A8BC2B5DE2A445B08735039FA55127D7496F90D6EC1B2D01EF26C530AD22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0d74fbdb-3fc2-48fa-8197-5e1b3172d4e4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0d74fbdb-3fc2-48fa-8197-5e1b3172d4e4.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 2b554ca7dacbd3645aafb8e3efb7065b5a1e8a226b59eec809197a4eda6efe9c
MD5 e27cc00697daa40fc2d264c31db97fb3
SHA1 5575f6076512e03ed72963bd179c7f044320ae55
SHA512 37da6b6d75e3eed554b86f2813b5ed62e33ba5d30969a4b1c04c13724af15a59a5c4b00c8d6a3b3767f8a4e44b30ca6b3ee62fb6acf31ac528ac478edc7f1dde
TLSH
T16E411858A6FA1048B3B77F5BABF6A46E947AB9772F0AD45D10010D4F0A23B00CD61B37
MD5 SHA1 SHA512 TLSH

Submit Download