hxxp://WIZINK[.]SMARTCALLCENTER[.]ONLINE

Analysis

user interaction
yes
max time kernel
299s
max time network
198s
platform
windows11-21h2_x64
resource
win11-20260911-es
resource tags

arch:x64arch:x86image:win11-20260911-eslocale:es-esos:windows11-21h2-x64systemwindows
submitted
22/09/2026, 11:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://WIZINK.SMARTCALLCENTER.ONLINE
Sample260922-ny66tade63

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3064	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345514198124217"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1805035633-626948184-3225555471-1000\{B4351C49-8C4B-44A4-B441-3A3A17D69EE9}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1805035633-626948184-3225555471-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3056	msedge.exe
3056	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe
4176	msedge.exe

Suspicious use of WriteProcessMemory 49 IoCs

description	pid	Process	procid_target
PID 4176 wrote to memory of 4152	4176	msedge.exe	79
PID 4176 wrote to memory of 3064	4176	msedge.exe	80
PID 4176 wrote to memory of 4472	4176	msedge.exe	81
PID 4176 wrote to memory of 4472	4176	msedge.exe	81
PID 4176 wrote to memory of 4472	4176	msedge.exe	81
PID 4176 wrote to memory of 3592	4176	msedge.exe	82
PID 4176 wrote to memory of 3592	4176	msedge.exe	82
PID 4176 wrote to memory of 3408	4176	msedge.exe	84
PID 4176 wrote to memory of 4464	4176	msedge.exe	85
PID 4176 wrote to memory of 3408	4176	msedge.exe	84
PID 4176 wrote to memory of 3408	4176	msedge.exe	84
PID 4176 wrote to memory of 4464	4176	msedge.exe	85
PID 4176 wrote to memory of 4464	4176	msedge.exe	85
PID 4176 wrote to memory of 4540	4176	msedge.exe	86
PID 4176 wrote to memory of 4540	4176	msedge.exe	86
PID 4176 wrote to memory of 4540	4176	msedge.exe	86
PID 4176 wrote to memory of 1936	4176	msedge.exe	87
PID 4176 wrote to memory of 1936	4176	msedge.exe	87
PID 4176 wrote to memory of 1936	4176	msedge.exe	87
PID 4176 wrote to memory of 3912	4176	msedge.exe	88
PID 4176 wrote to memory of 1448	4176	msedge.exe	89
PID 4176 wrote to memory of 3912	4176	msedge.exe	88
PID 4176 wrote to memory of 3912	4176	msedge.exe	88
PID 4176 wrote to memory of 1448	4176	msedge.exe	89
PID 4176 wrote to memory of 1448	4176	msedge.exe	89
PID 4176 wrote to memory of 560	4176	msedge.exe	92
PID 4176 wrote to memory of 560	4176	msedge.exe	92
PID 4176 wrote to memory of 560	4176	msedge.exe	92
PID 4176 wrote to memory of 4460	4176	msedge.exe	93
PID 4176 wrote to memory of 4460	4176	msedge.exe	93
PID 4176 wrote to memory of 2160	4176	msedge.exe	94
PID 4176 wrote to memory of 2160	4176	msedge.exe	94
PID 4176 wrote to memory of 4652	4176	msedge.exe	95
PID 4652 wrote to memory of 3132	4652	msedge.exe	96
PID 4176 wrote to memory of 3120	4176	msedge.exe	98
PID 4176 wrote to memory of 4580	4176	msedge.exe	99
PID 4176 wrote to memory of 4140	4176	msedge.exe	100
PID 4176 wrote to memory of 1672	4176	msedge.exe	101
PID 4176 wrote to memory of 1704	4176	msedge.exe	102
PID 4176 wrote to memory of 1704	4176	msedge.exe	102
PID 4176 wrote to memory of 1576	4176	msedge.exe	103
PID 4176 wrote to memory of 1576	4176	msedge.exe	103
PID 4176 wrote to memory of 3056	4176	msedge.exe	105
PID 4176 wrote to memory of 1644	4176	msedge.exe	107
PID 4176 wrote to memory of 1644	4176	msedge.exe	107
PID 4176 wrote to memory of 1572	4176	msedge.exe	106
PID 4176 wrote to memory of 1572	4176	msedge.exe	106
PID 4176 wrote to memory of 4628	4176	msedge.exe	108
PID 4176 wrote to memory of 4628	4176	msedge.exe	108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://WIZINK.SMARTCALLCENTER.ONLINE
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffc4d78c188,0x7ffc4d78c194,0x7ffc4d78c1a0
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1720,i,9028851735441002011,15513249844158076143,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=2196 /prefetch:11
  2⤵
  - System Time Discovery
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,16466251598643163460,8824915254123503184,262144 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,10885503375602083443,11066252082013304729,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:13
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,3925456715477385501,12563783111198744657,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,941204894116544544,11862229415692144094,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,8327281650628145640,5001427510056908167,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4228,i,2168967112258265296,1632997659710387500,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:9
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4404,i,12381011192965807194,10701112770722739551,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4320,i,7089108477677779488,10136633218159758611,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=4304,i,7520045859832522503,295267716106943611,2097152 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:1
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3564,i,10442335884480590927,1752218334823361236,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:14
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3568,i,905267060430701616,15315842691368436250,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:14
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,12879534495057612018,7703366809104834798,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=6456 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4652
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,10448259281970851299,12261136379701863351,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4404,i,10448259281970851299,12261136379701863351,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:14
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,10687455567792969919,10964937461851725382,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4220,i,927355706876372470,11428670631993425758,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4580 /prefetch:14
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4300,i,9931443500799348166,10772857810934264416,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:14
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,7922271898738410167,14187436514698095556,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:14
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4172,i,8375056269750406603,7075430314332073212,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:14
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5496,i,12252530570850742023,5542802387465319722,262144 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,5844865916491959536,3041885217748205061,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:14
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3224,i,3175147448533634533,10468910284255870091,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:14
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1560,i,9821277672194842012,16223472383155008000,524288 --field-trial-handle=2168,i,16815817837886731619,11052546575149026011,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:14
  2⤵
  PID:4628

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4168

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

418bca1f-8ec0-4fdb-b9da-51e529f3da35.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\418bca1f-8ec0-4fdb-b9da-51e529f3da35.tmp
Size 17KB
SHA256 b948a86a062c042bf8c81d08132bd308ebedc658c631f1a74b476cd45d9b6b52
MD5 5962d2d80f38102f7d28f62f94c9b230
SHA1 acedfdb880d56ee5d33b257e92b50c970823f196
SHA512 9d4b4f27505600ebedb2b9a11c57518eaf883b8dd11f83a83420ca7baf315a35cc8f04ec853d67b62c857fd612cd80f98196dd63a9d784192746914d6d6b91f2
SSDEEP 192:uSH+xasuheOwQxMl78NBUYBQw15k4vbQmiU1pIL46zFEL+Fd/iOpOfq/xSz/qLqI:LZcI88NBUYhaYoUCDd/iO2uX1+oz
TLSH
T1F2826D72ECB46C7B59E2D605F4463B079EB8D02796C86F44A5ECAF1E01DA6A82307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4eebdc04ff118e9cd3cbb614d205d2b777bd24419c5ba2ae742de33b0ae98212
MD5 40ad9518d5c77a0ba122e8109cc3c934
SHA1 3770983945ea6e6a8d5f74005f43d42a473cda6f
SHA512 c5dd104df7f9dfc246af8034f366c71afff1236b796e9a095503e2d67aa832edd20512ecc75a53cbdb4618c87af263d88078adcaaf2e02b99f0651281f9fa7e9
TLSH
T1D5D002D5FB40B684D271197B2E6D871DCB0CC7795253F204B25C099A1D8415EA593895
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 07033132f366c6f60db5e529fc69a7b97ff045f8e645ca5b0cbfc6c67ca168e3
MD5 12f8fa66f4bc4a67065a50101ac5fb00
SHA1 22008cd91de74c3bdedc73b4d92455d1944d873b
SHA512 ee66446d728e8152fe5eb48adb7f3c4ede63473c0a6675096480ae1c197af683b9f25f6a2fd18375968d5d1b35dec0a7580b11ed556bbb239d62993418151f79
TLSH
T183E0268A45C9D22EE308B447427C5B0CC2C1371AD3CC6E4B6709C8897142C40A2C6B92
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 06b9f363f896edf6615faf40e0d3f8da6a98a597817753308a9dae9a02c79298
MD5 e4e1c21ada744ccbe1ed7a074da7df1e
SHA1 1d95483b36ed39772d8eb046e1863ac8f448a965
SHA512 885a4ee0cc874713b9d9b8d733a49281526429072a6f329fbf720a65f1d28a4e87640287cc90c427e9fc1e28db734bfaaac1117c96f91c1b6329b1c4d0632f25
TLSH
T1564141C94ABC708ED798AB3055C05F87373BAB79BAA32E1104D9C2FB5EC67B142C4052
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

01f8d415-c4d3-4d89-b8cb-885b8e112bf2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\01f8d415-c4d3-4d89-b8cb-885b8e112bf2.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 7295ff1b47bc2b7544a19c38dc4487f57f5ac0d68fa7b5690c0635610ef092c1
MD5 55fb42ad6b786ed28e8c4ad407924779
SHA1 83d31a50126e2e23659ad085a97b991a633403ae
SHA512 aff4ab8b3b4eea086b0bb6a84577075c089fd5c8b20bd1529f53cd020764bd2e5e022c1a7d3b4a128c272f111baa6be29972ad1e4056603e2bfc380593783042
TLSH
T12421BBF386F196BE8A0396F0DA18AD07CF5D0651035C7859CAE4BF1753E29B1E141A1F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 986f270dfd8e86793f6d967243541a36fad14f81e1a5abcc97c183bc0bd9d619
MD5 ff43500ecfc7e222286d7390298bf250
SHA1 1595d5ef9fc08879e889072e05136e63066dbc98
SHA512 e501a6283b81045adb98c49d2b029e403d8e95c9453514d77322e55d5eab7efb6f392d881945d3a57a78d9d214fa141e1d71095a6fba2338d64417f9d9cbfbbf
SSDEEP 192:sxZ3LbZ/fdsTjIupJMS/W6+WN94+/Y0n3l8j+gIg54E8J:sxZ3vZ/fdsT/WS/bj/5ujt9g
TLSH
T14D22D955AE38A97B4CCBE209BA25BF53E2F9503151911E48ABFCD61C05EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a9bf3fd40e5c8de3dba07d4eefdc1a19123449ad7c437516755d1d4a01505c1e
MD5 d7c48d0cab94c2b392caa84e4e3b4511
SHA1 5b60c542c5c89dbaa0e989dd438b9e320704bea3
SHA512 74096b3f29755250af88eb8a782780caa1bdd4669db707d35bd0f3d2b75cc429a4facd0d46dd97847cac7432ffb5e0c4231a9cddfa4a2981ca48b29ac3866131
SSDEEP 192:zZ3LbZ/fdsKtEupfMS/W6+WN94+/Y0nQ8j+gIgrJ:zZ3vZ/fdsK5kS/bj/5Fjt9
TLSH
T10C12C851AE38A87B4CCBE219BA25BF53E1FA503191D51E4CEAFC961C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d9c372c90b16eb50dcb8cece8926b55a07ddf375fc437fe7a876a021272f6803
MD5 2426eceaa13eed0fbda543503b5458db
SHA1 a39ceb760fc92f241339390c3caa9e2557a3d0b4
SHA512 fde10516f924d6d323b0166c0c3a904f66ea02e155ec089bef807fc810f5237f6d793bfec0426fae298e5a1de50432d5d99e6ddad879f8c56d32bf7623e12fff
SSDEEP 192:sxZ3LbZ/fdsTjIupfMS/W6+WN94+/Y0nZ8j+gIg54E8J:sxZ3vZ/fdsT/kS/bj/5Cjt9g
TLSH
T1E622C855AE38A97B4CCBE609BA15BF53E1F9503191911E48EAFC961C04EB6CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 783fe92986e9b6dc8e9c2bbbe01916c73421781a397abcdd7d1f726e39043972
MD5 4ac3acee34503fbfebfc58f8913bad4f
SHA1 151b5203047e54d1a092049f2a5756fe5f6145aa
SHA512 72eb8aeee0aa0f361462159bafc0a1779ec45d429a1974071dfaa14c8cd6c36297831d70cfecbfc63fa58be391185c1a73cb60001774403defdfd66a999b365e
SSDEEP 192:sxZ3LbZ/fdsTjEupfMS/W6+WN94+/Y0nZ8j+gIg5YJ:sxZ3vZ/fdsTzkS/bj/5Cjtm
TLSH
T15322B955AE34A97B4CCBD219BA25BF53E1FA503191D51E48EAFC971C04EB6CD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7f44425a92e8873d63cdd08fe4e9838de9cc8d81c2047711e5e9ba1d36dd4a7b
MD5 c0d44e354ebaf5452f7b6338e5409b5c
SHA1 dca047457d52674b0bdbc9a71202dbaca46fa620
SHA512 ecf4a935427abde00390169c3d9da95b1d214ae059941543d211e8f098a4b08da550cda4986246f9414fca85f4b7bb7d72b37fee9350de3add1dc8c5717d31da
SSDEEP 192:zZ3LbZ/fdsrjEupfMS/W6+WN94+/Y0nQ8j+gIg5SJ:zZ3vZ/fdsrzkS/bj/5Fjtw
TLSH
T16C22B751AE34697B4CCBD219BA25BF53D1FA503191D51E4CEAFCA62C04E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 6d08c3b30cb8acb62c75787c8bb79dde7710a140d878c5a98979b002cd85669b
MD5 6a271dce3edf33ac2344a1e655a5cc8e
SHA1 586b9c8015f428794fd52a12c694f7480144f150
SHA512 3e12033fd413ebec99c80b0bead625b6fa485def2e8b88c1ca4f6f9ee6b0c50dcc9f276ab975fc49c197809107ba03b68523b6f50dc06b7229cb49d3818fd686
SSDEEP 768:eCnwK8sN2IsWRmkUQ3z8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3fYLl/Yi0E11rodv:eCnwK8sN2IsWRmkUQ3zu1jaKfYLpY7Ec
TLSH
T1DAD20A2F640CCB7E8FC01E9DDC166F9B6AE802C796689D4047FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 cbef010088d0525c7b79d2361db467baed79571d728d7d107e816c5623771e13
MD5 930f6fcbd53bd9619bca3f271aa94542
SHA1 4fd155ea8a0bc10b5659f32b0dc97c4727dd63ab
SHA512 4a63a958b9d98ea408632222d819d22f1d8b933eb5ab2d03fc9c6acecfd9d963823b2d73bf62a7823dd0129ea36e4c9c1f13d73550149b8cd2b6b68962f29781
SSDEEP 96:KYXWKwA+ed2K2syiEYKBGaikAK9mSbqKcU2g:AdxNDzzMRg
TLSH
T185D1120571BA0205397E390891F58B5F578231B37029E62B3FBD00669E66E185EFDCED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0b06900b74a7199bb796f20d0c052a7d7b9a2b864f9ba64f1d8ceb062f24e7d3
MD5 1a1f3d397fa18e5e2f0cdfa197198fba
SHA1 ad9aaabd21d663b4f13112a6add8ab058be9e27d
SHA512 9565f139bd279e8b2a3ca928ac28a2e911c83ac915031ac2f9d7bcdbf519c42f65c94ad91f3ad2a606125e553465804c3de79c0b4156dda38961f515abbe1f8b
SSDEEP 192:kL8NBUpQw15k4cQmiU1pAL46zFEL+Fd/iOpOfqXhSz/qLqyBG2K7G:S8NBUpha1gUCDd/iOauX1R
TLSH
T17D423B36ACB46C675EA39605F0073B179EB490679AC83E58A6EC6F1D01DE6AC2307C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 fdbb4730e496004e31b63d82743862dcf785a1504b1a1233e027a61a3875c119
MD5 ba11b158f5f655a9be0a1891a4f33a7b
SHA1 60478fe08ce2e9372134441f05c22283cf3cba41
SHA512 df05b52032c78695b89fa3d38a60424f0cafd48a40a8808d2366fbf108c80844f5f26eb0ce7693d71c68540127ef0ef16981cb0097dadcbb1be74446232c4389
SSDEEP 192:utL8NBUpQw15k4cQmiU1pAL46zFEL+Fd/iOpOfqXhSz/qLqyBG2K7G:28NBUpha1gUCDd/iOauX1R
TLSH
T166422B36ACB56C675EA39605F0073A179EB490679AC83F58A6EC6F1D01DE6AC2307C07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 837fdbe43110372f701d39dd65efdae5d960b1d157408dd48026c1d09adf6061
MD5 6a458d0c5cd0bbca59670d08a6946ada
SHA1 1ce30c31dad5bc315868a412183d3f0799600266
SHA512 b5c40a439d64cb6f4d6757483f3502e3301e1cbe11574327785fcb2e75f96920b692117906c519417f0f0ea45dc482b0c59fb8643ddcf788950b7b43a8068d27
SSDEEP 192:uEm+xasuheOwQxMf8NBUMQw15k4vbQmiU1pIL46zFEL+Fd/iOpOfqXhSz/qLqyBb:yZcIQ8NBUMhaYoUCDd/iOauX1+oz
TLSH
T1F4727D329CB46C7B59E2D605F4473B079EB8D027D6C86B44A5ECAF1E01DE6A82307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 5d03c75a4504097acb0d18758c1b3863ee2b108749ac0354ded242e0b3cc6299
MD5 bc899d297a0472941fd144949b43e2b4
SHA1 3f7dcfc501ab55e991a95cd95c6ae24955c599ba
SHA512 ccb11a4ffa655a3682897251c1696db469443ec89c5c2b46da85fe471cb85d362c3bcfa2e87b918961e83adf0b369100d67c3f99fefd9411952882d4d4aa97a7
SSDEEP 192:uEm+xasuheOwQxMG8NBUMQw15k4cQmiU1pAL46zFEL+Fd/iOpOfqXhSz/qLqyBGa:yZcIh8NBUMha1gUCDd/iOauX1+oz
TLSH
T130727D32ACB45C7B59F2D605F4473B179EB8D027A6C86A44A5ECAF1E01DE6A81307C17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7b13a904e47fad162941ec9d925343986e55476315dc9160dba171fd17f5efb7
MD5 d2a1a40fa42c12834fb97f18a7e885ce
SHA1 3338f73c1f60a85e635b05505963aedc8a6932ac
SHA512 645a3be2f98d5872150b9120dfdcf98be80e7799d3b7328ff7b27fb8d2cca677a370fa03b6a939454f2d7d3e7de1a555873c492449ac7e5e3f0a179822b0f2d5
SSDEEP 192:ZGNC6f15sQmiUylEIPuLzFEL+Fd/iOpiG8ppYU6:ZGNC6tGGJu/Dd/iO6nYU6
TLSH
T13EF1C935ACB86C6B9EE3AE05F0473B17AFE5112BA9956F94D6E81F1D00D765C2302823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0df168d47d701b9da3dadbe2b5e26c3af705653d0c769cfc9cc9f365c1a0da3e
MD5 13476500d1b67fd36155144bc0ee2679
SHA1 d04e4df086c587f421bc10da3e1b384fd5b4297e
SHA512 c5969274a507501cf73b353e61c08395160b394a7cef611a97aba59930dbccd84cd3893cae0059eef7bee09212145fb9d9c80a259aab294b65b12ccda814e4ca
SSDEEP 192:ZGNr6f15BQmiUyNP0LzFEL+Fd/iOpOfqTKXz/qU6:ZGNr6tBQ0/Dd/iOuuU6
TLSH
T1E3123B35ECB8682B5ED29945F0873617AEE48137EAC87B95E2EC2F1C01DF56C2306813
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download