hxxps://fox-iguana-3lz9[.]squarespace[.]com/

Analysis

user interaction
yes
max time kernel
270s
max time network
270s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
22/09/2026, 12:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://fox-iguana-3lz9.squarespace.com/
Sample260922-pyzbmswarf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2780	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345547056016212"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-895009113-1202185046-1686627690-1000\{F763675C-DE61-4C57-96BF-6F086A1F8880}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe
780	msedge.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 780 wrote to memory of 636	780	msedge.exe	86
PID 780 wrote to memory of 2780	780	msedge.exe	87
PID 780 wrote to memory of 4324	780	msedge.exe	88
PID 780 wrote to memory of 4324	780	msedge.exe	88
PID 780 wrote to memory of 4324	780	msedge.exe	88
PID 780 wrote to memory of 4452	780	msedge.exe	89
PID 780 wrote to memory of 4452	780	msedge.exe	89
PID 780 wrote to memory of 3704	780	msedge.exe	90
PID 780 wrote to memory of 3704	780	msedge.exe	90
PID 780 wrote to memory of 3704	780	msedge.exe	90
PID 780 wrote to memory of 3152	780	msedge.exe	91
PID 780 wrote to memory of 3152	780	msedge.exe	91
PID 780 wrote to memory of 3152	780	msedge.exe	91
PID 780 wrote to memory of 212	780	msedge.exe	93
PID 780 wrote to memory of 212	780	msedge.exe	93
PID 780 wrote to memory of 212	780	msedge.exe	93
PID 780 wrote to memory of 224	780	msedge.exe	94
PID 780 wrote to memory of 224	780	msedge.exe	94
PID 780 wrote to memory of 224	780	msedge.exe	94
PID 780 wrote to memory of 1632	780	msedge.exe	101
PID 780 wrote to memory of 3872	780	msedge.exe	102
PID 780 wrote to memory of 1632	780	msedge.exe	101
PID 780 wrote to memory of 3872	780	msedge.exe	102
PID 780 wrote to memory of 2628	780	msedge.exe	105
PID 780 wrote to memory of 1592	780	msedge.exe	114
PID 780 wrote to memory of 540	780	msedge.exe	115
PID 780 wrote to memory of 3880	780	msedge.exe	116
PID 780 wrote to memory of 2896	780	msedge.exe	124
PID 780 wrote to memory of 2896	780	msedge.exe	124
PID 780 wrote to memory of 2244	780	msedge.exe	128
PID 780 wrote to memory of 3404	780	msedge.exe	129
PID 780 wrote to memory of 3404	780	msedge.exe	129
PID 780 wrote to memory of 4604	780	msedge.exe	130
PID 780 wrote to memory of 4604	780	msedge.exe	130
PID 780 wrote to memory of 912	780	msedge.exe	131
PID 780 wrote to memory of 912	780	msedge.exe	131

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://fox-iguana-3lz9.squarespace.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff6a0bc188,0x7fff6a0bc194,0x7fff6a0bc1a0
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,7770447894009673967,9303889780105188472,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,17647548656180405845,9062491614027647268,262144 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,765609789068938224,2087052259655986848,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,3575861797633242901,15086964695662068711,2097152 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,1977283610115201140,10781984568603394983,2097152 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4244,i,14504280629840875840,11396383961011736311,2097152 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,11324955588851572095,5699836592357526322,2097152 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:2
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,13473337036956283553,14610017485126154030,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:8
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,10684597275403821657,1437624430608071551,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3922543335578207013,735022945787178650,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5908,i,3922543335578207013,735022945787178650,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,8798852454838417654,2356707350309909988,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5068,i,9063057621671677989,2862059594085475991,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4320,i,16218700674553332763,345263214092547454,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,2874116318979877436,12030365327113434062,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=748,i,12391577607400055698,14383173977515074261,262144 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,14559878525760945220,6849286245973912402,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=1292 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,9456353697797503563,4627382140659046694,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6592,i,10327960045167957948,2042243432869260498,524288 --field-trial-handle=2324,i,17685528903350466055,2835902763161974094,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:8
  2⤵
  PID:912

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3828

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
MD5 4ac43ee6512ba8635b7ba6bd015c291b
SHA1 5f9e2474b00ec0e2a9472c049fbea550e26309aa
SHA512 e5ebf9e92458f66e31e080121135313e828b8ebade0bc0e085221ae0d4f5afe0d2035c566590cbfb5902d96f17befe7b24310b4fb9e647b999113175af800ebc
TLSH
T17BD022B2B3A038CFE300083302A083BA2C0A80F300FAE2208C30E08C0BCC02AC283880
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 93c2ca3ce74eca17f27aa90cc3323bb8d6aea5c365862a01a512ce14b9f825b4
MD5 e8a3239e6b22580d77fb537c7bea1fab
SHA1 a99ffe9234c27e560f1c607d3b6c6507928368a3
SHA512 17b0e6f99943a02540148a685b91c62eafca3ef65d9a628bfb59d3b69a93b27c7d3ac42bdc808c52b5b1eac9bf4466a1099df17cd3f5df0bbd5b5282ca8b904e
TLSH
T170D0247133D03CCFD7000433015043751C0540F300F5D3104C30D04C07CD055C143440
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
Size 33B
SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
MD5 f27314dd366903bbc6141eae524b0fde
SHA1 4714d4a11c53cf4258c3a0246b98e5f5a01fbc12
SHA512 07a0d529d9458de5e46385f2a9d77e0987567ba908b53ddb1f83d40d99a72e6b2e3586b9f79c2264a83422c4e7fc6559cac029a6f969f793f7407212bb3ecd51
MD5 SHA1 SHA512

Submit Download

f_000065

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
Size 26KB
SHA256 a6e15f50f687f773f8ebbb11ed5b8a15013ea1f3a49407e3991affd5c28ad00d
MD5 d97fa7f8d8ca68f6eb4390d0fe093e82
SHA1 db3da8cb3705329048505b8cde935d80d33bd85d
SHA512 6341fd5c328bbd5886e697ad74056a28965190a4ff12cebcee9a9b50bbf4792684f465e0c00bd6f48718ae0932be5ff5ba7dd10bb0edee3d03460a1fc1079fa6
SSDEEP 768:9P/v3kUOHExT9OWateaT1S6im0rDBq1i4jN:tvNOkxPUeM/Cq1i4p
TLSH
T1D8C2F111BB578FFE6E09B2D671BBC9C01F4588D2AA4CF10502B593A5D19EA8DB3D45C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 99aab82abaa5895e55b4bd8249760c61ad515438b920f6f52a96434da6616fd3
MD5 f2f35627c1f6c2c464ee9f4660ca54ed
SHA1 fe5ef331d2e66be9b1ae538ec6faa9b6295519c0
SHA512 31a13171ab6f68353252f1ebd7266d969f7027321ffdab64c1181bc15efbe57d9873c3cbecf591c97f0cb344d299cece7170e9cb729344ba57fa4896221c1903
TLSH
T1A47172CF87E21440FF463AB485DC3E8735B759CA4A8B7F823584C9F71803E94A55AC84
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 df0fe70cf7c02a29cbed992651573ee9798d090d6d1ca95ed537d4ad11e050fc
MD5 5083409608a93ded3df0426bb2c7e705
SHA1 4e1947b0a1d2271a57bbdea40bd9682e58f93d94
SHA512 725df849874b0225e6be11f24f7e49772f52cb49c64bc01ac88129401786bcf4bd3a1b7a2d39b435497d946f8b8c1e87ca9ebe1a3a1ba160af5fb542354e88c2
SSDEEP 96:tK04HFRfb/Pi4qc1Qf63fujPvninNS+nSZGO:tKHFRfby491Qf63fuG8T
TLSH
T11D9182CF4BE19640FF567A74829C7E4B317748CB4F8A7B827C40C9E72883A98995EC44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe596bb0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe596bb0.TMP
Size 2KB
SHA256 15a2ce5ef332cbea29e8695f4ebd644642904c92430f340f2b475d33b8b90fb1
MD5 7429e07c772e8ebe9228863dd9470cc2
SHA1 a466df37491a19d0c51980e89f383fb7c3d21bcb
SHA512 c49216e1d3cdfb9aa58ca4d8996e9d53092df8090fdd11129d3dd89b3ceb6c9467d44f6ba78f2cc99498bab1bef80ce32fb9a7c9015fd42673ff407a813fec28
TLSH
T1D45174CF87D25450F79A7A7481EC7E8B31B759C24A8BBFC12484C9B71807F048821C98
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 b30f2f3a9aeb22f3124dcf4e6082e152fc812c65934e1dc2d8c2dc9ce7bb6ad0
MD5 6f12abbf59afb8172dced9de2b0dd8e8
SHA1 1bdcb05d89069e7acf76c0c01d19e25b091813ef
SHA512 90531d5a175663c152a7621b52b3e94bce99146e034c73c263141b0e2b30428d2d82448ef5a7e69c07291d3d9f5082543bbd0ccd8f1c03cc409084f3ec69bc23
TLSH
T137519AF787F0996ECE2186F0BA0CAD2ACEAD4029471C796BC4D06E57A3E34B1D14255B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 fc97562603b580a6892a712073fbbfa33a90353e9ba1df1dd1f2389e8ab473f0
MD5 f5476f7dc6152090024cc39ebdd7c82f
SHA1 d1d76fabdd174223c0053d6ca13589213c19439a
SHA512 6e3ad4ef52f2778497e29f7961eb8415cbffcacadf943b8a8281f50e8e7744cec485a839fa31f57e184a121e2a5a4ee28246707331f6c23aace1b2b3a23534fa
TLSH
T11461AAF797F0996ECA2185F0BA0CAD2BCEAD4428471C792BC4D06E53A3E34B1D14265F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 d684cd454fe097507a4d9bd688987c14fb6df1d3e723ba5e2404a7bbfb3332fd
MD5 79a3d1c02af6b3fc8578121faf8acbf1
SHA1 95753accea8d6a0175647ef15ec17a5dfbd0ca6a
SHA512 d22ff57881496f7dc1734df4b9c2157e8e90983932f7fc8eab649ce8fe407c4af8ca78c9519b44bc1e6f6738d5d79b307cd141e8246c37ed8da6e47bc4548a90
SSDEEP 192:sxZxRKWD/fksXITIdpHzyHW6+WNejJ/Y36N5KDZIgrJ:sxZxPD/fksXIMTyHb0/Xmx9
TLSH
T18522B752AE38A97B8CC7D20DBA25BF53D6F9503291D41E48AAFCD61C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 afe9c58bd23e00adc6e64e3e1b9542c658fe11b82a68dd4a22c3c3504bc6ed11
MD5 55f4971f6c58fd29780b1cd079ff7e01
SHA1 15052e11f875f9e832c51da90144a1f6adbdffbd
SHA512 f911e760ac097d226e5d3adf43dd75cf23705b13bd5be4c3d10767d4cb66fdf4d3866f9f318386737cf207fb38f3d295a25c148962722c10535687d1d042cc25
SSDEEP 192:sxZxRKWD/fkscqTIdpxzyHW6+WNejJ/Y3675KDZIg5mJ:sxZxPD/fkscqMFyHb0/XAxk
TLSH
T1A322C856AE38A97B8CC7D20DBA25BF53E6F9503251D01E48AAFCD61C05E76DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8626fc376a4d0c360d15ecd6aa44c90816488005a4e7deed20c184095552f50d
MD5 748f146d9dfda65be415f333e8c52757
SHA1 b832775cfea2e065450881f61a783ced60838c0e
SHA512 495cef06ff92ca0fc8828080bb9478934b412bbb168c48ef76e457875a4ce35554b60b966257c6fe878f745f6d5a6647ec5a277e3b558e38c7cd72a1e1babde2
SSDEEP 192:sxZxRKWD/fkscITIdpHzyHW6+WNejJ/Y36N5KDZIg5EJ:sxZxPD/fkscIMTyHb0/Xmxm
TLSH
T18E22C716AE38A97B8CC7D20DBA25BF53D6F9503291D41E48AAFCD61C05E66DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8df083a332e9d3463a4e3d4a484c1405c30daa02b301ad8ca984fa2e40fbf63d
MD5 9a29441fe72f2e25a14265d3b3edbe91
SHA1 84f870b6a69df067e6c662c5e6b36ecc07dc1330
SHA512 43a258ce6544b5027daf6327351f9bba017125772ce32a95078722e138f14d016848a77faba88832928fe6c3a487a15b90dfad6c4c72b4037e07310c3a58c725
SSDEEP 192:sxZwRJWD/fkscqDbIdpxIHW6+WNeB+ZY36N5KDZIg5mJ:sxZw6D/fkscqwiHbhZXmxk
TLSH
T12122D856AE38697B8CC7D20DBA25BF53E2F9503251D11E48EAFC961C05EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 b8fa5a7531cf11f934a650dc359de84d393681a591ed100e8bf72f626db2c832
MD5 e1a146be4d911dde4b7c65d25e47532d
SHA1 889cfab93a4ab7d4ee04000db8d9b305ba8508e9
SHA512 21764c77092d5d60933ce77f449d57e582c34557d3ca1f6c22ca992b0bafc5bb6e4aeca537fadfcc7b741326dea714e9d6283726d7bba0ff6a9687fc21c8c8aa
SSDEEP 192:sxZwRJWD/fkscqbIdpxLHW6+WNeB+ZY36N5KDZIg5mJ:sxZw6D/fkscqEFHbhZXmxk
TLSH
T1CF22D852AE38697B8CC7D20EBA25BF53E2F9503251D11E48EAFC9A1C05E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 8f17e8c2a43959afc3dbff150266f3a9bc64ee02898c8f2698dcb495f8169a6b
MD5 85db729a969ea118fcd0521854e02af5
SHA1 a18c4b685575877f22687870725f40ff7a2ea104
SHA512 6c417a096b53ecd2133cc08d72924a9fcacfb9bc6b7875608228837ec0b0f93e5a405d5cd6f86d43ba1d5822b22d528be10e6c5b76acc7f99601ad4cdf13ca5b
SSDEEP 192:sxZxRJWD/fkscqTIdpxzyHW6+WNeB+ZY36N5KDZIg5mJ:sxZx6D/fkscqMFyHbhZXmxk
TLSH
T17622C756AE38A97B8CC7D20DBA25BF53E6F9503251D01E48EAFC961C05E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fb523fb8f300424eac174ef0c02cedafb3c67776de5b764aee47a06cb38f7366
MD5 55f4769696fd4b0200610fe3aa57362e
SHA1 2f1068fbf9982336b60e5111b6b7b493bf4a1f59
SHA512 be2005eafd7db61d51c789460957a831bd795b5e0b3f74be909e1d8696898904a092a78f3e6760ed5f3d9732f1f1dc447e0d18f814153e9bc9371e8bda73acc6
SSDEEP 192:sxZxRKWD/fkscqTIdpHzyHW6+WNejJ/Y36y5KDZIg5mJ:sxZxPD/fkscqMTyHb0/XXxk
TLSH
T12B22D756AE38A97B8CC7D20DBA25BF53E6F9503251D01E48AAFCD61C05E76DD230780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 d0193727d7f5011e9a732a9e1624802c27e1f7a69be31b1bb22ca220fd3437a0
MD5 b62c99a73c560535c5cc5800f228e192
SHA1 47394349666915f362f6fc4b30cb6b42daf2dae1
SHA512 695f337fafd325b60af7ce712effe8f09f0537cc01f5158d16387ec947c8fe3c37ac00d8e5184e6b57f080567f603c365ddd79ee734367bf987ab9b6c07488a6
SSDEEP 768:7DKlm7QWvUYe08F1+UoAYDCx9Tuqh0VfUC9xbog/OVh/LlpPs/Aro4x:7DKlm7QWvUYe0u1ja8/L/E/L4x
TLSH
T154C2FA3B640CCB7E4FC04A9DDC5A6F976EA802C7A6588D4047FA994C02C77EE91264DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 1KB
SHA256 b3ba2fad490bbc6a353533dea0dc00b4698a0038c83dedefbead688f0a28043b
MD5 6ad7b4bf191838932907cf263a48c011
SHA1 c8459a638b2df3162c2093ea1dbf243840834ab7
SHA512 3177fa335e86639621e1dd57f9c15fd3de9992f3a4ae723e56293094e367dfaabc56ba416601709943110c28b18820cb0cec1abe53d0e2a8760d4e0d189be62b
TLSH
T1CD21C353B4B65700283D150C9CD495B98A51735539AEE52A3F79405B8F3ED044CFEFCA
MD5 SHA1 SHA512 TLSH

Submit Download

eef207f5-8aff-4fe7-901b-cf6316e1685f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\eef207f5-8aff-4fe7-901b-cf6316e1685f.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 796c992d7066eb6dcd01d5c015972efb93e44cc7188c5b54bf317b7b5e00aa3f
MD5 be864bab6c9b16d90aef1cef8ca93b16
SHA1 9f47407e8720f16532b1237bb4b11d786ffef530
SHA512 0b3a655c636a9e2e934d2ca08755bfe68b18fb526c66af7a1ad8ba142751c567425171d7445db2e690e9c27b14c0e3bc944a9cdeaad2a21ec15d73083efd4aaf
SSDEEP 384:tZcIhsNcbJhWbM89h//RjNHDxPxuvzxV+MhdplPoC:1hnbUj/HHDxP4184plPJ
TLSH
T179827C31A878ACBB5DE7A241F84737138FB4C16797C85B9495ECAB2D01DA1A4131BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 77715df1a12659a45ab33b488a2f12b177fd5632e974011dac4dacda5a2d8046
MD5 fe5a7bb0b5edf07bf6bc43ebcb8233c3
SHA1 8624ca4d89b1abb9df56d269653fd23fb3c3b724
SHA512 bf0529ee79ff740bc80357c074f6cb1329f6bad604b29cdab0dbb15fb0e65c59c50809e5ea3767c28b95a0d715ee384e55dccf342063fd12729eb5e16145f843
SSDEEP 384:QEiFiZcIIzsNU8TUNTUlIl2JhWbM89h//Rj5HDxPxuvzxV+MhdplPoC:CFQ0lwgUbkj/fHDxP4184plPJ
TLSH
T158C218F258E7987AD9AE5743A77E3E028EBCC063B5845650B7D85A1CCC960BFC306C11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f3055d01467ec14196209bc6750441db9b8929f8054cfa095c84ffc4ac1e8a87
MD5 b657743097f46bfe340d25b9d5274071
SHA1 1c0cd06cfe4a0d8193f5f19008d2454e18632edc
SHA512 761e1c101a56d627a2bed142fb51746443dea548b232623eafe74f05f819766af89574e429cfef9f948735d203347a48ebc51615eda8b41d67fbe02485cd9be5
SSDEEP 96:KqONkWQsjpfbUmjH5ih/cIPURHl8h4otop5baDjBKP4v+Y1xf//ojduxfP7wFBCX:BONu6JUm0QmiUyI9so//F7+BC84U6
TLSH
T12E02F939AC786C7B8EF3AE45B04777239FA4117BA6911F44DAE86E1D01D715C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 0c0c00e14e471f870fd55cc86ed9e1a4de4e288ad12685d99fe67f07b25d593a
MD5 be5dfc23fd1e15ad8fee6c23210631c8
SHA1 03245b90c9989ad783b704890a135e5fb93bae22
SHA512 49184c71cfdc03b68565b6d831175fc8c9a1d7c509fea26771a2dee278f275017eec27e3c134ec98bc25ed027776b12732242728d340270d0c11290d53a61c64
SSDEEP 384:gZcIhsNc2JhWbM89h//RjNHDxPxuvzxV+MhdplPoC:ehabUj/HHDxP4184plPJ
TLSH
T1AE827C31A878ACBB5DE7A241F8473B139FB4C07797C85F9495ECAB1D01DA1A4131BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d3a7a54726be31cb864d891354a64f54bb3df550ff982cad7024d68478c1320
MD5 6f2a56090674024d6f4b23cf3ea537e7
SHA1 e19bcad6686aa8ea3f0127365d4b28a0bdf5d19a
SHA512 9d5f47e69174c96d4b63f42d86f36e03248971c2b4aee0f6cc17613dd0e77c9c4ff6c261da978200d2dddbc157628eac1f2e45659e2b7c632821e03d1e8c34b3
SSDEEP 192:BONF6JUtQmiUy+9fo//F7jfezrNxHS/OxPU6:BONF6+rbfo//RjaHDxPU6
TLSH
T1F5120A35A878AC3B5EE39954F44736139EA04267D7C96F94D9DC6B2C01DF19C130BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

098ccff5-0f82-4f79-bf7d-b354390fc74d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\098ccff5-0f82-4f79-bf7d-b354390fc74d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 0f7ae9936572270cf6d8888da06fd5d834dbb8fd3b90e492e7d95f3412f0d359
MD5 1a0f86cb25659554395591e5fbfc10d1
SHA1 d96be3d0d621800edf59f0de7fea66172c9b2c11
SHA512 c23edfdb0a3732253213a41aaa769397dfd083b9d2862bb87b5db05cc094dc7ecfbd3225f57cbe918d6328da87900ceac145edf9c3d911ca5bcdeb93a866c4fc
TLSH
T1FB410758BAF91148B3777E5A9BF7686D887FB8772E06D09E10110E4F0A23B008961B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download