hxxps://kawaiidragonquest[.]cfd/index51[.]php?flow_id=81&conversion=ZhfCM9vFZBw&bid=0[.]01&campaign=2558869&pubfeed=1280952&subid=1322571&country=mx&city=Benito+Juarez&os=Windows+10&browser=CHROME_153[.]0[.]0[.]0&carrier=Uninet&flow_k=f3635145d4

Resubmissions

22/09/2026, 16:09

260922-tl4staaa753

22/09/2026, 15:41

260922-s4wdqayajd3

Analysis

max time kernel
148s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/09/2026, 16:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://kawaiidragonquest.cfd/index51.php?flow_id=81&conversion=ZhfCM9vFZBw&bid=0.01&campaign=2558869&pubfeed=1280952&subid=1322571&country=mx&city=Benito+Juarez&os=Windows+10&browser=CHROME_153.0.0.0&carrier=Uninet&flow_k=f3635145d4
Sample260922-tl4staaa75

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2440	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134345669917747199"	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-338007942-693956180-937915117-1000\{4220D0B7-B5DB-4D4F-93F8-D00987845ECD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-338007942-693956180-937915117-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
132	msedge.exe
132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe
4240	msedge.exe

Suspicious use of WriteProcessMemory 43 IoCs

description	pid	Process	procid_target
PID 4240 wrote to memory of 2508	4240	msedge.exe	81
PID 4240 wrote to memory of 2440	4240	msedge.exe	83
PID 4240 wrote to memory of 436	4240	msedge.exe	84
PID 4240 wrote to memory of 436	4240	msedge.exe	84
PID 4240 wrote to memory of 4656	4240	msedge.exe	82
PID 4240 wrote to memory of 4656	4240	msedge.exe	82
PID 4240 wrote to memory of 4656	4240	msedge.exe	82
PID 4240 wrote to memory of 3848	4240	msedge.exe	86
PID 4240 wrote to memory of 3848	4240	msedge.exe	86
PID 4240 wrote to memory of 3848	4240	msedge.exe	86
PID 4240 wrote to memory of 720	4240	msedge.exe	85
PID 4240 wrote to memory of 720	4240	msedge.exe	85
PID 4240 wrote to memory of 720	4240	msedge.exe	85
PID 4240 wrote to memory of 2468	4240	msedge.exe	88
PID 4240 wrote to memory of 4952	4240	msedge.exe	89
PID 4240 wrote to memory of 2468	4240	msedge.exe	88
PID 4240 wrote to memory of 2468	4240	msedge.exe	88
PID 4240 wrote to memory of 4952	4240	msedge.exe	89
PID 4240 wrote to memory of 4952	4240	msedge.exe	89
PID 4240 wrote to memory of 2604	4240	msedge.exe	90
PID 4240 wrote to memory of 2604	4240	msedge.exe	90
PID 4240 wrote to memory of 2604	4240	msedge.exe	90
PID 4240 wrote to memory of 1212	4240	msedge.exe	91
PID 4240 wrote to memory of 1212	4240	msedge.exe	91
PID 4240 wrote to memory of 1212	4240	msedge.exe	91
PID 4240 wrote to memory of 1120	4240	msedge.exe	93
PID 4240 wrote to memory of 1120	4240	msedge.exe	93
PID 4240 wrote to memory of 1120	4240	msedge.exe	93
PID 4240 wrote to memory of 5548	4240	msedge.exe	95
PID 4240 wrote to memory of 5528	4240	msedge.exe	96
PID 4240 wrote to memory of 5548	4240	msedge.exe	95
PID 4240 wrote to memory of 5528	4240	msedge.exe	96
PID 4240 wrote to memory of 3436	4240	msedge.exe	98
PID 4240 wrote to memory of 5112	4240	msedge.exe	99
PID 5112 wrote to memory of 132	5112	msedge.exe	100
PID 4240 wrote to memory of 6044	4240	msedge.exe	101
PID 4240 wrote to memory of 6044	4240	msedge.exe	101
PID 4240 wrote to memory of 1180	4240	msedge.exe	102
PID 4240 wrote to memory of 3108	4240	msedge.exe	103
PID 4240 wrote to memory of 3616	4240	msedge.exe	104
PID 4240 wrote to memory of 4676	4240	msedge.exe	105
PID 4240 wrote to memory of 4676	4240	msedge.exe	105
PID 4240 wrote to memory of 132	4240	msedge.exe	107

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://kawaiidragonquest.cfd/index51.php?flow_id=81&conversion=ZhfCM9vFZBw&bid=0.01&campaign=2558869&pubfeed=1280952&subid=1322571&country=mx&city=Benito+Juarez&os=Windows+10&browser=CHROME_153.0.0.0&carrier=Uninet&flow_k=f3635145d4
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffc7198c188,0x7ffc7198c194,0x7ffc7198c1a0
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1572,i,7839497442451223894,18378789386641628120,262144 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,7417420507669439100,15269005676634243551,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=2588 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,15701766371832212027,12128730947140124598,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:13
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3376,i,16422076508582806940,7376253256227113160,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3380,i,2629162693690197216,14550684580318237738,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=3456 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4180,i,16780948793673933456,12141157560718026922,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4200,i,4069938001244451386,3690397367676981256,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:9
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4304,i,6883907483469999628,11868118444317666445,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4324,i,11636822548218641223,16512676893529469874,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:9
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5328,i,14453348491949073271,15545179452311405278,2097152 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,8147108200539519163,3766089681582631094,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,7032577442099882026,9563063580844794775,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
  2⤵
  PID:5528
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,486217793189791387,7941487970554366046,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:2016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6000,i,486217793189791387,7941487970554366046,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6256,i,13350041778683708226,6722857186531407405,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:5112
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6636,i,1688810243774016636,11303652528790764500,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:14
  2⤵
  PID:6044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4764,i,16493324862687070281,16777706741233251920,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:14
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4856,i,4062445820078400439,18263033096019595079,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:14
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4824,i,11344443892554530173,10011291992231658545,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:14
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,9033407202974384225,2731880816916258672,524288 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:14
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6624,i,6348866369805065650,2953654572356829935,262144 --field-trial-handle=2252,i,12322206695660280350,7655604653089584779,262144 --variations-seed-version --mojo-platform-channel-handle=6608 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3096

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 b2d86bb9635e04c694403b46b456ec83da9c370d96a21b15fedba9be06b8e402
MD5 4e53b8aef808dccc6661e3fb447c2054
SHA1 acccfaf681928a627e8dfa4800d80e4660d2ef04
SHA512 13032d466f22156730bff2ac4de38d89c66d27f0adbccfa995aadd43d09216e0aded976b46c0418706370333080baf61ca1adc51bd2e043c578c3b251ad07d2d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P74:fwUQC5VwBIiElEd2K57P74
TLSH
T195B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 635a17b62bc802a1d6d2ac977e63b5a2027aa2bf3d1b5551e63352afa4362fd9
MD5 7fe12d00d13e30949f1419fc02757c7e
SHA1 7fe9042bd95f9f143a17aee8b65dd97f8f4eb44e
SHA512 c9251c530a2927beaa3f58a69cd075267ab37b951ce23f2f159ff17f194ed9b03a08d41f5cce2d4dd1a091898135db5440df49406cc67c2f8fa1bd50c44edd4e
TLSH
T1B1D011A2FB32008CE0802238A23B2B282E00820000C30000AA2000AEAC882A2AABE028
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2aa0ef8543982e42f2141a859cd78cf0f780a6b139ea99c1c2ad33fd4f56cb7b
MD5 cf1ef0f6a6585003596ad6b09c83cbc3
SHA1 80edf8da49bc458828bf3125b8b4aa3036814e22
SHA512 0c23492cf0d4ab37f4a7f42f865cc6238ff5b3cdabf212ce523b204513d6aa133d66ec3e381caf548455fba3f37294ba5fdf00ad1dbaac1945115047c226530d
TLSH
T198D012A1FB31008CE4801134613A1B281D00810000C301015510009D4C441D2657D024
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 0f7a81182d7f17511715d11c99b139c71aae0da74090156d392c04296bcb07e3
MD5 c990d81165a6aaeb4f040cd3d96d9a37
SHA1 03dd9b7fa760dd10d559f4d83f411921eb1b3f15
SHA512 a19cd8a6a64f34fe6be1ceed16a346f55d7c24fa95d31ba8f07134047ad98fc241c0b783f07bc3fbd16c5ef8746bd7dfcd0b1ade632271b475db89b66974754f
TLSH
T10361C8874150A0D1FFED99B89FF5646B3B38A48437A33E5F85F4C0785A2AB74718C860
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ca7f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58ca7f.TMP
Size 3KB
SHA256 c9a080e5221d2b30c907ab5e8faca60e71002b64d303e4db204e17f0053e3a25
MD5 b68d3cafb09c3dad73ccb695e53a1a21
SHA1 6ab9e83e2038edb6c1d511d68fdf5b0def7e9e70
SHA512 8618aff0382c7f8647e5037bf89429a2f803a2263d602f0b17e0f3d8649b9ee685165df0c638739b63d26e434489695091482999821bdcc2ae34fe8f3f948754
TLSH
T18651C6874150A0E1EFED99B88FF5606B3B38A48437A73D5F81F8C0785A2AB786188460
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\p\Paths\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f4cd9c8992d63b736b0e1fbc1903f0ec2ff24fcdecb5313a80b4b7b8a2f68865
MD5 fcc6a790cbc1fc0578b3d96834423c81
SHA1 74d2e9f89ed16cb77a51f8df1f285003c17b2398
SHA512 860eb39034b08d12fd2d33564d628c4e08241e635d823020b7e3d8459bed65e014144a12e6ef0b0cc7208725a192addef52cc49a81474524dadc7ed339bffaf5
TLSH
T1BB41CCF783E5897DDA1256F09A00AE1BCF5C0516426C3C1A89D4AF17A3F3471E102A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 1f378f90a5c3ac34c516b03d24914459ec4d1e9b265072391fc7b5941fdf33ee
MD5 9a4eb61aed8caad4e820fcdf72c3bc9a
SHA1 59fbabba29fa313a6d9be22c01102de84bee6d11
SHA512 72c74d6634e8d588171e20928fb83f7682352357eca8f1558227b5c78f0d0ba083a619a1f96720feac80c9409abab0e31717c34e9f209c13ec6a8d1289249295
SSDEEP 192:sxZ8mRnbx/fWsHXifIdpw02/W6+WNpuM7/Y0HbcnnIgrJ:sxZn1x/fWsHns/bX/5wn9
TLSH
T13A32C852AD34693B8CC7D219BB15BF13E2F9503291D05E98EAFC8A1C05EA6DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 9cc38617dd261ebed11849237dbcd13f4f4d017524edb8e70ea52d36de054db9
MD5 684138dabd3b312725fd17ca7424d3c6
SHA1 ed41bf319bab6027f84eca8d5cbe2fef66726c3b
SHA512 e7247cfb7afe58ae880a16c7e0bc6dd31b43d4a840ef58dab8b6165730629a7059da578d9b94c800db2a1d8850bc46eaa27bdd3f9199f3e20d1e18091c71d4f2
SSDEEP 192:sxZ8mRnbx/fWsmXifIdpw02/W6+WNpuM7/Y0HhcnnIg5CJ:sxZn1x/fWsmns/bX/5mno
TLSH
T14F32C856AD34693B8CC7D219BB15BF13E2F9507291D05E98EAFC8A1C09EA7DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 16faba4c150a29b5a1c02b789ee271a070817a6e715ce9624a8675fc06a7de48
MD5 0c508c72fe5cf1447065ebb8746f7328
SHA1 d5d6d19ba648d3552d3b7c72106367a5a62e3ba3
SHA512 babef3e8b762453eddb9f5bdf64333cf3a57a58813c53c26e7da2474a9d840392c3e3dbe90365a89d2b99fd5db9cbe33c4c1588b394403000fe835fcbf8a4741
SSDEEP 192:sxZ8mRnbx/fWsWXifIdpw02/W6+WNpuM7/Y0HOcnnIg5oJ:sxZn1x/fWsWns/bX/53nS
TLSH
T1E032C756AD38693B9CC7E619BA15BF13E2F9503291D01E98E7FCCA1C05EA6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 5caa2427a3ef374af56b1cb3d7e5c2d8380114c2e18499a74df2ce3c4722c46b
MD5 1e3879023a8dbc8204ac9e432842a22d
SHA1 67816f62b65bc795242e4a70eae502219c67e6fc
SHA512 9b926ba973f0c47f7f1eb3380e3d14e651d9b32ec559812bef59676970db8e377200be293ad32d667d53f93ccae48f5d43ba888c177f496a6c2272dc750dd13c
SSDEEP 768:aLY2I87M23TWRmjdQVx8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3NyLl/cu0yw5ro9O:aLY2I87M23TWRmjdQVxu1jaKNyLpc3y2
TLSH
T163D2F93B340CCB7E4FC11EADDD5A6F976A9802C7A6688D4047FA894C02C77EE51264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 192fecfb7fe3cc133cf92500176515f20d11c9fbbebea93f5553600c855f92ad
MD5 837dce7e4a8e8142c509e803abe6e5cf
SHA1 7a039e3311f6bc845c3b1cc226400f6b731e0e97
SHA512 0a4f4df8b7ec14b0c018cf9badce28242d9342375743811baa1f34e36d9994030eab1062b052ae82b8e5c6bfd893adfef5762dc541e6418c51bce4425aeb636b
TLSH
T113A002210D588471C4420270D5B30AD423218C282A0AB35550A80564DC51255492353C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cba8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58cba8.TMP
Size 48B
SHA256 eb3bc81ce82040789240e15c8951e1128c7c4a3cb82246391a13a7aa1b98de05
MD5 a4c839bdaf98259d606fa7c4c361880b
SHA1 6a88e2cac10df1d295e4c1746acd5c6892c85a3a
SHA512 50e61b13ad5993d241070e7f1a3d2e4821fc00b3cedd578c2c04e1bb30336f4bb9c97b94604f2a8cb2c8b8db5d5802f8c901e1f505bc6431a2e46a528c271acb
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 670d4f398bfa65ac4d2ed11c6feedf60047462c9d9c317854beb9933f59e579f
MD5 da1eb79d8d2b8eac20fae7735f0fc4bf
SHA1 70fe05116004605694cb920b08beed1e46ba0985
SHA512 73212509a0adb18b6e03c3f45c7e5722344dfe40b047390369ee9dd94dc9463aee373340b772e40e597ccb3a176d7c01fcedb49297a9726bdaade7ed16f40b47
SSDEEP 24:Kyc30E+IZK0h81CSRazyXlWBeAsIJKahQ1qSLctyXDs/UYmIFK8h41eS5iuAjq:KApIZKi8k1ydfIJKMQUTylJIFKK4QY
TLSH
T14A91F14431BB128639FD250980B8A72F528232B3705CFA6B7FBD95618D76E040DFE5CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fb6fc77d-630f-4a51-8e12-11ef817ab4b3.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fb6fc77d-630f-4a51-8e12-11ef817ab4b3.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 5fc1d18b659dfbc463da67a62f5eeabc3d4e2ac5d6b09cf0b36d71771605a198
MD5 659f8c033234b0fc6ee677c1a7d7f351
SHA1 fb1eaf228154fd657648bea1f44e064e5ab533a5
SHA512 87bd78b1e02357f4463fe22592b335297337acc2eabbd0ed96e2b21eab0393c5b49ed8bb849aaebaf92ad094d49f879c867518cba57465f384abd6a4cf48d610
SSDEEP 384:MZcIk8NfK5r12R9ckX5mV8FqkGqxuvzxV+MhdpEG+or:akq8sAQqdq4184pE90
TLSH
T1AB826C72AC786C7A5DF6A545F84736078EB8D027D7886F80D5EC9F2D01DD3A9230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 eafaef63a76f5d2e59f4a613424bd8f0ea939757dabe754fc677455cb8d257c2
MD5 0f80926c2db614b7409705d65f04fd6d
SHA1 bc2e20ef3a1c8296a7c4553698ed057b54de0479
SHA512 8aa63b8fcfaa4c98c1d140a10c809d53f38b3d8252e88bbfe48e993d3d6439dcbb33030c7a9f503280a9e43b8c1de8537569a31c5972ada809df3385abf3c5e0
SSDEEP 384:CiFzZcIA8NB8TUNTUlIlF5r1apR9ckX5mV8FqkRqxuvzxV+MhdpEG+or:JFrAAwg+p8sAQqQq4184pE90
TLSH
T125C219F258E7987AD8AE5743A77D2D038DBCC053B5845A50B3D84A1DCC9A2BFD306C15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e3a34efd053f71aa9b98a0aa23bf8bb9bfd7ef46a61080c292d4802df1629ae9
MD5 23f5231461e0522cffc6bc43f6d4cd60
SHA1 8976632de9ebf16cce7f6a0ea5403b62d8581bd7
SHA512 a93bdf11b40f7883b5beba6b8ea9f7b7cbe6ef17f835dc1abddd34cd2c9ed26871a4832703e65fa0be7c818c72624d179fea8f78c3fd0655ccf0888b6255f244
SSDEEP 384:FZcIk8NfO5r12R9ckX5mV8FqkGqxuvzxV+MhdpEG+or:9ku8sAQqdq4184pE90
TLSH
T163825C72AC796CB65CF6A545F84636078EB8D017D7886F80D5EC9F2D01DD3A9230AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fcc55ba38b2c0da0264022b208b20648761274d14bbc1b88ae0a757f7ab53c36
MD5 ed7329edef9c25d9cf006ec4bb2760c9
SHA1 f9c9cc7f4a68bb0be8ad60ee0d43af614636b776
SHA512 1ca26ddc37f326c12beaf1ffdcfed9d85f9970254e15708b8c75029dc529c485a350d109ab04d7d7c274cce7e23bf3586a4f262c03ec0bc6ba71a2d2753ecb3d
SSDEEP 192:AGNF6WLkQmiUyJm1LEbnckX5m9r8FjmPs4lDSqU6:AGNF6a0CMLQckX5mV8F22qU6
TLSH
T14602D839B8787C7B9EF3AD49B54727175ED4112BEA852F84DAE80E2D00D729C2307823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e328d1068de78c8d1725ada062e9c3b5934347212e903eb66f527e8455d9e918
MD5 78108389d8f06a899a1ff577293ad00d
SHA1 484109535826ea1a78e943eddc407c28ec06f551
SHA512 7258d0feb168ad4d3bef8e01cb2cc4456f05afc62e6325d730b7c01776d7119954ef184a2740e6fccc6a003267cb4aa8d9a0440af51b501618a35769eb8bb6c4
SSDEEP 384:GZcIk8NfF5r12R9ckX5mV8FqkGqxuvzxV+MhdpEG+or:Uk38sAQqdq4184pE90
TLSH
T160825C72AC786CB65CF6A545F84636078EB8D017D7886F80D5EC9F2D01DE7A9230BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fa4be1555636284bc82d9bc5a6a4324c2f8a4a3ba65866449dc4ddc41914b520
MD5 9bb32e015a4f425d90cdd41a159a4458
SHA1 76f7c073ee5d1778d38c210039f5fd84c5c57bd8
SHA512 7d28402b2da065f144e9dce6f0cbedb9d1acc0a1a93558e1a09772fae336f9390d904a0e52af22737acbac90f4e19b9107ef48478d7a7b813100dd4aa312c86b
SSDEEP 192:AGNq6WLtQmiUyL1jEbnckX5m9r8FjmP5kGMeH/CU6:AGNq6ar+jQckX5mV8FqkYqU6
TLSH
T1E212FA36B878BC7B1DE3A854F48736175DA55117DB847B84D5DC1E2D01EE2AC230B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2919ac23-90cb-4126-84e0-f8cd6a5a1a73.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\2919ac23-90cb-4126-84e0-f8cd6a5a1a73.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download