89b2c94620b27a6eddc84312da16a94fbe4871c6e20b2fbfb12a3899f8ea9337

Analysis

max time kernel
898s
max time network
742s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
23/09/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Re comprobante.duplicado.Tutela-Cierre-Decomiso.xhtml
Size 7.4MB
Sample260923-rybxfswt6p
SHA256 89b2c94620b27a6eddc84312da16a94fbe4871c6e20b2fbfb12a3899f8ea9337
MD5 280795a5a6b56c8a3a6c7753ff008e38
SHA1 2bbc4835baf6537777525914c74b92dfda0dfa30
SHA512 b9d897049d0ab81aa2e75246d8029bd22c5ed20fe549db81a010150321dbd0ec7aa08af90e1be63c40def943cde31f05d469189d11c6a1193aa9926cdfa2ef69
SSDEEP 24576:km1LWdVHNjC7nvSUVsTe8XprmzsO4cOwuB+nZZGpt0eAXVBhO5GeUTRWwDFpIQc4:de9M7K7Gh
TLSH
T11476BEBDAA6C2D592A3E876FCE53ACD807D72D12599B94C8C0697BC30023779FD43816
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
5800	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134346477627789862"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1262770251-41185387-1005173349-1000\{F0ECD73A-953E-4E59-B7FB-FC86239BE24F}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1262770251-41185387-1005173349-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3792	msedge.exe
3792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe
5708	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 5708 wrote to memory of 672	5708	msedge.exe	88
PID 5708 wrote to memory of 5720	5708	msedge.exe	89
PID 5708 wrote to memory of 5800	5708	msedge.exe	90
PID 5708 wrote to memory of 5720	5708	msedge.exe	89
PID 5708 wrote to memory of 5720	5708	msedge.exe	89
PID 5708 wrote to memory of 2560	5708	msedge.exe	91
PID 5708 wrote to memory of 2560	5708	msedge.exe	91
PID 5708 wrote to memory of 2904	5708	msedge.exe	93
PID 5708 wrote to memory of 5536	5708	msedge.exe	94
PID 5708 wrote to memory of 5536	5708	msedge.exe	94
PID 5708 wrote to memory of 5536	5708	msedge.exe	94
PID 5708 wrote to memory of 2904	5708	msedge.exe	93
PID 5708 wrote to memory of 2904	5708	msedge.exe	93
PID 5708 wrote to memory of 5992	5708	msedge.exe	95
PID 5708 wrote to memory of 5992	5708	msedge.exe	95
PID 5708 wrote to memory of 5992	5708	msedge.exe	95
PID 5708 wrote to memory of 2976	5708	msedge.exe	96
PID 5708 wrote to memory of 2976	5708	msedge.exe	96
PID 5708 wrote to memory of 2976	5708	msedge.exe	96
PID 5708 wrote to memory of 4424	5708	msedge.exe	98
PID 5708 wrote to memory of 4424	5708	msedge.exe	98
PID 5708 wrote to memory of 5448	5708	msedge.exe	99
PID 5708 wrote to memory of 5448	5708	msedge.exe	99
PID 5708 wrote to memory of 4212	5708	msedge.exe	101
PID 5708 wrote to memory of 2096	5708	msedge.exe	106
PID 5708 wrote to memory of 1308	5708	msedge.exe	107
PID 5708 wrote to memory of 5396	5708	msedge.exe	108
PID 5708 wrote to memory of 3452	5708	msedge.exe	109
PID 5708 wrote to memory of 3452	5708	msedge.exe	109
PID 5708 wrote to memory of 3792	5708	msedge.exe	111
PID 5708 wrote to memory of 4428	5708	msedge.exe	112
PID 5708 wrote to memory of 4428	5708	msedge.exe	112
PID 5708 wrote to memory of 3372	5708	msedge.exe	113
PID 5708 wrote to memory of 3372	5708	msedge.exe	113
PID 5708 wrote to memory of 1340	5708	msedge.exe	114
PID 5708 wrote to memory of 1340	5708	msedge.exe	114
PID 5708 wrote to memory of 2936	5708	msedge.exe	115
PID 5708 wrote to memory of 2936	5708	msedge.exe	115
PID 5708 wrote to memory of 4132	5708	msedge.exe	122
PID 5708 wrote to memory of 4132	5708	msedge.exe	122

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\Re comprobante.duplicado.Tutela-Cierre-Decomiso.xhtml
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffb937ec188,0x7ffb937ec194,0x7ffb937ec1a0
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,13135693971249079122,15145307424977115252,262144 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=2836 /prefetch:2
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1664,i,6494770975645717438,12562917928025156418,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=2896 /prefetch:11
  2⤵
  - System Time Discovery
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2328,i,12189366569142149,15464055498338709533,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:13
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,3205018699525982097,15047995540336101149,2097152 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,8284962245957259302,4423829722627559668,2097152 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=1700,i,3365328683627972041,7650487453795410816,2097152 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
  2⤵
  PID:5992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4356,i,2692188582262695400,10643068075528119011,2097152 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:9
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3860,i,10036741354666582531,6277275824790430525,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,14668680999106973590,3730059594655522823,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
  2⤵
  PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,16732311244088369024,5238093888907747279,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:2816
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6148,i,16732311244088369024,5238093888907747279,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=6164 /prefetch:14
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,6070789089081323702,16684244297849625462,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,6515610941310127358,420796200128336124,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:14
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,8115589992183476936,10867186290307130101,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:14
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,11353217451397969607,17472645508284723606,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:14
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5496,i,1383802622793710657,1793834553764021878,262144 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,15615609198290744242,5831060567406897029,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:14
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,17809374761461446745,7715450006316954359,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:14
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,12738254639210142828,7020535100826589021,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:14
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,12951347132975158890,15600994124021542575,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:14
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5560,i,9783938512937795519,18379102974859830218,524288 --field-trial-handle=2840,i,7237208909028165737,8898764547103719538,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:14
  2⤵
  PID:4132

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4412

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2668

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4880

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:1692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e1837ee53009f9b691f7aee3be45ffb945d4894bf04ccaf875b9947114bb5224
MD5 58ba31abb4a3fd3bbc9aadea4fc9ca13
SHA1 d79c4b2ccee6dadb45162ea34fb988911510f0b8
SHA512 0c096d7f5d364e0911d26f4bc2ea03e3d81b2026be5182b04fc17e7949640761db8056138b55b28aa9abe884d601d2cf6b1be9e992fd3565c35c69def459d32a
TLSH
T1F3D02B3579ACD772C18C503A405901112A95F001FD46C1801953B10848913400006295
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 0a1e646beadfff70af6a1dc73b6baa41188262ddbb2b7781270d4e94c92c02be
MD5 893220bb58a1416480d52375128fa19a
SHA1 3a577208211e9133f3744d9ba695501b0481ca9b
SHA512 b3f0e3d85398f7aa7fcea74cd44fd2709c0265d9072771dccfe7508832bc1173f452a0f49028e8bd62ea434676abcdf4a111c8e31f121871fbdfa4acf207b131
TLSH
T1C2D02B3179BCD772C18C503E405A01112A85F001FD46C1801A53F10848913400005281
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 3efc1d5376b95832ec1c947c92ee1c025894f99ab40f5439d0dbe32e03040fec
MD5 9ec833cdf2954c2e6d08a2227788dcfb
SHA1 f1e6818959a5be9766ee9d741ebfc0ef34fd9230
SHA512 67d50e1d332957303276e4158f2ed59133c9cc0b6cf7417fe86e8cf122cab0087bb642667dffb2379346a214a7a17cf7cb4885652866b34796e6967f7599d83c
TLSH
T1DCE020D905CCC26F515C7447415C5F0C81BA370E92CD6ED517088ECCB40248463D3551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 8e7ee428a3626773d9a2b3cd8f8bddf223aeeb102834b89deefc35d5a43fa79b
MD5 7c08f948693a068b8ddcaf7c432b07d8
SHA1 81ed3072c96d8062a56f0bba12feedd1e815402b
SHA512 88accb68ee6113606d211f025cb4bca85e50e8f2ff221f8412abd75c3bd1458bd8940a1dd0ab6ab9d9aa6b1d884c5ddc924eb0bf453d32313c0a7007cb2ae5a5
TLSH
T169E0209804C5D31F51D06E47825C570CC292370FA3CCAA091B0C8C85B0019A1A2C1555
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 64995bc86d56344ab158572de2934b4414c9a0a0e5c8567dff6658580624eeea
MD5 76cbedfefca73abb8e4fa09b80f6bb98
SHA1 fcc71c4aa349cfd27e43f3c87c1ffa85abd2828f
SHA512 2ee6ddac20d64ae9338f99db19488d259a55e95fe156bf8c079f3df222e2550e4c05b48f43d19e009334adbfa423a86490a657f80b98786504e1f6f16eccc593
TLSH
T1C9E07D8905C8CBAFA2F2768B416E5B0CDAA1371FF3CDBA0A170884E470418C0B7C3A91
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bfdf4d025c48c613af4d8b5b42d7df238aa735ae24f6b2cb5b4f4ae384aca6bc
MD5 c49e0d21893589500ec42a882048a896
SHA1 4f5641836a0f4f932dd085bee84aed5b36f0578c
SHA512 f39e872dee3bf85f2488524318e28e508943c7b2c241fd1c043c2552c91a94403e8147232b8ca6c0b61dfd9ddf53a20d62d88fb01111852e2f4d14b34e383337
TLSH
T105719721A660474EF3ADFEB466C539893E72874CCEE35F90BE56C1B4A98731583C642C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c48e.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59c48e.TMP
Size 3KB
SHA256 b09da58cfc705e0026bbd38028ecff7db2eed2438bf8416b90c9b937d3f5f2ce
MD5 bb8132c001a25c0891aa5f07377b6c2b
SHA1 528637c0cead194b3dbef89217371b9d7578ff9a
SHA512 ec793629cff948fb024ad5c170ee2636c91c02060eff12f95ad4281f021e1cda3a699fb197a1875985694ad51c1c6114b687d3a10a5a2d4c5100d8de252af3fc
TLSH
T15371B821A620474EF3ADFEB466C539893E72874CCEE31F80BE56C1B4A98731583C642C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 8aeea8c33bdc837867b53741fea54541ee6119470b3b8f1d20f628ff7adb976e
MD5 43a2233f44da65c46abd1d56f6521e01
SHA1 01b8834556fc0b8d7e454079513acd6bb5d61547
SHA512 5260120071ac4dae890a27f48e746fa50b77d0839431cdb55503c51faa040effcbfdb4f5a49a76e14beb5004ef582a7afb873a245f0733cd4f2201663559e91b
TLSH
T163419EF3C7E8867D891156F4AB182E1BCE1D0915432C3D56C4E49E2F93E24B1E14199E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 407e402bccae66e67e91e9f092b289985cdb9fbd300d4195ef2209a2f2f43026
MD5 35bc656c920590ca746d479df664a515
SHA1 61c75bea5d40f78abe1b433295b0eb84f8655a95
SHA512 6b89fc7c30abc7ecd0597233c667d667622d0cd37beba80c89b92eba51195cbff6ade345dc9b7c8ace2647361f4a592e69210dc6f78f8c9412b56cf0b5c3e765
TLSH
T1313180F7C3E8967D891196F4AB182F1FCE2D0915932C3D56C8E49E2F93E24B1E14099E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 eee0e406bc6ee673cab7ecedcfa0e410a999d0dab5337f2d1904fa91cfecf2cc
MD5 1e46695957ea5e406d411ae719db8acd
SHA1 c2da9f06cacf5f73e9cc0dd0b286c78d7bbf2410
SHA512 6b908fd8d26f2bbfa0dc801e72a5e4653f86aa7ec1f843a3f953b32206396b3373fa0b266225d5f0f10f484e5e91583200f6a7db20af9b7d2c939a7530285cfe
SSDEEP 192:sxRQmb1/fbsHqmBnzoA8p42/g6+WNIYdq8Gv8IgIJ:sxRQ41/fbsHHBOD/5IOs
TLSH
T1D7329515AD28A93B4CCBE21DBB657F53E2F9503261A55F48F6FC861C04EB6DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 f87907dde2e3169c7920473a57501282d7ad05d72a060fc77410edaf27b04779
MD5 41f3b62fd53d1cd29d2416e68b7b26cf
SHA1 a2b5748a81ac47f9c1a8120112df44c1241df79b
SHA512 0db03c85f1fadab45c8f2d7605d27955024ddd53fb06dd7537096a81d030ee5290e06b8548af1513b73f2052eb423e0125644cbcd9fac2284000ea80a1365289
SSDEEP 192:sxRzmb1/fbsLqmBnzoA8p42/g6+WNIYdq8Gv8IgDKJ:sxRz41/fbsLHBOD/5IOa
TLSH
T1E032A515AD28A93B4CCBE21DBB657F53E2F91032A1A51F48F6FC861C04EA6DD120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 67b02d4f1352b1a4e9f6a2693a857d91d34d4c3182883a1962d341f9f2c0cd30
MD5 0ff3ed21d2537d878724ae7ad80355e9
SHA1 1d9c82c1f532ff21bc03cd70a977842cf79a63ac
SHA512 0b4e3ab3b92fecfae7f39667d2826d9e3ee3fdcfe671e41caf2060597b0ea0c5ab2ce95b38f74acb54dee15f7a3633e4c0bdb5c97fec494eadd503aee92b7308
SSDEEP 192:sxRzmb1/fbsAqmBnzoA8p42/g6+WNIYdd8Gv8IgDwJ:sxRz41/fbsAHBOD/5IfY
TLSH
T18232B615AD28A93B9CCBE21DBB657F53E2F9503261D51F48B6FC8A1C04EB6DE120740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 f3e2ab4fd3ec8a61d7d06030ddca3762c3828e90a92636caf4b7368c42c27a89
MD5 14b0258f8841da0ec6bf6a8622bdd678
SHA1 92b57ec17e102628e1f11ffa18e647cc813d84d2
SHA512 736d8f4d901690ceb707857ef38437d1f42a0a7feff8826d705baea4b8d36a0ae07ecae6b055c7b7d7473ee172bb03705246938f5707fa0d564266ec96b4f40f
SSDEEP 384:qYe+z1ifCtgUGFf8SKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV269GGRLrroKrH:qF+z1oWgU6f8S8F1+UoAYDCx9Tuqh0Vu
TLSH
T159B2FA2B604CCB7E4FC01A9D9C196FDB6DA802C796588D4047FED94C03C77EAA21A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d5c12854-6461-4b87-8aa7-b2954fe0181a\index-dir\temp-index
Size 384B
SHA256 039ccd8751036cee141b2dd9656d1b6e325b303c7a048c33b93169ce712c2033
MD5 85d8a83c5918e137d5efa107031afc8c
SHA1 7d2a22b0d6355173e298bf2db8792daf072ffb5b
SHA512 5eed53d285dfc242c0917270e7d9a6daf02d6c695f57580a4c6b8543be2258734d5df1fa81924e42e32d4874ae7bb9685de5c205d95d13aad80067de3f884773
TLSH
T192E0C28DBD02C249FC68A1B1247520A56A7225ECC6059A0F94EED1598C806E4BA46B2C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e04d0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d5c12854-6461-4b87-8aa7-b2954fe0181a\index-dir\the-real-index~RFe5e04d0.TMP
Size 384B
SHA256 9e6dc25aff9b011c9b9b981d95e53eeb6067fccc33a2946ba97476dc1cc3dc69
MD5 5f66d2588817aad97daeed85235473bf
SHA1 8b2327864c3ab592e46e606516deacdb7e5f2aa9
SHA512 bb570ff95c8333f4091c17d0f24bcc97a5f89bf24895d42c2e8d3f0bd08b220a502938470397c9dda586e3854e841bc7b020e946465e32c61f8b3a9c463611dd
TLSH
T16FE02B4CAE12C356FC5CB5B128A5306567712008E208271F91EF901ACCD1A98BB43B5D
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 189f583d2dd93c2936725371192507dca25b5f0c620fb45b9cbfe49f6f3d86e4
MD5 84de79f001cac7c3c3c55fd1edcadcc3
SHA1 93cb6bc07d21b8a398533db5c98db4f5dc352385
SHA512 05eccc257bc1fb4506acb9d1c4c9bfd019ad93ac90a7bf4ab0b4afed3588d289d9f6b2a95bafd17d2eef7bc281c7db51756398a99c52627e0f013e7329154593
TLSH
T14AE0C0BF2DFB2414EDBF8BEA5471419500403864C905ED6F001AB3D360B23003C96C71
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 616893ed75ff8a82e68794c8b9f44b2e3dcd7a9810f7bce6f1b1aa9a37677bc4
MD5 7d510966b869a0ac427464f3e81da2a5
SHA1 f68fc29122cadb23a1ab765a501a17bd2121399f
SHA512 84f0a890676d666bdf05e1e15bf6afc6dfe313b2144cab29245a39a4daff2662560d0cdd928d11583afe4a7af141d914f0ce2c6608a13940308a5c7ec688c884
SSDEEP 768:n53+RK3O5et1h3Yogkl5akl8pbHW0AWDSPSa7dLKkUUy:n539t1h3Yog05akl4bHW0AzPPy
TLSH
T199F2CF75EC759E735DE6A245B51A6603BFF8C4232BD94A8084DC9F0E01976EE030BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 7bbd3c32238e92341ff960cdffbbfc1133631ce0e410177e941bb805b4d726c3
MD5 39a3e3f6ce2630127dcbd19611b315a8
SHA1 46a3a548960dcdf0a80493b35965bedd1202428c
SHA512 28749f377780207221fec0e8eb25159480a94dfd37508cef52457fc9ab03925dea732412ff0df26175c44f09a447bd570d239caf6bcb4644258da5e1baa7f2cd
SSDEEP 768:X53QRK3O5et1h3Yogkl5akl8pbHW0AWDSPSa7dLKkUUy:X53jt1h3Yog05akl4bHW0AzPPy
TLSH
T130F2BF75EC759E735DE6A245B51A6603BFF8D4232BD94B8484CC9B0E01976EE034BC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 4c659f59a8f7a27e0323f8d6e500a931706f53477a71a2be28d399b87fdaaf2c
MD5 9ff35166bee349e25fc7afe6663d3e57
SHA1 20b07ab64177da028cc1898737b95d2a913ea01e
SHA512 56e0969d8c2008f4dcb78a4d7fc7852fe04db8b4c4dfa6b3d1f797c72b927a1161f4ed69d3490490e52f4a5586112ab6c61c9b4990a59475e3618a807f706774
SSDEEP 768:CFQh3hwgQRK3O5eB1h3Yogkl5akl8pbHW0AWDSPSa7dLKkUUy:Zh3DB1h3Yog05akl4bHW0AzPPy
TLSH
T14CF2BE769CA4CA779DFA9785B5196203FFF4C0636AE99A80D5CC9F0E01971ED034BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 b53ef92626bf71f4058dfac7cf7266c82de30a8939867c17309d3e6b81d2d3bc
MD5 b4f5d175e286f524e90dc3089783e3e4
SHA1 b01e779cd24fff93c37e37b244d4a6c7de5bfc2d
SHA512 cb34547efe4f9a859357781d51a798a8b76bf3121a95a80f8d878553210be65ff6d5d5b1d9082755f998bbd1356c2dfa88083dfa0118cec70eaee95467d13117
SSDEEP 768:B/UxvxjgC+CZ3v0K3OJ1h3Yogkl5akl8pbHW0AWTuTSHvP0Vv:UZj3+I3i1h3Yog05akl4bHW0A/TSCv
TLSH
T16903BF39EC65AE778DE6A244761AA317FFF894636BC0569444DCAF0D029B3BD030B853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64e43461-87dd-4d9a-b5ae-fab1ed7e89c7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\64e43461-87dd-4d9a-b5ae-fab1ed7e89c7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download