9b34b57c72a5eee312ff9d7e783e3e4bfcacf367576388fca06c0b5fbf9c1a2d

Analysis

max time kernel
898s
max time network
727s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
24/09/2026, 09:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 19KB
Sample260924-lpbmfaaf78
SHA256 9b34b57c72a5eee312ff9d7e783e3e4bfcacf367576388fca06c0b5fbf9c1a2d
MD5 1b55a86184b44801769ca030bcb3be55
SHA1 5995c118bc5eb6e26df0f8581a14b874826347b4
SHA512 639f094feb34c1efae940cbf397a89b23e34c55d91268ebca81a8a7145b5362b4a748eff5c623c1bf2d55af78f39d673819a21e5c0997862c38340799cb4b9f9
SSDEEP 384:Q9rB1BfBF58BMBUBehiBZBKl3B4BZJquPJqNqO3k5Wz36pP2Mh3qMhDMhxb1Z:Qrj5OaCF/gReXPhaj0g6hDNHqLb1Z
TLSH
T1C29217A283411D4D27B209B4F6529F0CD3A2030F57004EFDBEA7667F694E525A9B3AC9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1544	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347165639473965"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{8455C88B-FE0B-4A77-A9E7-5AD57BE7156B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe
548	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 548 wrote to memory of 3788	548	msedge.exe	87
PID 548 wrote to memory of 1544	548	msedge.exe	88
PID 548 wrote to memory of 3280	548	msedge.exe	89
PID 548 wrote to memory of 3280	548	msedge.exe	89
PID 548 wrote to memory of 4896	548	msedge.exe	90
PID 548 wrote to memory of 4896	548	msedge.exe	90
PID 548 wrote to memory of 4896	548	msedge.exe	90
PID 548 wrote to memory of 820	548	msedge.exe	91
PID 548 wrote to memory of 3056	548	msedge.exe	92
PID 548 wrote to memory of 820	548	msedge.exe	91
PID 548 wrote to memory of 820	548	msedge.exe	91
PID 548 wrote to memory of 3056	548	msedge.exe	92
PID 548 wrote to memory of 3056	548	msedge.exe	92
PID 548 wrote to memory of 4532	548	msedge.exe	95
PID 548 wrote to memory of 2888	548	msedge.exe	94
PID 548 wrote to memory of 4532	548	msedge.exe	95
PID 548 wrote to memory of 4532	548	msedge.exe	95
PID 548 wrote to memory of 2888	548	msedge.exe	94
PID 548 wrote to memory of 2888	548	msedge.exe	94
PID 548 wrote to memory of 1908	548	msedge.exe	99
PID 548 wrote to memory of 396	548	msedge.exe	100
PID 548 wrote to memory of 1908	548	msedge.exe	99
PID 548 wrote to memory of 396	548	msedge.exe	100
PID 548 wrote to memory of 928	548	msedge.exe	102
PID 548 wrote to memory of 4508	548	msedge.exe	116
PID 548 wrote to memory of 1580	548	msedge.exe	117
PID 548 wrote to memory of 8	548	msedge.exe	118
PID 548 wrote to memory of 2160	548	msedge.exe	121
PID 548 wrote to memory of 2160	548	msedge.exe	121
PID 548 wrote to memory of 4556	548	msedge.exe	123
PID 548 wrote to memory of 4188	548	msedge.exe	124
PID 548 wrote to memory of 4188	548	msedge.exe	124
PID 548 wrote to memory of 3100	548	msedge.exe	125
PID 548 wrote to memory of 3100	548	msedge.exe	125
PID 548 wrote to memory of 32	548	msedge.exe	126
PID 548 wrote to memory of 32	548	msedge.exe	126
PID 548 wrote to memory of 1176	548	msedge.exe	127
PID 548 wrote to memory of 1176	548	msedge.exe	127
PID 548 wrote to memory of 2620	548	msedge.exe	128
PID 548 wrote to memory of 2620	548	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffb0cdcc188,0x7ffb0cdcc194,0x7ffb0cdcc1a0
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1904,i,5728765612535713969,9277797813507343816,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2364,i,5514294872913147250,12742027073528184302,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,8490465685073067545,16973118653832760501,262144 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,5548254250089577736,7407670403675053618,2097152 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3408,i,2214684577710427330,10584889507603512569,2097152 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,13537284131514565379,8934768142447625589,2097152 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4252,i,8671767673153817132,4556340569012387475,2097152 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5132,i,14705996878124035349,16113311297328051997,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,11008633939887432674,18429892739575701116,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,703634623859575413,2280977144315243304,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,703634623859575413,2280977144315243304,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,13038725921586086685,17865042502998762550,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4388 /prefetch:8
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3636,i,3577698717645885706,17702591225175053287,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,13414120656332565669,1240480679188083422,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,10034088054710211653,9533080136172432501,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4460 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6140,i,16943809639438511213,2272452193504282324,262144 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5600,i,15167182620985807421,17068352473637255393,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5512 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1304,i,8819788224407566687,10795343461365963388,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=3976 /prefetch:8
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5440,i,3703209270654755620,14151864526621048239,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=3916 /prefetch:8
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3648,i,14574697509218090014,891743691576932556,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5284,i,2260125932385218894,783713006476673512,524288 --field-trial-handle=2320,i,928861653739456508,475161551691704265,262144 --variations-seed-version --mojo-platform-channel-handle=4276 /prefetch:8
  2⤵
  PID:2620

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
MD5 07f616e3db8597d59ea940f94c1abb0b
SHA1 eedf28342bbff8c4cae798c2980ea6953992f1b2
SHA512 30782b7b7d8c6db47a40bc15f968f35fca7939aaa4b83a8a19c8f5a415c745b54c161abc0037d24bad8ebf15d5deb4134f24e357c1b5869f1598fa22619302be
TLSH
T163D0243C7F114D50D40041710530D50435D3CC1740D015050C354C074C101C11305CD0
MD5 SHA1 SHA512 TLSH

Submit Download

69758432-c800-495e-b047-541687ff9133.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\69758432-c800-495e-b047-541687ff9133.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e3ff1f49480c6227fc8f05b34f87c4f70f4997e1abfea38509581ad3fc47b456
MD5 7cdfb61f8e964a61e8fa761c99f27ede
SHA1 a5c28095e078d566adf59b9428d04c9b9fd68b23
SHA512 fe9cc74030d59db4257f21fb2832b8772d1dd0c1c57826d22d09a7a1d83c90a29b85b4c06c02f33dae537e8952eb8c3be0fc6fdd7bcf24bfdbf2175fc8a33dfb
TLSH
T17BE0268C05C8C37EA214A4CB817C7B4C8280370ED2CD6A0A2F04CDC87007540AB8AAD5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 626b48b91b5927185f3ed92dc9586db7fac0522a2f335cc6ce6a99c0ef3b6d2c
MD5 f91d6fd63dccb03cd04d816071e461dd
SHA1 6ae8c2ba17ce466ed98f2b6f95222e0c50cd621e
SHA512 8e8b2f5c3f123fbe0e37835c01b42b148447e1a4258e8342464e023325418ecf152e286c380f05179ebe7273ac8459b9f0c33951a60210eb1039915fc3f785d5
TLSH
T160E07DA914C8C2BEF21068CB517C670D8282370ED2EC6A8E370CCEC87283458F7C6AD1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 f5484e2acad71a08423d78e73a12495e0b9bf441d3bf5a4ddac61ed4ae6522c6
MD5 fa44202958741308966a462aa3adce26
SHA1 b46daa184f981844e48898db4ba750dbc52fb7a7
SHA512 c140f5b019734968374ceaeb19676a278c12b01f3e2459ff15aa56fd1cb83be9670d385c7c358d2f19c2145f7d3bf688f48a87c58e13ff73cd16b6eb9f236377
TLSH
T1D5E0269814C8C23EA22069CB456C574CC2A13B1F96CC6A0A3706CDCD73818A4A3E2AD6
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 29dc15abff173f8c96bfcd949a0208f9033afeeacf9f7a44f9f61b7b96d0d3a3
MD5 9bf4c73b6935012456e7280c8cae3572
SHA1 ebf69ef13f4f60d50ea1083817fe92bccd971b58
SHA512 bc4899fdf9c7b69b265cd7fd107f7b68854876e12c990eafa19eb26488f6b8c8c33771e830f297050e654a3238acdc10cc11beffaebe0ab390b1d142680e7ebb
TLSH
T1F4617E84E6910398D39A47776DE5118B373A97F85C672C5126ACF4B8F706763D1B00D3
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 792B
SHA256 cb00aef6bb19ad1becc5e52843aaa8b266847bb814ba7eaccebd4916803da276
MD5 b4f77bfcc06e95736b62572f90fab9b3
SHA1 268b915979df759c66046d868b76952b900d8a88
SHA512 f51a75f36202afeeb38bbb4b6c9300f1977a577b36df81d9efd67cf41ab22de534314e21e719f291cd5bb670b6c57aa0153ec19594706273eed5ef3800388c90
TLSH
T11401B1F787E5467E891512F05E287E1BCE1D0406431C7C55C5E4AF1B93F2475E00199F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 597B
SHA256 836005c7b08b544e2a5a63aedc19e4f6b07097381fdf33dcf81023145b5e0e61
MD5 c0ac295924466b29f29e33eec6f2cecb
SHA1 6f1922dc5578d3fe5df056b315b4d109185a6baa
SHA512 584a0c9271e11313dd8945732bd804a322d6c83b3c1e33fca9f497e5cfcbc8c49af0fdb00302e8ef43d855de37d2827fa65f11cbde06a2fe3bed694c1f7f5db8
TLSH
T102F0A2F783A159BE460542F05E18AE1BCE5D0403431C3C56C6E07E2B53F34B4E00099B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 5197a57e7a1e20b9943a9bab46f781b70c4122d85b70da1c627b69d44e2b0195
MD5 7ca93855057c905e9d714470f20efad7
SHA1 b2be94437cc5200fa593123e29f12dbea9fb3bd8
SHA512 638931b7ae0e30e0672a250fb0d7cd4fbfe719b9d0a50f578b883181a4899fc02c6f585b4835ce174f7ff361597d03cbe6ef4b2279207f62989255022b656784
SSDEEP 192:sxZiwLWU/fhsKvNIupdjHW6+WNGY3ROGIgrJ:sxZiwqU/fhsKvBtHbGg9
TLSH
T13312C8156E38A97B8CC7D21DBB15BF53E6F9503251D01E48AAFC961C04E76CD120B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ccafe87c86a3e07aca27bf2e397da87859bf5bfb82a768bd1bc24804fefc6012
MD5 7f5d9eac4f68c80ef3143f5915c588b1
SHA1 e7fd48fcb3992cf87dd77dae2a217ee5002f522f
SHA512 9b92e18b1819fd0b375a8cbd33a6081dc1adb59e7a09f8107b40e88af63562e9d812d13d7da4948f200f2b7b738e42d5a7b42b2641be756ac1ac2c22cbd47e9c
SSDEEP 192:sxZiwLWU/fhsIvNIupHjHW6+WNGY3uOGIg5fAJ:sxZiwqU/fhsIvBDHbGVtk
TLSH
T10F22D9166E38A97B8CDBD20DBB15BF53E6F9503251900E48A6FC971C04E76CD220B41F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 af30e85915e9b6c2f72105a920b950f0f6dc719928b5cb0a26c3f68e385ab7b9
MD5 792c961acc70f7993a1a2450747ce1ae
SHA1 1f473c40f1fe298300e0cd9e4698b6f892d1fcb4
SHA512 3ce587a3f573accfcf8b13efb1fd936c5849e5e46e02880548fdd7114a63fd2d333b861e3aeb60d7f56e3406809de37666adbadf097804854a1a321238265183
SSDEEP 192:sxZiwLWU/fhsIvNIupdjHW6+WNGY31OGIg5fAJ:sxZiwqU/fhsIvBtHbGytk
TLSH
T15022D8156E38A97B8CDBE20DBB15BF53E6F9513251940E48A6FC971C04E76CD220B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 76993d0256001935d9f555d21474c0844ca1837dde64f379b0632b4b009bd161
MD5 c425f8e3c74117b4bb097fba4c4b2a94
SHA1 9762b8c752b500fe302c867db02d2d7e616c5a22
SHA512 261ed930e5f60498c1980be126444ce00b732faecd1ecc72a9b8d3d4e7fc3b0dfcea3ad9fb918031455f81f84e9dc6d2edc1229a4dd2a9792f8b512a2e9c2c41
SSDEEP 192:sxZiwLWU/fhsMvNIupdjHW6+WNGY3ROGIg5fqJ:sxZiwqU/fhsMvBtHbGgtm
TLSH
T11412D7156E38A87B8CCBD20DBB15BF53E6F9503151900E48AAFC971C04E76CD220B81F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 63665d4b2a350940b5934065937ae522aa82630ffef72085216bde651f818349
MD5 d5f3bddfcf4fb58c69fa1ac278759ab1
SHA1 40ac5a163ce2d175df7c903fd6c1367950f7b37b
SHA512 cc5311d5b6dcd225c8921db772f5994036454c9a82a99bd972c3125d31771f14b33ab214c0e54350c49eff73e337c1c0147412dd75fb32cd38f6a14f8d83abbb
SSDEEP 768:r930AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ72ArolZMY:r930AbSWvS2l9u1jaLmLZ12Lr
TLSH
T135C2DA3B640CCB7E4FC05A9DDC6AAF9B6E9C02C796548D4047FA944C02C77EA912B4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
Size 552B
SHA256 368181f0c876bf9ca95bcef3ba2d25874343efc39dbef63621125955127a34e6
MD5 0d1537711dd7b539f6110360d830dd2a
SHA1 6a6e6407087094fa044cb2a2f70dff114239853c
SHA512 8e5e63fa0e9dbec739bf420c3075808099ef83687185a0b0f7c1140d5cf4d0243188057a1d37949e1b2e8ef167f51a0487b9beb55f4ae7ec4bc31b59966ce051
TLSH
T1B2F0F1DB7D138606FC584134307DA455AAB112EC53942E0FB0FCC0259C967C49E406B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d4e51.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index~RFe5d4e51.TMP
Size 552B
SHA256 d2a23ced0822ef2643ca5b207092cb2de5f26d4a38896a9b7fe3ca9c15e09bc8
MD5 074972272bc1e11b2af80278a1a150db
SHA1 39a5d31d742508061de484151a0a1f9914d54767
SHA512 b00715cb7d052bb6a07f88edce40d0bd34d84956a995fe068c4a9c2b8c2eab45a92da6880b84eed7df85b48609256f1f5e84361be485312a9aa18252688100d7
TLSH
T15BF0F1C551138746FC084231A57DA19661A111089354390FB1E94024CC427C09D42BF1
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 64a75e55270434809835c9e1de2b6a719cef10e19e62311e3f82c3ba01dfd418
MD5 fb424da51d18c2e7e3494a0afdca4fda
SHA1 1507b1f4faebca5596e70fa2efb545d438776303
SHA512 cb51eb68ac33024d6182a80837c1c3ef6ee7c9201eaaf883b3190decaaf543cdae255356d8e48a7128bf03a1abf7ff906552747fa10ee0943f4ebae07d89c3cf
TLSH
T1BEE0C0F26DF71851FCAFC3D4147088B181057894DA08FC4F10AA67CBA4B03153845C10
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 713d816862eb0cd838a5ec850ef6442095bed17fe07081d216d687f3c9a7b7fb
MD5 4ddbe25a1a812ba9f291de1aa3582b0d
SHA1 e73ba254745d6458282c213d3dddfc50ac607034
SHA512 4f8caad553d1d9e236b99d8ed4256e8913342fe549a4a479e0e05b3e96d5d13a28f4688de2a19e1480c2ed278d23310a1cf02729b006a33983b068dbf3491904
SSDEEP 24:Kz1yJsRIfKNhS1WSYvHyXAH0TUHIbK7hq1aS6pPUnckeIZK0hE1yShC1yXmwZBa+:KkSIfKrSoPyZoIbK9qcBhIZKiEMry1z
TLSH
T13A91620536BB164438BD2509807197BF124272737008E77B3FBD62A29E26E581DFEACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe599fc1.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe599fc1.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 4ee05aa5b81dca6cb4b6238c4a130a74b6170bfa5e23a87215c61f500dcf3e4e
MD5 dcbc946c9bdc682166514a516cfd5a5a
SHA1 82652f715a4d610c0e814242ca9109c705cbd303
SHA512 52355c03f6129ecde1b4b7670d36305ec96304d637bce849ce34443596106cbede9fdbdc89f3d6476acea6e120418f5fda14a478e9dfdfec2c251ae5bdc23f33
SSDEEP 384:vZcIhsNFwr5ZpurdB9iX5FHtIP0/upa7dLKkPQloe:nhNkfamP0Sa7dLKkPQlp
TLSH
T1CE828D329CB89D7B1CF6E111F44B7A139FF8816B97C85F84D9ED6B0D02D6598030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 f1d268eb30e1fce19cecc3b9812885fbb8755bdb1d952b6dd450c53a1b305383
MD5 8a3eed2b4397f87a37a130936e48d103
SHA1 58466069fdadd84c496ae994aa544536f0255ef8
SHA512 cef2c455ade9d45527ab4df3acc6363e396091a0815bc0d4bd9f6bd84a4bdebe0d0eee2f1b492553c4ac86c23c1cb809b9be2c048009e360c74386e0eef75dc8
SSDEEP 384:H67FiZcIZzsNf8TUNTUlIlZr5ZpurdB9iX5FHtnP0/upa7dLKkPQloe:KFQZCwgfkfadP0Sa7dLKkPQlp
TLSH
T16DA26D339CA8C97F6DF69651F54A36139EF841A7CAD8AE94D6ED6B0D01D709C030BC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 f2cd5c85bf525e45ba9b0fe01a3514137abcd3d2cb18ff77b0ebbf42ed2a0958
MD5 85041e8395092adc0805957d99c9698c
SHA1 87e18678e3db7b9f0c07436ab1d025e6c306749a
SHA512 cb7166cad2942a28c39331ce6c87e53cd8125690e6321831f36818391e249149fb1793ecc74d6d51842e9d05d48056ba9e7d483bb61aaaaac015a36b621cc572
SSDEEP 96:gqONkZQsjpfuMVwptaL5ih/cIPURHl8h4otop5BiCDhBIPuva6zx8X5FxVvXYvdE:LONd6AmwprQmiUyDX6siX5FjRWJi3lU6
TLSH
T19202FB35AC686C7F8DF3AE15B58B36136FE5112BDA942F94CAE81B1C01D768C1306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 d6bed2b55f45483879235d0946bc5ccf2df26d59c127e818d1a0e29b1272b383
MD5 f3167750ea0df7abfbe64fcd0e947a23
SHA1 4c57efabf8287e3e7fc8bd90e47c0f23cf3d5086
SHA512 10953fc547b0a1fcb49c28a11a472c34d609e60e4eee2247fd78870e5dd488d13139ceba6f9ebb27da55984964da6a44e98750966a406c5442a22f40bd610534
SSDEEP 192:LONo6AmwpAQmiUykXzsiX5FjRd9HJlRE/SU6:LONo6ipA1zsiX5FHtBPU6
TLSH
T1B2123B35A8A8AC7F5DD2A550F08735136EA5522BDB896F94C9EC2B1C06DF59C430E822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8bfd9a4320f37fa1a5cc456493b90f6b48dba6f4b3ddf37655dc9c75bf31990e
MD5 7a26e3a84cfb6e34daa5ab3f2247f799
SHA1 96e675600337d6c34f3a0cd72a86ecd70fde627c
SHA512 d1807ca3f0ba6244efbc51a1c766135f6511d60de973d07a874de449fa365a9f3046018cda38df82d4facafa8897052c03e44ac1e16823442e1df95e431837f6
SSDEEP 384:hZcIhsNFZr5ZpurdB9iX5FHtIP0/upa7dLKkPQloe:phAkfamP0Sa7dLKkPQlp
TLSH
T1C7829E329CB89D7B1CF6E111F44B3A139FF8816B97C85F84D9ED6B0D02DA598030B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b6d81ea-0bf4-4687-b937-4149723bf5d7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6b6d81ea-0bf4-4687-b937-4149723bf5d7.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1f2e5f1a92de234358944df27ec5a3f12b82c4caa04b841e982229e2cab30d93
MD5 b1dd336070c07fb2e9a6b7aa7cdd7b28
SHA1 f5451d7341c4936127e57b1b97054caf6c9482b9
SHA512 13243e0d8166e1b857c0dac316ed1799ad635566c23224024e385e0ecc7b3644b2dc5f83ae33ac38666f06b1ed48b801e8c17c16019faff37a247fee4ba79ba3
TLSH
T186413959A6F91148B7B37E1AABF6A46D447FBD772F06C4AE10010E4E4627B00C9B1733
MD5 SHA1 SHA512 TLSH

Submit Download