bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d

Analysis

geolocation tags

asiadelhiinindia
max time kernel
899s
max time network
911s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/09/2026, 12:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LICENSES.chromium.html
Size 7.9MB
Sample260924-prmn9stfja
SHA256 bd3ee49a5ab19d15ddc44b421b0bdefce587790786989ae77cf3ddf1e6a2ba8d
MD5 0e3e4362f785aff0b9e1852b1064c0f1
SHA1 a42ccb51e72bdcb5bb905a62efaa28857def3a17
SHA512 193b57efc5f5971fbd9e4ea1a80b34aadcc2a814ff49c4c06afe972bf327e98ff0498217a8bdef984b10fdec6e7858a6fb88c0b14936e0c6b404387a426b87f2
SSDEEP 24576:dbTj6ck6f5kVWS6RqLsWN3Omfpe666A6f6X6TTHW9GqpaE:tEx/i
TLSH
T1A786942F7B48037706C60262AB8BA5CBF21F903F3B561654345CD1681F6BA2583FB6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4124	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347338166113234"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4154726816-2055034831-2297277433-1000\{0C558799-E473-441B-A9BA-BBDF22A2C4D1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-4154726816-2055034831-2297277433-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2472 wrote to memory of 1260	2472	msedge.exe	89
PID 2472 wrote to memory of 3996	2472	msedge.exe	90
PID 2472 wrote to memory of 4124	2472	msedge.exe	91
PID 2472 wrote to memory of 3996	2472	msedge.exe	90
PID 2472 wrote to memory of 3996	2472	msedge.exe	90
PID 2472 wrote to memory of 940	2472	msedge.exe	92
PID 2472 wrote to memory of 940	2472	msedge.exe	92
PID 2472 wrote to memory of 796	2472	msedge.exe	94
PID 2472 wrote to memory of 5920	2472	msedge.exe	93
PID 2472 wrote to memory of 796	2472	msedge.exe	94
PID 2472 wrote to memory of 796	2472	msedge.exe	94
PID 2472 wrote to memory of 5920	2472	msedge.exe	93
PID 2472 wrote to memory of 5920	2472	msedge.exe	93
PID 2472 wrote to memory of 3164	2472	msedge.exe	95
PID 2472 wrote to memory of 3164	2472	msedge.exe	95
PID 2472 wrote to memory of 3164	2472	msedge.exe	95
PID 2472 wrote to memory of 1936	2472	msedge.exe	96
PID 2472 wrote to memory of 1936	2472	msedge.exe	96
PID 2472 wrote to memory of 1936	2472	msedge.exe	96
PID 2472 wrote to memory of 5880	2472	msedge.exe	99
PID 2472 wrote to memory of 5880	2472	msedge.exe	99
PID 2472 wrote to memory of 4416	2472	msedge.exe	100
PID 2472 wrote to memory of 4416	2472	msedge.exe	100
PID 2472 wrote to memory of 1412	2472	msedge.exe	102
PID 2472 wrote to memory of 5884	2472	msedge.exe	106
PID 2472 wrote to memory of 4184	2472	msedge.exe	107
PID 2472 wrote to memory of 3240	2472	msedge.exe	108
PID 2472 wrote to memory of 3468	2472	msedge.exe	109
PID 2472 wrote to memory of 3468	2472	msedge.exe	109
PID 2472 wrote to memory of 3280	2472	msedge.exe	111
PID 2472 wrote to memory of 4040	2472	msedge.exe	112
PID 2472 wrote to memory of 4040	2472	msedge.exe	112
PID 2472 wrote to memory of 4580	2472	msedge.exe	113
PID 2472 wrote to memory of 4580	2472	msedge.exe	113
PID 2472 wrote to memory of 4888	2472	msedge.exe	114
PID 2472 wrote to memory of 4888	2472	msedge.exe	114
PID 2472 wrote to memory of 1364	2472	msedge.exe	121
PID 2472 wrote to memory of 1364	2472	msedge.exe	121
PID 2472 wrote to memory of 5624	2472	msedge.exe	126
PID 2472 wrote to memory of 5624	2472	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffb08a0c188,0x7ffb08a0c194,0x7ffb08a0c1a0
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,724170773047648831,14459424298976513763,262144 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2196,i,2853930311345991584,7088236648958853887,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1900,i,3988818007399839865,18001663655896101680,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:13
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3608,i,7101072562716560962,14470175312006682219,2097152 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,8319498405103287862,3125262571301221553,2097152 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4312,i,14634858987017678405,7179402004570191238,2097152 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,13040611230993618309,16998353928566285872,2097152 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:9
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,10836803579869788070,17412467390427967113,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
  2⤵
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3884,i,8633916438136480674,5326615276292005173,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,10543447623207788822,761861973890399088,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,10543447623207788822,761861973890399088,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5344,i,8142448220696626983,9378781314765706156,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:14
  2⤵
  PID:5884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4360,i,6268315359258041528,1016734686524389406,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:14
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,6765122831445059026,1328099085395166513,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:14
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3524,i,17776909977308148570,1061114939306277511,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:14
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6404,i,14357676450710678061,12904120671254247304,262144 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:10
  2⤵
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,8572856130759147739,3509911932468550682,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=3696 /prefetch:14
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,15524301783547726901,212473907862692661,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3420,i,9756213778107405040,10582369747330356347,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:14
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5200,i,16223117898281100282,5439271791912187274,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=1088 /prefetch:14
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,17749991169203199906,17207937043053639161,524288 --field-trial-handle=1992,i,2918948122335522337,5831466586204270110,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:14
  2⤵
  PID:5624

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1700

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:820

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5680

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2084

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
MD5 36c9bdf74494657a1636bbc59af48eb0
SHA1 aea8177ffde7e43fa1b4cc5ce6c7cf68c2431306
SHA512 2cf6da34ccb1c58e4f6d50681952d27ffc828c4ede6f38ca0a5e429a4f520e426913b04469e4272eed54102a541263bbb54c2628f542fbe357a4afac921bb49e
TLSH
T143D02B79E7DC8512C0C2207C015811A231B37E00EB0802C00905400C18001C20323F0D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
MD5 5100dc5469c5151f9ac793573116a7fa
SHA1 a8ffca7210c348bef0d710a66e334809b7f58988
SHA512 ead3d81382dc13f1d89e928af9189e5eec6cf3fabfb91ed18d73f1fe38b5e9f76e77fae594633baf6da19747d70fbb17eb97a8a36df60510a930f6006986acfc
TLSH
T1F4D02B75E7EC8412C0C2207C015911A231A37E00D70802C00A05801C18001C20322F09
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 d46816f546129a0cc8befc818aa764b79a291d97dc317acaffb3156e200aa449
MD5 f7d3fb8a081f998b1a2e3df822da1d6c
SHA1 b48b2cd2f8b79dfb2b4c8c32070451f2033dcf25
SHA512 859043017a6e24dac787d92f4b67b725b80fcfa96c0ec87799c78d7169c6bcc35184bd8788825af2770e058006fbde0d8e136375c470df6a9e966d077cbdd890
TLSH
T132E0D88C05C8C37E5640A48741D8578EC3D0370EA2C86A152B10D9897641548E2D5DB1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 328B
SHA256 4ad1f517bde095b5c75f806fdc26d00981c39cff53d26b3a2ba15d5522900678
MD5 bddd61f000ad0230b1882354289acc27
SHA1 1091c8a1ed22d55687f79800f0fd055dac552895
SHA512 63b3e2f6fcac2a0fb794484644a9270f13b9ac63beca5182b37564805b5b28dfb6082ce3cc9cd62a035747ed3eb0d7d6237050e6c4c620f13389042199ab636a
TLSH
T188E0D89805D9C31D6500B5CB427C4B8EE1E0370F92CC6E592720C484B403850E6D5AB6
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 2KB
SHA256 27f5b3bce621cd2698448235580aa292424998e2ce6884a63c765ebb786f0981
MD5 1d811a21323ef3b57cc50f93ceac8bf1
SHA1 9c1a6371ed0b6e0cf1be12e966d3491301c5c7b4
SHA512 e75908e6a874b19005f766ce91c752eaf657ab8d819dca1a63bdb08e669222d1684df8c0eac9e4783a19c83b8a297910417b2e82b59b513c94aa7b76f9bf5f40
TLSH
T1C841A2095B49C974DBA9003B44D0E4D7B7324EF9864B1C720269C8FDA76ABF3B9D0298
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ab7f7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ab7f7.TMP
Size 2KB
SHA256 c116529ddae0537fb9844eb0f99c6d45debaf4c7aad75aaf5a92186ace355c16
MD5 0ea6d7aba42834641431850b36a8426a
SHA1 099a4c238bc52f935edff80c884bf4a4437eaf8a
SHA512 cf28403640bef7ba8a0ba690e62909d311261aa09487c9bc9576abb653a80a2b124a38a6f6da0af9ef62d3dee4ceb8ed720bf1c8a562f535309308d48fe8ffcb
TLSH
T16C41A2095B49C974D7A9003B44D0E4DBB7324EF9868B1C720669C8FD676ABF3B9D0298
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 926091e964c589e5140e760950203fabde399ce8c68b3893354febc139b24cb9
MD5 ba22647e930e055272d2889af61496ff
SHA1 8ff4219bb046ae84bf8b942358169a06c686cef4
SHA512 1137e1e5ca338762ebac505ef7956febb2a397e4398e76931ed5a477e7e2e150c7fe1e62ee93ac615d27a81426b146d8d17fa6abf9fa8f70c4fc48db5b00e24c
TLSH
T14B41CFF7C3E8867D890156F4AA186E1BCE1D0915832C3C5AC8E4AF2B93E24B1E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 0beaf331652049a0732177f7f88beb884e781f65805e4f14295290fa3a0ef2f7
MD5 144cb0688f2b6df06a0f59a6e96203b6
SHA1 a72b42751e9f18d58c4c9e4e23c72276cd597793
SHA512 20c0fbd4e72cf4e54dd34b6f5c59e9f397de402bdb7cca9b3a104e9a514195efd095432082fb224f8b6f88f407360b8b60bd60fc0def57e7f53b9d59fa393112
TLSH
T1DE41C0F7C3E8867DD90156F0AA18AE1BCE1D0955832C3C5AC8D49F2B93E34B1E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 8889982f3ea64fc54cd4187813a4f038a469d4634ddd252700746d8cfc75f14e
MD5 4fac8af52292bbbda0821c55fb26f9dc
SHA1 a1df7d0e20a0a458034bff16b64c530e27c36446
SHA512 62f82a7891c8422b1f32c8add97f8da5f4d5f1a5157369139ccd220eefb68f27df7c68f023bcb6cd3879254c39eba1dd10916b52d175d28c244f80c3af92bc43
SSDEEP 192:sxRzdRDbh/fdsZK7xezzoA8p4r/g6+WNIYDF++GJIgIJ:sxR5dh/fdsZ6bW/5IZrs
TLSH
T15F32A715AE68A93B8CD7E21DBB65BF53D2F91033A0945E48A6FC861C04E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1d1427db24cd47d657c89840f2276d9680018b00d4027ff4f92461713c5c320b
MD5 95e4e79a9336e75c4fc8d488d1ef1af5
SHA1 cab870a575e97a2e24e5f42e769210fc0f67dc1f
SHA512 797cff47f2c556b01715f340c6a6937312f2a4db4d0d5b9ec3ab3b3ff4508b9ea3b85a2cbf3bd3ac91d5ce2cd4c4c898c9a852525e94530bde06228d58c274f0
SSDEEP 192:sxRzCRDbh/fdscK7xezzoA8p4r/g6+WNIYD1++GJIgD3J:sxR+dh/fdsc6bW/5Inrd
TLSH
T1FE32B715AD68A93B8CDBE21DBB55BF53D2F91033A0945E48B6FC8B1C04E76DD220781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 ced49c21a46ddffdacd6ebf3ddf315545b1879c41be21c0938585618cb70f267
MD5 020dfcdaec3552c5d8ed101079cc4c5e
SHA1 245f8f6b36ead124e174e2bf7dc001da9f0ab66c
SHA512 f1f62fc16f920f8ceba3a7a1dc08b3e094286367587e1ecae4fc5a4ef6a46395cd42b832b6f0fe4ff3fa2aef8779c4a1a8aa91ec2c574b0de88a2f4c8a3b66a2
SSDEEP 192:sxRzCRDbh/fds5K7xezzoA8p4r/g6+WNIYDF++GJIgDhJ:sxR+dh/fds56bW/5IZrv
TLSH
T1EE32A715AE68A93B8CDBE21DFB55BF53D2F91033A0945E48A6FC861C04E76DD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 35984a96db87d176119e43fa7423fef0d2ff1a02b9b08e0a3295e7a7291fcba0
MD5 7d3c7aded96dc5277ee4c3154e3e9400
SHA1 2315c983dbd136303f13aceb48cf2832d74fa794
SHA512 0a8d9a9bd4e61d0bcbd13778a47aad2642f3ee10a86b1589755897b043a6cf5c440f82e56351cc0bd2d4b7f8664d511966d6efd50b63a0ce2c59c9307134de70
SSDEEP 384:ScwYbpGfCtgaEFfA6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVO+9W+R9wroTyu:SzYbpUWgasfA68F1+UoAYDCx9Tuqh0VO
TLSH
T17BB2D92B640CC77E4F804AADAC1A6F977D5802C796988D8047FE995C03C77EBA11A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index
Size 72B
SHA256 ec76198712e0dde0ba788b59adfd425ec6c6c5a7a315332180fd2011442e3ce4
MD5 be8520bcb06431dfb4d01d75ae61c1c9
SHA1 541d73636231b3181e82002556790c318d5fa9f8
SHA512 aff58184044422e7f4ee1e5024d46eb2db154fcc05f17d05522546888c0725790df36dbb389fece9b4799b1d9f4369c08924d76aa4adf8041b25c06e49f99921
TLSH
T1B2A002260280680AC002A1B0555696613352E9734104171754D35089CE9088D4F6151D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ef9ee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index~RFe5ef9ee.TMP
Size 72B
SHA256 fb13fcef1a13d290325605cfb230757a1f52be25ea0a7784bbb930df7045db66
MD5 492052d39da33f8c5545a71828faabeb
SHA1 111e37810c65f10fc6fb840c28adb5b009495c4d
SHA512 6472233a1e28fcb48c253d18e7d8815a867d42c95f8ec2bdffaed91118da9e65cb5884260bdb9c503da1121d363b24f19a80217d233b831d5508e4d1860bfd5a
TLSH
T1E9A0022853805615C03211B61553C7C11340C8615502133740934448CE60C944D4286C
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 273B
SHA256 d50ad53beeca45e60f1bb38ce581014a3f6458e33cb14c8ae9defad123f1b352
MD5 a20129447893188c3254f3a7f0c51b86
SHA1 b35349cd873b761c3ecf6bc4c939df05be6271c7
SHA512 2fd2b3d8369b4d132479662b90885c002365a002aa0c9bcc3d80e61699e919b590d198ddf67dc8dee656c0ba5e21a8054f2bff0d29fc456966f62f1794cf3b6f
TLSH
T13DD02BBA5DA90C109CAF87D230314066460278A8CD88BD8D2019E28B10A13103803D30
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

02ea0d6d-884d-4fff-85de-e0cb754f2904.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\02ea0d6d-884d-4fff-85de-e0cb754f2904.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 7425ab4fb5a23d871cb8df575810a2235fdce1b30f242e463a511b3e2af042af
MD5 5b3ae2fb25b0d7c56887016e0eaf0a3d
SHA1 86e94686d9fbea8a71e90c22150b72e2e2c2adc4
SHA512 b6bb1b2b1f63995d666d4df50b031b270f87e94b5f22b995c30b2be1b70d7feaec01ae1acfc3195b0023a36b6c679c83ef4ffea933b4e87fc1d37ea0c954cd5f
SSDEEP 768:oP3mrzybNb8rBLOeRFZD1fTos7Rjul4cDm74Hg:oP3m36Y1fT/R6Sh7Ig
TLSH
T182F2AE3AF8A49D338CF5E285B14A7A47BFB45563CAC9099845DC5F0F0487BA91307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 a54735b1133dfc8b6fcd115f893d96d13d31aeccd2c367db8419a3d52dae4750
MD5 923fe1c9d06a246bf5ed3020c2ba00b4
SHA1 9649b145a7d8bdd5af86899a80243b27b8d5e436
SHA512 3d5701e62de2fb4d0b3334da74cc310de96edb4a7831af12621fb5037f7865df77cf6f1d8560d72cf5966b615b26e4464c1a52a4b9de534b62e6219ec1dc4821
SSDEEP 768:OP3frzybNb8rBLOeRFZD1fTos7Rjul4cDm74Hg:OP3f36Y1fT/R6Sh7Ig
TLSH
T160F2AE3AFCA49D338CF5D285B14A7A47BFB45563CAC9198845DC5F0F089BBA91307C2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 d41d89b17d8efa8676aa6b01141a9cb63b4695e58bb8b312942f4c8105962ee4
MD5 48ecb03754b7a20f10615aa641c3e773
SHA1 ea22b91bf748646ae99bacafab5761e74f3264af
SHA512 d1312883093ed0854e18d84327e0046fdd59f9a505a00e8d9cd62c2e572c9de9f1b4645736a3fd7d2d7c3bd117ea559c4b1a2a76bc551c1b7c1534c8ca9f8890
SSDEEP 768:NFQK3ZwgUrzybNb8rBUOeRFZD1fTos7Rjul4cDm74Hg:cK3s3nY1fT/R6Sh7Ig
TLSH
T115F2AE3BECE4C9379CF6D680F54A7A03AFF44163CAC9959496DC5E0E0487AAD130BC25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 df25fc7d2befd9be7f55b320f17327e41c500b0cc7f9d6c05baa9ffe785b0ca2
MD5 c2400a4f602eb313c514e0b78c5c047f
SHA1 666776807f1206982dfe28f9e3d7117a6b10e6fa
SHA512 dc22b3e3160f4be4c7b7d0e5aca8c13967abad913951f0501fbd960eb09fc2abdbcda376f7671515f0dd2b60824989d7ca26dc372596d2e9ecfcf8e6a78ee651
SSDEEP 768:2/UxvxjgC+63G8zybNb8rBLOeRFZD1fTos7Rjul4cD0q:rZj3+63GE6Y1fT/R6Shq
TLSH
T11A03B03EF8A46D234CF5E244B14ABA87BFB45563C5C919A809DC5F0E09CBBAD1347C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 d40b723262b32e9959815ac2524bc532e63806e937754b6a5379aaa223e96ffb
MD5 53d36c3eac6254f6994c08afb77617f7
SHA1 51a0d8c41c7cc927113c9f8751268aacca71a0ff
SHA512 d4d49eae483eda772d1f8c519c53e0cec133f7be794fbfa26615b49deae29fc8613d88376da8af50dbd416b2a4e0debf70e08fb946f4f8d85a62856c0db56800
SSDEEP 768:z/UxvxjgC+k3//bybNb8rpOeRFZD1fTos7Rzr/+Pu:GZj3+k3/TiY1fT/RXKu
TLSH
T12B03CF3AF8D46D338CF6E244B20A764BBFF015B39AC91A9809DC6F0E158B79D1307856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4b4c24d-4aa6-4c20-bf7d-f11d91232210.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d4b4c24d-4aa6-4c20-bf7d-f11d91232210.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads