3f5760ac1d0a165ebb877aeb94973b5a59be14b8b804dc4c43b843e60d518c1e

Analysis

max time kernel
899s
max time network
777s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-es
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-eslocale:es-esos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 06:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
email-html-2.html
Size 21KB
Sample260925-gtbe1sbb64
SHA256 3f5760ac1d0a165ebb877aeb94973b5a59be14b8b804dc4c43b843e60d518c1e
MD5 af258acb5fae5762118f1fd1ddf2ccb3
SHA1 a35e693a893f94d223c926b295091b5f18385c70
SHA512 c23f8b462d12d049b7b62514ade0d8a96a3afeedb451b132cea635768953461e33dd2639cdb7f0cbdf18b693c470dee8cdecbad27fbc4e1b67ecfb117242b193
SSDEEP 384:glKRztXc0zxkxhxSxwxwSLi9sNYPIiny9s/R1tiEtdLetdOddzpd+O:+/LpYPIiny9s/R1tiEtdLetdOddzpdz
TLSH
T19FA28531DB6A2D5288F282D4D0235E9C8688B2197316C7C1FB69B97B7CC78A514B37DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1380	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134347923814858206"	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-461973139-3212354679-1508698038-1000\{171DF383-5E8D-4363-86C5-3778761B7C72}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5200	msedge.exe
5200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe
4488	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4488 wrote to memory of 4224	4488	msedge.exe	88
PID 4488 wrote to memory of 1716	4488	msedge.exe	89
PID 4488 wrote to memory of 1380	4488	msedge.exe	90
PID 4488 wrote to memory of 1716	4488	msedge.exe	89
PID 4488 wrote to memory of 1716	4488	msedge.exe	89
PID 4488 wrote to memory of 4268	4488	msedge.exe	91
PID 4488 wrote to memory of 4268	4488	msedge.exe	91
PID 4488 wrote to memory of 3948	4488	msedge.exe	92
PID 4488 wrote to memory of 3948	4488	msedge.exe	92
PID 4488 wrote to memory of 4844	4488	msedge.exe	93
PID 4488 wrote to memory of 3948	4488	msedge.exe	92
PID 4488 wrote to memory of 4844	4488	msedge.exe	93
PID 4488 wrote to memory of 4844	4488	msedge.exe	93
PID 4488 wrote to memory of 1012	4488	msedge.exe	95
PID 4488 wrote to memory of 1012	4488	msedge.exe	95
PID 4488 wrote to memory of 1012	4488	msedge.exe	95
PID 4488 wrote to memory of 5844	4488	msedge.exe	96
PID 4488 wrote to memory of 5844	4488	msedge.exe	96
PID 4488 wrote to memory of 5844	4488	msedge.exe	96
PID 4488 wrote to memory of 3956	4488	msedge.exe	98
PID 4488 wrote to memory of 3956	4488	msedge.exe	98
PID 4488 wrote to memory of 5016	4488	msedge.exe	99
PID 4488 wrote to memory of 5016	4488	msedge.exe	99
PID 4488 wrote to memory of 696	4488	msedge.exe	101
PID 4488 wrote to memory of 1628	4488	msedge.exe	105
PID 4488 wrote to memory of 2904	4488	msedge.exe	106
PID 4488 wrote to memory of 3444	4488	msedge.exe	107
PID 4488 wrote to memory of 3372	4488	msedge.exe	108
PID 4488 wrote to memory of 3372	4488	msedge.exe	108
PID 4488 wrote to memory of 5200	4488	msedge.exe	110
PID 4488 wrote to memory of 2052	4488	msedge.exe	111
PID 4488 wrote to memory of 2052	4488	msedge.exe	111
PID 4488 wrote to memory of 3060	4488	msedge.exe	112
PID 4488 wrote to memory of 3060	4488	msedge.exe	112
PID 4488 wrote to memory of 3136	4488	msedge.exe	113
PID 4488 wrote to memory of 3136	4488	msedge.exe	113
PID 4488 wrote to memory of 5708	4488	msedge.exe	120
PID 4488 wrote to memory of 5708	4488	msedge.exe	120
PID 4488 wrote to memory of 4816	4488	msedge.exe	125
PID 4488 wrote to memory of 4816	4488	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\email-html-2.html
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffba6d0c188,0x7ffba6d0c194,0x7ffba6d0c1a0
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,4230814400538953591,2631898985410426474,262144 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:2
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1656,i,13408645998204326294,579118501242522653,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:11
  2⤵
  - System Time Discovery
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2096,i,17228000344374524567,1322291235222272549,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3004 /prefetch:13
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3608,i,1827042742384969730,9484393959037654947,2097152 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3588,i,12173901814914146257,1424632930673773063,2097152 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4324,i,10262413166488321573,15414452927704346742,2097152 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,16696737012917253780,9207888548402711572,2097152 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:9
  2⤵
  PID:5844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,2349099685644540267,7674880161645559029,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5456,i,6686559069206502336,13543670762046407802,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3864 /prefetch:14
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,12140598408898623051,13877990984302873566,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6072,i,12140598408898623051,13877990984302873566,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,14706581290995583652,9078488515222851132,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,16629120680307367102,166865941455399419,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:14
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,5495316561490516938,18026989999735918933,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:14
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,11322970288493234405,4750413763528495127,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5352,i,11142100405732590691,950553781486266562,262144 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5816 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,16924764711000335179,740819705111877757,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,63247230885961033,5204612931286518728,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5552 /prefetch:14
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,16368631434176649557,16334750184873860763,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3404 /prefetch:14
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,9685725496550378072,11660830410008737291,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=3368 /prefetch:14
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5516,i,17437213015023705533,11910421951339293386,524288 --field-trial-handle=2392,i,15550888867471049301,12164962086034833096,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
  2⤵
  PID:4816

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1328

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:6008

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:5300

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

6007c660-6750-4795-93ed-d85634dd3767.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6007c660-6750-4795-93ed-d85634dd3767.tmp
Size 35KB
SHA256 c1273913bc9b7c07adb14d4fd860e3bcdb9b71d799b1b3f7b361dbdc5cbf18e2
MD5 3b77d40d5e2a711fe2573dddab916860
SHA1 2de6b4560771480a3ce765142afa6d0afc729599
SHA512 fa7eb32b9addd0a4b09f6c90a559b9e5b8b8bd80de428b75180280b77ab82a75a19c47be3042a6da4eb0031efc70a49914f36f2d8c9e532eb8811123f271f5d1
SSDEEP 768:hW3AFgm1uiFKrzDmGA5b65Q92RQMPbcRsyVV:hW3vVAF65dQXRs0V
TLSH
T1E0F2AF72DCA4DDB35CF992C17646B2027FF88123D5CD869094ED6F0E05C7A8A431B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 4fc7dcf7387fe20ebfe8604da12039dc01420b7c4f9203598cac361fa8e97926
MD5 c3187641f7a33614939d03f0d43ad5e0
SHA1 82b3d0d3fa3092b29b9c8b55ce9fb9bba31c9c23
SHA512 ac0b9a042b5883e5cb0458cdeae19e251d85b3b88bb576dec24d66444085275504065eccb22c8674162977df0a0d2f69723a5923be85a9c5ea85f46af2ce9edc
TLSH
T13FD02B3176B99CA1D193103900C286A014BAB000EC0501843A2280050C40109133120A
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2faa1b1440ef2e1a669881f74143ac7857706d1524c89e682f713c8f3d38ab23
MD5 6a131a77b0edda45a2895a3d33a867a0
SHA1 2be1a2b3794fa396138562716cc7e4a4f17caa66
SHA512 20cb3d576349a78e3fec9e8b5e0726835f04e7dd74bb2a15edba4417611cdd35bc2d2525fdae7879e8d01d4643f26df1c05a44fb125105ad0bcee8ccd0257571
TLSH
T1F6D02B3176B99CA1D193103D00C386A014BAB0009C0501843B22C0050C401091330206
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 c97c090746cccfe29c158ade1c7724c5e1af40aee0f9ffa990a12a7d9365c7bb
MD5 ad271f5fb0fb1dd6eb587c7f0e11d52c
SHA1 b541d6724a3d78802f18f78a732ebbe32a200ed1
SHA512 cec099a556791fdd3269126ecf2a4dc91761aae58427846a88ae71bc438943d8cb1880feef6d91cfb3fc5bef126449622a8c91cf3d4bf1b8e5ac3ce3713b2c46
TLSH
T196E07DAC07CAC22FF308E497457A4B4DC3903B1BE2CCFA1A1700DDC97601054B3C2695
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 eb78068e6310215076f38b8441491068a78a25f6e6fe82ee91d3237b5004089e
MD5 47cfb1e7db3fd3e7968717f4549143a0
SHA1 5eddfdda829e8fc0ad1ee37f7b6395e61e8b5a6a
SHA512 ed7cfcd5c50684c4ccff02fab428d3fa905e2629e367dc2b3804058a22304c265c3ef31580383d1af4d2156f3ea3fce6b0ab74c955340afa259a5f731796cb29
TLSH
T1E8E07DEC87C8C26EB30864CB4B6C4B0CC290376BD2CCBE7B3700898DB04A054B6D2E91
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 e606a86c8b94daa0c8b0539d0ad3bc9de09cc86206339c6ea14de1539533d809
MD5 464ad4b59e5c6e8e7b817805c603ad00
SHA1 d1bb9dc1f3e48bb64a37bd43c5c96afd460bbbc7
SHA512 37e1ac17e79600e07958cf7e101b3a9854f6d677eceaf0a5cc26cf937fdd195e7eb2cde5c9e67e8441cab7ec111e7fd93b31fa8d4d0e5773c6aa9303f8f4144b
TLSH
T176E026BA08CCC22FA308784B4168AF4FC2803B1EE2CC6A1A671485887441A54F6A6695
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 794e07f8599f49f434d5247e97fd0480ec12784e11955e5d126a8ec7e7f49fd0
MD5 af1b638fbf2767ecb3215b53a3de47ff
SHA1 9252894f0adbe0bca994089a2ee6eee6e0d8a5fb
SHA512 158742965ebe0b6a59ade5eb5edad632fee172b97945c50c6ff782c10fb3468d6c58556cacbdfef2ba48f75b72619c13af116a082ff515fbc870e519efa363d4
TLSH
T12F510A98616E0054C7A9017FF7F4858B7A3CA882724F3E732D68D4BD484E3FD896C108
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3a3b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3a3b.TMP
Size 3KB
SHA256 446659c4a78e23afb27e47759ad1ce6f67ee56788a5d440e3566ff0cb12676b7
MD5 032415bff216fd2a90bb595e7c4c1781
SHA1 33506a052292de4a04273f61896592dd971e34ae
SHA512 95e040631a2c9d338c32ad873f80de49a64f0b84b0ebf79f1be3eb7db31f475d6446db1e893f51d905cbb3e5ac117391903d2d65326ee855ef0a67efb265f2e7
TLSH
T1CE51EA98656E4054C7A9007FF7F4858BBA3DA882714F3E732CA8D5BD484E3FD896C148
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 79c0a74febc96eeb26e22711c54be6d35b4eb2506dc252f937db290e95b95728
MD5 131c5c7aabcb4df3c6cecebad9f1d2bf
SHA1 f1e0662eac6c64655037689cc722e08ed6e125ba
SHA512 b0762e327c22f3c279c0044b75ee41f33633cfc0a82e4b21c838016085c7b559583e7bacd2fe7e5f03bad6edf67ac94b0badf80c88eb21f82ba5f74dee272ca8
TLSH
T1F431C0F7C3E8863D8A0152F4BB082F1BCE2D0855532C3C5AC4E49E1F93E24B1D14095E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 a666cbb21ebba0969d8fd13a725ac22cd77d676ae30299d462c4fa69896cb528
MD5 78b33ec8c3e650c2b8e585ee311ca811
SHA1 2848d7396af3f28541cbd0d3a67d67471d4fdd4b
SHA512 3fbfd45add0b00c2c457c19cefe1f291f00cdd8ae38e65c011385da777fdf282d0b35d69171ab697b070694bd4198c4500bb39ebfca7a0d14fc357feeac26fb2
TLSH
T16C41A0F7C3E8867D890156F4AA186E1BCE1D0955932C3C5AC5E49F1BA3E24B1E140A5E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 1afee5d9129c1f2c168acf24a09da553ca49e96c058b44cdb5ad9df29893259f
MD5 88637807885c041369ac2fc7ead889c7
SHA1 41931deaef4644e19bbe5241c71283d8ba3e262b
SHA512 83456a85555d27e03760b21ef88f09e2881c5b92202fad746b0917c3d4692ab7ece93b53a2bee546e7a304f64b7b3316cb6f6cbe68957e729abe7e75a9975d63
SSDEEP 192:sxRombO/fs1shyYhyzoA8p4T/g6+WNIY2Ec2GhIgDVJ:sxRo4O/fs1shb/u/5IDbj
TLSH
T115329715AD28A93B9CCBE21DBB657F53E6F9503360911E48A6FC9A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 948362c6b47a1b6eef98e3267faaffe5ba25d268993321908d4f8617a44ed211
MD5 bcd2d700bd6a9956975fdab867136c0f
SHA1 23af75e1c84213c0444db7aa0105dbc4f9c33220
SHA512 16942064fbadfa244960bd641275c965319c387a38dbfc58caf634d131f829f39e5ee28cdee51bddd18e97b46b86ee35d3d947e3b5c53b54d32be143d352acda
SSDEEP 192:sxRombO/fs1sTyYhyzoA8p4T/g6+WNIY28c2GhIgDTJ:sxRo4O/fs1sTb/u/5IPbJ
TLSH
T1DA329715AD28A93B9CCBE21DFB657F53E6FD503360901E48A6FC9A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 a6e2a5b92e728fff3728380910bd36423fe375ebb6f430dbf231ae4a7c17188c
MD5 03b32d66b3f14203c6a40a1854e84a72
SHA1 cb86ae4e38d0f02460d9f35c245216139293b594
SHA512 265697285aed54c4e8779c3730ad6255d2387f41659a96d72f1fca09eeb391840ae617bf09d9ee2812856b074879ab01b7d9edeae8683f18a11877c7a6bd2b1d
SSDEEP 192:sxRrmbO/fs1suyYhyzoA8p4T/g6+WNIY28c2GhIgIJ:sxRr4O/fs1sub/u/5IPbs
TLSH
T16D328715AD28A93B9CCBE21DBB657F53E6FD503360911E48E6FC9A1C04E76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 23KB
SHA256 3143e817b6791fb5955084896c53361a8ea30b70bb03a654aaec45331673d7f3
MD5 c61499afd6851f5845a87fdde5b55d0d
SHA1 e3ef8c5b65d8992ccd4100d86abb9987a5993f13
SHA512 69b8846f9412dd89c37585c4e8c06358fc7773d794eb13dac6dbd2bc002d41c1d22fc4d157b05f8310e1cecbdaa5ca512abd6dbda473788b34a2131cfe6e895f
SSDEEP 384:LbnaaCTfCtgp/FfvDKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVPH9NvRWEroHrZ:L7aaCDWgptfvD8F1+UoAYDCx9Tuqh0Vf
TLSH
T11BB2EA2F640CCB7E8FD00A9DAC196F977D9802C796588D4047FE994C02C7BEA911E4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca3c23a5-0b45-49bd-9fac-532a302f4fc7\index-dir\the-real-index
Size 144B
SHA256 12e0397431cee76fe1508f4a5b240f322e4899cbd4eb75ee2399cddbdd5b2818
MD5 cd3e945ce70257ce81032c3626f21bae
SHA1 d81f64c8989fa51e8d93d41f70f111c4ba539372
SHA512 c64a9ce560abd08f51779f6f7476cd3dbdc46b8c1115e35beae8dcb4732a518c748a04e779c9e3bb5dd99d7bfb4cec7ef889aa2c74bef4fc376b6a0ae773deac
TLSH
T1D8C012248C22658DF8598D3924BF62311A250CDE2114A25700EDE044BCB5AFDD16B304
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5e7be5.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca3c23a5-0b45-49bd-9fac-532a302f4fc7\index-dir\the-real-index~RFe5e7be5.TMP
Size 144B
SHA256 e1b54f88de01c15642da5f8071e4d5f6478c3ec7fd7cb255ac1d7b5d98fff96a
MD5 06bd3715e0b30e13df07690bad3eacc5
SHA1 715336036e8ce005b89176f7fed6ad6e7b540f6e
SHA512 0b0e0d56487d7e24eedd4b55c477d96e5d3d5766f4f10a7eb0d7dcb8ab97e5ae1076de39864b369edfb975b61c5231793205eea1f45f21bf63bbb1e6edebe9ba
TLSH
T145C012388D11A081F85A857918CF117115214C18E4243A6B01FEA0906CA3EB8C257301
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 370B
SHA256 bc9b7dfcc5165c2045bac861edb70a02d1673e9b0896ef172b00b60c23414ca2
MD5 147f1f845e81b3973762865fdc706566
SHA1 b0a7309342dae366a0f13311546e633a3bf23f89
SHA512 3b73c143cae381ecaa8e2cc6a1ce4c3ba04942fa1f388e2c2bfdba16323739c07b3c267101b4833ef0e93f6237ce40621bd6c2f1d869f0770515f4e9df0a0751
TLSH
T182E020FB7DEA1420FA6B9BD6743261B545467D14D944EDCF20FBD3DF60617112406C22
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

e08dd1d5-10c9-4d0c-8f9d-aaf0eac81178.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e08dd1d5-10c9-4d0c-8f9d-aaf0eac81178.tmp
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 c15e0008fbaaeb4cd97cb6eee9eb16a98814178480ace6e1ed19e75d530fe138
MD5 070d3ab5b1398729a730761da20fe75e
SHA1 3ae1ff5d6d15006ab48a8af249b60d8abdc0ea21
SHA512 b7b2ed1b0a98dbf1ad57d1ccf5f7f79afa6296dc3cf9c8e94bc9fb4fbc7ccf0f277f5f8f7697d2c2714b0ac9d6663514faebc250c9fce7310ff70289ebcc54e5
SSDEEP 768:yW33Fgm1uiFKrfDmGA5b65Q92RQMPbcRsyVV:yW32ZAF65dQXRs0V
TLSH
T151F2AE72DCA4DEB35CF992C13647B2067FF88123D1C9969098ED6F0E05C7A8A431B91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c28a1efcbd642820a249b634190bedc2e7bd732cc5bb36e3b0583a5edf03a218
MD5 9a9e5c0f3c8e70fa8a3158fcd1ff4a2c
SHA1 4786baf02149d6472c95fb27a293aef41aeae83f
SHA512 2eb9685406f3c4eefa4867c3d9dc07eeb4cc93ca0eade8763046f51e06117af6a1800c31c2caa7cc40d28c5aa16684913923c060a2e0c8765bd32d4a56b51b4e
SSDEEP 768:dFQr3CwgPFgm1uiFKmDmGA5b65Q92RQMPbcRsyVV:sr3QAF65dQXRs0V
TLSH
T1A6039D739CA4CEB7ACF99AC1764672027FF98163C4C9D6A0A6D96E0D01979CD030BD17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 b9a8cd428c0709c85cad5be89244375dafa819ddd388f54626816ee83593c7ae
MD5 1f32ad9a76aa316e0cde322e055a09a3
SHA1 ac4ac47585946dbf92858ebf6ca31665c7740e38
SHA512 6e5ff01336c4bd330d30346599dbc8aea26fd3d1d1770a4ef198f5593322b3442e7e13cf4ebcf7612afb9d375cd1b50ca3c206e08842411c5596581dbd70d9aa
SSDEEP 768:U/UxvxjgC+B3CHRogm1ui6tDmGA5b65Q92RQMPb7rFj0O:BZj3+B3Op3AF65dQsFQO
TLSH
T1F303CF36EC94AE77DCF95280374BA35AAFF84573C0C855A049F96E1D06C768C530B85B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

217235e9-25e5-4232-a44a-393bbdb36d5f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\217235e9-25e5-4232-a44a-393bbdb36d5f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download