07fe2823f6172c1d72411a3c897e73a359d6342e7d4311904db23874e83b2163

Analysis

max time kernel
898s
max time network
732s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
26/09/2026, 22:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JTUw3A4J.html
Size 2KB
Sample260926-16splssfnc
SHA256 07fe2823f6172c1d72411a3c897e73a359d6342e7d4311904db23874e83b2163
MD5 b0bbfde8c8647ca3b640607c47204bc0
SHA1 279d84ecec5e85ef3c1c0b8b9134434782f86e91
SHA512 efd796d82b168f8bcf59b36f8f10f8dda5954fc69a555124e38b6bec77c08ccdc972767f14512c8a20d47cd0351a8fda46a6f169f191f3c2163d0b6ce7224cfd
TLSH
T173415323E904801542B5E244B4E9B71C8023938BDB7248017BB475EF92C7FE1C2762E6
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4476	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2714045687-1127350534-2056456672-1000\{796ED15B-C0B0-4091-991B-C6055626209B}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2714045687-1127350534-2056456672-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1284	msedge.exe
1284	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 3712 wrote to memory of 4928	3712	msedge.exe	90
PID 3712 wrote to memory of 5384	3712	msedge.exe	92
PID 3712 wrote to memory of 4476	3712	msedge.exe	93
PID 3712 wrote to memory of 5384	3712	msedge.exe	92
PID 3712 wrote to memory of 5384	3712	msedge.exe	92
PID 3712 wrote to memory of 700	3712	msedge.exe	94
PID 3712 wrote to memory of 700	3712	msedge.exe	94
PID 3712 wrote to memory of 256	3712	msedge.exe	95
PID 3712 wrote to memory of 5764	3712	msedge.exe	96
PID 3712 wrote to memory of 256	3712	msedge.exe	95
PID 3712 wrote to memory of 256	3712	msedge.exe	95
PID 3712 wrote to memory of 5764	3712	msedge.exe	96
PID 3712 wrote to memory of 5764	3712	msedge.exe	96
PID 3712 wrote to memory of 1936	3712	msedge.exe	97
PID 3712 wrote to memory of 976	3712	msedge.exe	98
PID 3712 wrote to memory of 1936	3712	msedge.exe	97
PID 3712 wrote to memory of 1936	3712	msedge.exe	97
PID 3712 wrote to memory of 976	3712	msedge.exe	98
PID 3712 wrote to memory of 976	3712	msedge.exe	98
PID 3712 wrote to memory of 1320	3712	msedge.exe	100
PID 3712 wrote to memory of 2164	3712	msedge.exe	101
PID 3712 wrote to memory of 1320	3712	msedge.exe	100
PID 3712 wrote to memory of 2164	3712	msedge.exe	101
PID 3712 wrote to memory of 2732	3712	msedge.exe	103
PID 3712 wrote to memory of 2664	3712	msedge.exe	107
PID 3712 wrote to memory of 2616	3712	msedge.exe	108
PID 3712 wrote to memory of 560	3712	msedge.exe	109
PID 3712 wrote to memory of 884	3712	msedge.exe	110
PID 3712 wrote to memory of 884	3712	msedge.exe	110
PID 3712 wrote to memory of 1284	3712	msedge.exe	112
PID 3712 wrote to memory of 5808	3712	msedge.exe	113
PID 3712 wrote to memory of 5808	3712	msedge.exe	113
PID 3712 wrote to memory of 5984	3712	msedge.exe	114
PID 3712 wrote to memory of 5984	3712	msedge.exe	114
PID 3712 wrote to memory of 2940	3712	msedge.exe	115
PID 3712 wrote to memory of 2940	3712	msedge.exe	115
PID 3712 wrote to memory of 3888	3712	msedge.exe	116
PID 3712 wrote to memory of 3888	3712	msedge.exe	116
PID 3712 wrote to memory of 1784	3712	msedge.exe	123
PID 3712 wrote to memory of 1784	3712	msedge.exe	123

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\JTUw3A4J.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffed4f1c188,0x7ffed4f1c194,0x7ffed4f1c1a0
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,6808651667927699406,8739175360927359994,262144 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=2576 /prefetch:2
  2⤵
  PID:5384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1872,i,16913027110615565389,1917777721384049072,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
  2⤵
  - System Time Discovery
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2248,i,1267618205446392801,12860014476547874186,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=3044 /prefetch:13
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3620,i,17029817491055199498,17729861317753978128,2097152 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3624,i,9598142898264191933,12730770519958049612,2097152 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4252,i,14070435170762532244,15532552378294776542,2097152 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4332,i,15717587503964841423,4949740090569600543,2097152 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:9
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3772,i,18394585002830376788,5900537135208702717,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:14
  2⤵
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3612,i,10590569741754636133,1262389446259429393,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:14
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,12374028224811162960,7088116169804857102,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,12374028224811162960,7088116169804857102,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=6064 /prefetch:14
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4844,i,18333925977176747860,1987380183823261124,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:14
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,7995582665742582675,4157864589890431076,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:14
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,3037062262455502680,2733742385264204801,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=6580 /prefetch:14
  2⤵
  PID:560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,14559836405085989620,5920090785059749292,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=812,i,163419468866818128,9230323790225563832,262144 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:10
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6464,i,9767624552527452917,12318264089146551220,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,2757744566377652012,17179371892651701272,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=2884 /prefetch:14
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,14845097052444151409,16038053592393526944,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,9860429652951794330,4106795384832834438,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=1100 /prefetch:14
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,5188895416909159001,8220111060369324443,524288 --field-trial-handle=2592,i,17016297834752024642,8285214946679035417,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:14
  2⤵
  PID:1784

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2004

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3692

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2036

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 355a29997d085f70c135b61fb8e48fe3b3d9b6030190662c9d930bd533b88c78
MD5 5121c8953b32388eb96bb70d0d12fd00
SHA1 e62d74f75b188deb1ec8b8dabcff7c16e7ba9ba5
SHA512 c8f0ff682c9ed7e02559e599a97078b0a2e39f928b301598e0196d5d9dd6ffac13da9bd34262b0120793cb2472ac6c7a93a178d4abcd0a5a2c6df1e9a193de10
TLSH
T13CD02BF4528C9C63C4CA30740425458100263401B948D2903501478849401B914433E7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 97f58c0ff1008d9a744980b06de74b1bc42fdd2408c0871566ecacc80738c498
MD5 ffa34db42a6c31e411546fdfd8772d96
SHA1 cd3fa45407492f90d8b070cf009147d20a8b4151
SHA512 72fd2a1188869d257eaee37d23569752bb0744ad1a5cad19b6a4b2e60f4d5f74f1ccf0a0b24a6e31d4d512e939f7b384fb86433ec7496296acb712e8334d5e32
TLSH
T18BD02BF0529C9C63C4CA307804264581001634017548D2903601878849401B914423D3
MD5 SHA1 SHA512 TLSH

Submit Download

3aef9e8b-746e-4691-9408-05c0379710e9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3aef9e8b-746e-4691-9408-05c0379710e9.tmp
Size 23KB
SHA256 8bc4d4cee2d6c816333e5c1fea71a7a728b8ede731de2d401abde0d004987914
MD5 b38035a3eab1047a456db68d3fb7b626
SHA1 53ceafa2b87d8536807e7856be273524749c6c36
SHA512 041cfa3098b1b44c750a22d57b9374fcaa25c8cefcce191d4b67945a295d65cbb13ed51d77a9d43198972086cc47c09e19218c4c0e00491548d4542c550deb48
SSDEEP 384:dFIGx9efCtgmkFfk6KhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OV6W9G+RhKromLk:dmGx9sWgmMfk68F1+UoAYDCx9Tuqh0V2
TLSH
T123B2DA3B644CCB7E9FC00A9DAD196F9B6D9802C79A588D4047FA984C03C77EB911A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 190b0d1758eaac2cf6ded22485ace55136b5cbf46ba3795b86c1bbd5c39af78e
MD5 e67f89c178f1c594fc4ed3aa011fae53
SHA1 b7c933304331d7362e61669190493e5521fba60a
SHA512 d3955f229a498ad62091e3634764961674c56a332a129464d1cc714f4bc8a1acd1bf224a321e0b8ce4952827f23fc9ecdc7ddd4d7f02764a55286c8b5bd4e69c
TLSH
T17AE020DE14DCC71F7100748782F4578DD2C0370E92CCBE65270094C9B5816446691DF1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 d05aae7c840e536146edc1731e34da0470afb6d8c201f375c049b76e576a8de9
MD5 55f81c11497aa2656310f231f89438a9
SHA1 7d30333fbf50e9b442cfca3ff50d2004f8fde17d
SHA512 3a5914d3755f3a61c59ffb6a93f25aa918c455010058ffe1cf45366e23f1bfb8eb817b853fa31385911b9060deb905226c6fd6e3d32f88980b67a78f5cb5c2fb
TLSH
T154E026AD09CCC36EB210748741B8478D9280374AA2CC6F2A2B0884897082A50B782AA1
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 9483e76d0bc10a272de72f8ff726af659efd798721220bfe462b8d1f5842d829
MD5 b96394f8abb53ed649d5028307368195
SHA1 b61802b41a3f7417b70d1a2df2d4eee0a3461856
SHA512 b3c82f6492c643d1dea01f312c36105f5e29633063a36a83c4673242662426c378e2cf39a20a65993970d379426c40a36caa0a739e5a89e8b06e1fbc4d09c10f
TLSH
T1DFE020D95AFCC75D7140B4478278574CD2C0370F96CC7A652F04988E70415406681965
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5002863b455cbe42249e09eef036838943c8b4576c2f59fefbabb477642bf1ae
MD5 8b071427b5b2a749282fc6090f7188df
SHA1 0303f00aaa8fa8c2d7f29acff77027382c8777a7
SHA512 9533ba707a04ca99f55252a706db146a11ab361601639dcfbfd9e18a243aa6bd144525552dab4644e326cefbf67e6af5f36203c1c21c8a4fe9bf15347183a46b
TLSH
T17A618240DF508274F7B8003380D0FCDF363382B699470D5E2658D4B8984E3B583B5587
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a648.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59a648.TMP
Size 3KB
SHA256 f0a9cf1fb50a1e355d8a71179f0f060d306e782a12f21c2b198735eca8924a5d
MD5 86981927648db8391a4270ad01a2b28a
SHA1 0ef03b6248a43a1e18ac6b134636f8329fc9cc38
SHA512 6979dd6e468bb402d5c3a79ba300c8e787ced89ad02f08ec8ebab04c8e60345fb63a6ff77e9df52dc8778cf62e4a7397125b8c4283f24d704733189966a62503
TLSH
T1B1616140DF508274F7B8003384D0FCDF363382B699471D5E2659D5B8994E7B583B6597
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

56b788e7-8a37-4045-8f09-32fe1788e930.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\56b788e7-8a37-4045-8f09-32fe1788e930.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 3901279382cf127c1d8a3db2b93768fcdecd86ae1c00e5e770e4f37c1ecd256b
MD5 17dd35cf0119f4c8a14f97c150cae239
SHA1 06748be5221eeacb0d8a00b23b34fe91124db00f
SHA512 a6352d2f40249ce0abcc5aa4e22355401715f232df64b43f7e9e88874ab801b6347cf618b7354e8a67386bc9e0a75874b13e0ebd58f7cdbca5a676f82a56f261
TLSH
T1BF419EF3C3E4867E890156F4AA146E1BCE1D0915432C3C5AC9E4AE1B93F3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 e4cf303b884394ba43c1a3ec8e6666d664dbe5843f3ece03f1a828ee53699aae
MD5 0bd8a0dfe679fd5ba18581ea577c25db
SHA1 522e8cc97ee168f0322513b0cbd371166d6eae74
SHA512 9d88f50b1e0fffac62787f87514cefcd8363d59ad073ee82dc5c45fcd49e6a3f65d202415d31fafcc7ab25ff7ea8b86daa3c2a54c9af4d3c6f65b85676401293
TLSH
T1E941BEF7C3E4966E890156F0AA14AE1BCE2D0915831C3C5AC9E4EE1B93F3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 af16a00cd4f6ea7bb0a7bf53162a0a09b3d920d2a246b8c0a756b27cf70ea4b1
MD5 cd93dfbe130078cbf84802a785b61d0a
SHA1 3083825c7139555f7f5eb0d080f80f9838794c38
SHA512 42582a5dbfc607cf8d057b71cd205e75555d680aff61fb0cceef207a18b620d4e3ad4d3bfdba37a728515822a0878fab1b9b2d10c7fd8804fb519416945048d6
SSDEEP 192:sxR2RDbr/f7s4m4zoA8p45/g6+WNIYtfbG0IgIJ:sxR2pr/f7s7BM/5Ics
TLSH
T18A22A615AE68A97B8CCBD21DFB55BF53E2F95033A0912E48B6FC861C14E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ed0106ff59f7db02913a19ef02e264c97bc9b781dcf70879970f5cc87f559c99
MD5 44d204885622ca0a47df97c6e200ee02
SHA1 229f1cb07ef1a75554aed8870f1e6add6ae0db60
SHA512 dc23a9688c4bf43ac35d72f202a3c45544b0518e4440cf0c6fb950edec3198a780c78bd3783578f07260ea489f17d842fc1f1e64ad3c90e916bfd345e5fcda2e
SSDEEP 192:sxRxRDbr/f7shm4zoA8p45/g6+WNIYtUpbG0IgDpJ:sxRxpr/f7s0BM/5Ifnv
TLSH
T11032B619AD68A97B8CCBD21DFB55BF53E2F95033A0912E48A6FC861C14E76DD1207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 4bf56d910deedde2ac4267f762a9de26c0b04ba94bc4ce7ddfa36683cb7f7743
MD5 789822f233ef574f4dd8ca1f8865e673
SHA1 bd120b0fad02fe6055a34a4ab17f97f5b1b93e6e
SHA512 192687e261ccdcb2b82745b4220e443fb49270b83a8cee3db1593bc779d0c35d02ec29bb1d66b27e074dd05ed81f1d90281eb1ab129ce0442cac587c244fe205
SSDEEP 192:sxRxRDbr/f7skm4zoA8p45/g6+WNIYtfbG0IgDXJ:sxRxpr/f7sHBM/5Ic1
TLSH
T1BD32A615AD68A97B8CCBD21DFB55BF53E2F95033A0912E48A6FC861C14E76DD1207C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8d842b78-cf47-4cbf-87b7-cce2b61bd4a9\index-dir\the-real-index
Size 864B
SHA256 16b8b1e9a1406b2552934947bbf8e94d48be9060a360c22be4d529cdb0936cb5
MD5 b525081a032dd57464581c1c676be8b4
SHA1 04f0309eeee97f999ffea465287a3ed227d8544d
SHA512 0700b06d722bf401be8283f63974f05629f15edcc1eb9662cadd257b7f89963368b617ed763bc0c49fa3d2356eceb7abdf9c99b7fd2c54b9528d12df46c1a4c2
TLSH
T1621102AA4E925E0BED641271287DAD85A13901CC5341A65F61FFE22EACD3B48AC81A54
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5de7a3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8d842b78-cf47-4cbf-87b7-cce2b61bd4a9\index-dir\the-real-index~RFe5de7a3.TMP
Size 864B
SHA256 a45d118d69b4441d5cccfeb5260250b83ea694c8b15eb7317724c66bf8d165d1
MD5 1e8e84deeb8fd7e56d79cc930e4f1e55
SHA1 72621fa687ee6a8e8270ad8ee157e53eec8f3aea
SHA512 2676b1f868918b943adfe69c8d2c6b4c908d9ddf9e2215a606d3af43f13ffeada4f5b09f7551d85ccffed123f9797b7da69db0bfddfd7ef081e5d7812e1c8d8b
TLSH
T1461102A601635A46EC4802B1997CAA95713551045349A71FD2E7A46AAC90B84AD82F94
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 31783fc82528adc10d7477c68d7a4704d627983560542550e0145279f4daaf35
MD5 a5469cc6912c7ca3f7076f24c231cb1e
SHA1 c58d9f340d50dd1ddb05360ce108df70c93d6bd5
SHA512 113becae19b32214f18cd8588a40d593889c6014320aac77960376760ec602b002fe7b069246caed4229ef90e7ab1914542e7daf0a6aede60fc8a369de28e17f
TLSH
T189E0D8BB2EE72810E8AB97E5107184640445B868C914ED6F603ADBD7E061B553557C21
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 dea68a5599464cfefcc5e4f3c69d0c27606ba3441d4d452cf924cbff7a57d165
MD5 afb74f8cb429047ce19aa4446d773925
SHA1 c9a962bfc4da47bce9a7de3b8c5ff9ce30ea78f4
SHA512 e6d5b251d377cb9833003bbda8d5bdc1463d1d0ce2eeac47134e6908c28e76e1ffd23c0798083d62130049c9f7774e11e7f3b8d258e5f1428feed54932e7c855
SSDEEP 96:Kc6QKnqmCgAKFyp4T8I+Km0mqB/sQ0KExsm0QIIBeopJ3Z3s3z3H3Z3S:mL3ApV
TLSH
T1E291836130B75600387D360990E5AB9F534233A7341CE56B7FAA40628E6BE0C4EFD8DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 e4ebad0f33423b29fb64e25f536350acf39adfa1cfeb25870c6175a18119b6fb
MD5 d8bbc049c312a731e3dbb6d80ef4ee70
SHA1 57cde353c65f59ce957bbcbf9e45063c5adc1850
SHA512 19087524dd01e3845de992f4884c7546677ce66decaad0e7dfda4c67509f0ce876a12eae98fcb7215e3727f0997eb3a80535a4ccaa97dd49ec3de70a821ad227
TLSH
T14E81646130B76600387D360890E5AB9F574233A6341CE56B7FAA40628E6BE4C4EFD8DD
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

40c960cc-478e-4aa9-82a9-63949430dc17.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\40c960cc-478e-4aa9-82a9-63949430dc17.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 39KB
SHA256 638763d9ac630e4d06da0b10c86da89c07562f7f6e7175a54885531d459a4442
MD5 4207178f2c1bffd120fbf98f163fbce0
SHA1 562216f3f5dba3ede2207be5d7de53597502dae5
SHA512 bacf5e50800c62d8eae9fe42161c41fe900f43bdcdf03ce9e3afe88f49b42797e639360dc07840cd65a5713d6a4c75df236a33a1647873053a4008ad1685ad80
SSDEEP 768://UxvxjgC+e3tJAoFKnJXUaoxDc9bsMSJz/Fn/qInz:SZj3+e3An5UZVQbs7JTgwz
TLSH
T1DC03C039ACA09CA3CDE3A780768BA647FFF44923C5C9299845D96E0D06CB3EC5307C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 bcd2fd48e8054006a9a1c3e22ebffc9c3a20d1441fe48e1a6f8aa09e80118f76
MD5 988da2e6cea37024b721d68d56cfeca3
SHA1 0b8fd7055a00002ff316f97950041b45c6515d7b
SHA512 006506d26b8c6fc4f3e4ff5851184809f9b0f76d35942e583968b02d0434430944bd0b65b0b71e1ed5a7dca4c2f38b40aaa831f99eeb387ddf2900549dce4797
SSDEEP 768:B/3kJAbFKnJXUalxDc9bsMSJz/Fn/q2swMI:B/3rg5UKVQbs7JTg2swMI
TLSH
T1D4F2C075DCA08DA79DD697807A8BB6037FF48513C9C96A8494DE6F0D02D72ED1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 36KB
SHA256 c0022ab250f29a3006743fd766d1bbadc763e2bbfb75605e8df1841d123db2e3
MD5 5b7f1bbdd6503147ebeba41dedda2c95
SHA1 ed33461dcc9d7e86bc2dd5c228340dfb5bd867d5
SHA512 36d5811ee0e61dd9e27b088433f8b499f5a6ad37182dc8bab247b2aa589ba49410007f512a7bbb3156a3b666d6ee7e728642d83690980bbe1ad92095911faf4b
SSDEEP 768:9FQS3cwgDJAbFKnJXUanxDc9bsMSJz/Fn/q2swMI:MS35g5UUVQbs7JTg2swMI
TLSH
T12803BF769CD0C9BBDDEA5B80BA8B7602AFF04563C9C5A684A5D96E0D01972EC1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 34KB
SHA256 007f0333f51e4774fe43a9976fe700222de0c95f00de141318aac8fb594f381c
MD5 e7496500435162e0ace541eb36cc8ad7
SHA1 9ff2aeb0454b22256d7be72af50284cd81e80be1
SHA512 47695483dcb0417d630599447b84798cb26d2c4ba5a02c2ac5ce40ef3bd805e3d9edf264fa1455b65337bd0fc7d735e7fc8d94bdf68cc6f5bc5b30d612e6639d
SSDEEP 768:T/3tJAbFKnJXUalxDc9bsMSJz/Fn/q2swMI:T/3Ag5UKVQbs7JTg2swMI
TLSH
T149F2C075DCA08DA79DE697807A8BB6037FF48513C9C96A8494DE6F0D02DB2ED1307C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 ef9f5d3af9d343c4dfdd968ec32709201478a3bb0127f09cea2d1fc04ca17a54
MD5 fa2219d37f30c6a80f3ee200b5f13a91
SHA1 d89be088c62d0c3795dcf33d641a8a2df55acb09
SHA512 fa1beaca10ffb56d16d0faf233df327453252f7899873dfeeb460b71da4e41396bcc5e5514bc109139e0cbbfa85e0065456bce5c2b92e05e03e4740afa9f5b84
SSDEEP 768:z/UxvxjgC+U3v9KnJXvxDc9bsMSJz/Fnn3SHXPyK/:GZj3+U3c5vVQbs7JTBSb/
TLSH
T1CA03C03AEC905CA7CDE767803A8AA657FFF44953C5C629A885DD6E0D07C73AC1307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download