013fbdda61cfe608191d1b75f870ad021c9b518772976295758344bcb3dd926e

Analysis

user interaction
yes
max time kernel
135s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 11:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 2.1MB
Sample260930-nlal3stdka
SHA256 013fbdda61cfe608191d1b75f870ad021c9b518772976295758344bcb3dd926e
MD5 2f86e2f2bd7fe6bf83b1749fd16ab857
SHA1 8493af607b7d3ffa5a8cce67e9bb8a358e0c0e72
SHA512 769cb3ce98d13c7b406841b7c1d0066add8b9c88dd30af83d1d5f90eb890aac549d40b9aed40f8fd854128a25cfc5ac592fdb805599c0356a0debc50080e1e79
SSDEEP 24576:gdm5EAzhNmQGv0iCyP0hOd56cRRz5rB3PygtCdaSqSgQhLQhe4NjCPw0R+DQuK0o:gdm5EA9e6ckaSqSgQhLQhIPL
TLSH
T1A3A58D543004843DDAA723AFB3497E6CFA666503CF9229DDFCED599457C26FA029330A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4724	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{FD93F82B-AB42-44EC-9317-211F1790FC28}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3108	msedge.exe
3108	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe

Suspicious use of WriteProcessMemory 44 IoCs

description	pid	Process	procid_target
PID 1072 wrote to memory of 4752	1072	msedge.exe	87
PID 1072 wrote to memory of 376	1072	msedge.exe	89
PID 1072 wrote to memory of 4724	1072	msedge.exe	90
PID 1072 wrote to memory of 376	1072	msedge.exe	89
PID 1072 wrote to memory of 376	1072	msedge.exe	89
PID 1072 wrote to memory of 1544	1072	msedge.exe	91
PID 1072 wrote to memory of 1544	1072	msedge.exe	91
PID 1072 wrote to memory of 4932	1072	msedge.exe	92
PID 1072 wrote to memory of 3372	1072	msedge.exe	93
PID 1072 wrote to memory of 4932	1072	msedge.exe	92
PID 1072 wrote to memory of 4932	1072	msedge.exe	92
PID 1072 wrote to memory of 3372	1072	msedge.exe	93
PID 1072 wrote to memory of 3372	1072	msedge.exe	93
PID 1072 wrote to memory of 2464	1072	msedge.exe	94
PID 1072 wrote to memory of 4716	1072	msedge.exe	95
PID 1072 wrote to memory of 2464	1072	msedge.exe	94
PID 1072 wrote to memory of 2464	1072	msedge.exe	94
PID 1072 wrote to memory of 4716	1072	msedge.exe	95
PID 1072 wrote to memory of 4716	1072	msedge.exe	95
PID 1072 wrote to memory of 812	1072	msedge.exe	96
PID 1072 wrote to memory of 812	1072	msedge.exe	96
PID 1072 wrote to memory of 812	1072	msedge.exe	96
PID 1072 wrote to memory of 2284	1072	msedge.exe	99
PID 1072 wrote to memory of 4596	1072	msedge.exe	100
PID 1072 wrote to memory of 2284	1072	msedge.exe	99
PID 1072 wrote to memory of 4596	1072	msedge.exe	100
PID 1072 wrote to memory of 3120	1072	msedge.exe	105
PID 1072 wrote to memory of 4940	1072	msedge.exe	111
PID 1072 wrote to memory of 4940	1072	msedge.exe	111
PID 1072 wrote to memory of 4940	1072	msedge.exe	111
PID 1072 wrote to memory of 5172	1072	msedge.exe	112
PID 1072 wrote to memory of 5172	1072	msedge.exe	112
PID 1072 wrote to memory of 5172	1072	msedge.exe	112
PID 1072 wrote to memory of 5616	1072	msedge.exe	114
PID 1072 wrote to memory of 5616	1072	msedge.exe	114
PID 1072 wrote to memory of 5616	1072	msedge.exe	114
PID 1072 wrote to memory of 5456	1072	msedge.exe	117
PID 1072 wrote to memory of 5456	1072	msedge.exe	117
PID 1072 wrote to memory of 8	1072	msedge.exe	119
PID 1072 wrote to memory of 5972	1072	msedge.exe	120
PID 1072 wrote to memory of 5932	1072	msedge.exe	121
PID 1072 wrote to memory of 1708	1072	msedge.exe	129
PID 1072 wrote to memory of 1708	1072	msedge.exe	129
PID 1072 wrote to memory of 3108	1072	msedge.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2ac,0x7ff92094c188,0x7ff92094c194,0x7ff92094c1a0
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,2269116503533944515,17304231044808281799,262144 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=2928 /prefetch:2
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1964,i,12700885708396956378,788874540429228378,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2348,i,8559181623680759684,10549464723194159940,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=3028 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,15765700239994737625,11960746046289227770,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,6214246377910665907,6457851640701348876,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,5310941021565513349,3884535240573363635,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4180,i,2188846279964784388,2586032237402362991,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:2
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3572,i,17234331396517504745,14846300241825659224,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,14382661224879532401,806081978619748194,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,8931640252333165738,4232405324686338023,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,4626291636203435418,12364556518573844935,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,4626291636203435418,12364556518573844935,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6476,i,1856748124566842551,6427321852952414612,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3372,i,4738195462531029358,15341333806243248479,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3708,i,7655831798511321599,3303129429062595746,2097152 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,7100910597302286618,5252744728927352752,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=4488 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6216,i,9723875362097642286,10270180395357207747,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6220,i,4583437839216282688,11387399796136106141,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=4248 /prefetch:8
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,1997605285045819559,7167612286025949513,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:8
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4240,i,10438945910502178344,16467315290160476051,524288 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1204,i,3232929333670933050,13299692001172799172,262144 --field-trial-handle=2932,i,15719004930405097094,669367106347467074,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3108

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

f_000083

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
Size 24KB
SHA256 19d95357b2648a805bd609b7732489af6fb037ec53a704d56d08e5fe70b78430
MD5 3432608af470bbca69013983170bf818
SHA1 ed0042b8f92c8b23430b81c4f89f5e043ab972dd
SHA512 0e9862974a5d8142511b0f586923b26e83918b0ea82584efb745addb2e054d346de2b8f26e7ac1b863a8cdf4622a181fb57bb95f89211189327cfd444487bcf6
SSDEEP 768:AZKSD3JdE56u1GHQ3ZUI1Sv0SuO30Q86w/z+On:AHbJdu6u1D3ZxXSuU86I+g
TLSH
T1DBB2E1DBCC7408FAD7462B58E93D483C79A281127A219801B39F55FEF2B8AE4791C735
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 28KB
SHA256 913a291cbe91214ad1d6681141b612614b797103e9456b60893bcd9acff8effe
MD5 4533bf4fc02c6aa74b6dbfcfe22c690b
SHA1 2041238351b33f0ec79a52432a6733af1ed95140
SHA512 29b7fd02c82e3b9c0e3ee0151c001f50358acbe9e6a7fee4bb8e589212a684aae9133f787a2e7ac4e6ce9c8de8a76532066739c6ddd3c86529a02500183f5e33
SSDEEP 768:1AFL/iFVKiOuHfcjjp7AmQ/3E/bvArJJ404K:1gY96hAd0jv84W
TLSH
T1EBD2F28C321EF67D52475542F198A491EB2BDD77975134698008F8ACB3EF029C7533A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000087

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
Size 42KB
SHA256 838b14acfd3ee42d5ca6705e301211d9c090e7a55de7a60f6e09fe65bf171483
MD5 8219068eb5e63352846c6fd67246dda0
SHA1 dc96a71ccfc3d6893da3d40a3a22b1b041ffbca1
SHA512 f6c681673cd6a22c63df0c14d357a869fbc8b86b47765f903dd677568e6427e61cb130f8ff8872f2238e2e4ddca7ae1ff4dfa066acfbd48f7edbcc856ad17f9b
SSDEEP 768:ot7eJe7xRHyURxzFWpWfNDgOQCcCNNCku+9YzWtLqAk/xb5sIkOrbW9+lkD:oSel3xzFWQFwLmNPu+haba7MtyD
TLSH
T1291302BFF2B1E690D7080529BC1000CD3B8C4CE972BE5F724DBDA5279699325C22FA55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
Size 142KB
SHA256 462eed1fa04355fce6c0710befcb49fc8aead8c6cc660baba6cc590cd94dafd2
MD5 63a29bf74accfba21c020663ad422482
SHA1 c924a5140f59752bc42d4fb53f19cf7bbb96e476
SHA512 8554eaa29ee101d750ef7a40f36c73ab1c626d350ae174ac86fdaa4ef33a403659e7df3bd72d63143fd649963739dc302b6f57ef57b89dcb0c14e9139c03b859
SSDEEP 3072:CsEhxxdahlBDX6SOkSeaDj9pCs+GlaKlDzPo4VrEkY:CsEx0hjD/7aDBpCsXlDs4VgkY
TLSH
T1AAE31298D049F5AD8803583A1B61D2ADAC015F97723EC018E67BFFE34EF89EB1962015
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 22KB
SHA256 d166daf8b69221fe4ed304929d69d6055a7d1d7084abf69b3c45b6a3a213fc9e
MD5 dec2ff5abbed3da18eafa2598788e550
SHA1 ba73c6e0f70f37f2bb2568fff1eb5d187e1c7d46
SHA512 49c57cd228f0137c488878a9dc3fa373cebc1e5d71eb10ae27a0d68f7f7fb7870d28f717895aed6891ed21c1f98512e6428c57be9cc42daab0c673eabdf58594
SSDEEP 384:HCpdv9NtaEPfVL3WpbFwW/Kotc1aFVmQRxDSBQKI08p4KcKSIY:HCTftPdipbFQotNFVmQv4Q/9cKSIY
TLSH
T171A2D0760CE44C8BF47E464AD1AF7BDA02583F686EA15FB6562E00C82185CD3EAD54EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000112

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
Size 17KB
SHA256 446d2c488253b49a62319b809a1afa6f942a8521e4c7b13dcde1b72b630878a2
MD5 eecd612fa5f3095cb55c6b24afea0c19
SHA1 09c6579033b509596a0280b7b9d409fa89022715
SHA512 4b1602c852673c93f6d6611297adf5309416138376b0d10e9a5838d06e65b003a8371f4051e944132e61129046f47351d44b0c8c5c335539049f515d7724d9eb
SSDEEP 384:6GllcJWISf5II5adORjk3giYabwrHQhaQZ1XTi/nlGrUnJ6QZ:6Gll+uh5+OJWbZE7LQHXTgnlGrU9Z
TLSH
T16B82CFE1E5AD4C86E589B1BA0F0D158F1B0B36543CEB492DB4299FF9B3064C66E64C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011c
Size 19KB
SHA256 952ab77841249701dfb32a4daa0bfbea22ae249767052872c68b8f0a8a200161
MD5 b38fa2dad2e377afee597e2ffbf243eb
SHA1 8d91f9a7ffebe17705456c6d14927d0adeb6a5a1
SHA512 34fa7a65dcf832d9871d8cf59575af739381a2781848be6912f631f0c5e4b0210872a6ef9a17141ebecfa6a8850b0ec62492c77610c4067babff861d3d09f53f
SSDEEP 384:35ddsXSTmqVViwLruL5BcSg+pTRffQEJnpeXiiZVMV9sFIukj:pjsXSFqLvpTRffRd8fZiXZj
TLSH
T1EF92E019BCCBDF50060B48DB71BD7FE1C769536FFBA414564168D2B89D02A2960C1EEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00011d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011d
Size 254KB
SHA256 21ef19798b711c1d0b760ce61fadbb090bfc9a02b271f6cc2734a2971e0f51d8
MD5 d3e88b3d1931121f47cd12e8a1b3be8e
SHA1 d2bdd77df493dfcc5cfaa63ba3033572af3ebdd2
SHA512 2c1258931a7981aac6b80257f2625f3258e1df41c2235f50d5dc79a5d1261e8c2429da590a35428df39cc66a6c0f7d7192f733ce64c195cc499c9572fb3c053c
SSDEEP 3072:Meg6zCUcMolhIBTmyF1TP9GBGaMAT1WQ2kEFCRbQAtbCtT/gq+CB5N1fGGH51xQo:MrDUc5ehIyAEQ2btT4ByNBrR4ivWEgw
TLSH
T1084422509FBC102A74E7DD25FCC106695C6C2AEF34AEC6BD8ACDD43683C9CB88585392
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 7KB
SHA256 b3147790a6e2c968ec5ce635205868d161ab580ada0d61028724a37e00aa3d89
MD5 18dc7a95d4d4ccfd811a378569fa09fc
SHA1 0c03bccd8bdabb79eb6f4e005d9398af85486eb3
SHA512 16a2c17fc54ffc2c676d3fbcb6f4dd06a13d8c0030b110ae52d631dfc7fe9c84ecbfbea28e94d00968b47214a9a7134d6892008386cee6c16f7363310c5cf270
SSDEEP 96:UH1HgJhnLCGtRb2u0zOtGL8DTsZrCWvxpMbboSng+Jo/BpIZrksPSFun8:UpQbHKu0zOMIoZNvxpaoSngio/yn8
TLSH
T13FF1EFE06B90D811FF6C4EB8849E7A922A2725D549171F5611A0FCF73C1F3EC4D2AE24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5a3104.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a3104.TMP
Size 3KB
SHA256 c882161d187aa022b783784c1ad3f1847865cf3fddd6262ef6fe06540384334a
MD5 0713c4af15a3698b5e1885924382a075
SHA1 0fe805a9ec51677bb5e522ae226cedfbe0ce9749
SHA512 fef8540268e5a900f7b76a73d91429392a7a2df87c193284394f65d11b7c4deacbe9672a478d7444d4c55497a8a045f0ee57d6f722283f081037d0345dd766e4
TLSH
T19C61A4B07F504964F7AC137E51DB12833F38159A9C6B1E5AA0D4FE7864063B85D3BC08
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 ef5e6139593c50c110af5dc4f782f653a9531fd82e51d0b6b6948c526220e80a
MD5 348ea8465c6bd765f79351953604cfdb
SHA1 0606de64696500436fb91dc78bbf87e5ad93b1e0
SHA512 186b6306318ce292cb53f50039f8ad84441668e83d2e67170ff886e2f2e38407c12189e2b8460b0a01a9db54f1816f64d302b0855f1211c5ca0e12b079eac69c
SSDEEP 192:DBeFgcYPL3Dls57eiXmN1aawawZMxsZ2ZEIjTf0MCs5C/5rZo0rRbgCyrtp4twc:DBeFgcYPL3Dls57eiXmN1aawawZMxsZ5
TLSH
T154229EF6C2D8C62DCC1312F29B252D27CE5E055856283D678DE9AF8F67E2872D24124F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 481d7a3ecdc6c092c8a317068ddc7a435b2561d98479cab62005e2a80704fc4f
MD5 797a5cb7500813fd67dd6568fccba882
SHA1 6fb45b9939b6bd9aee059be472f5b111c8ffd61b
SHA512 c064e06fdf86270bc5d2d6f2a822ba20c121bf48c78ee94faabfb25741874f8762f6c5f0dd4f4d78f90d5edfd31153507f0929371e2cdfd37c2be9cb44b6c22a
SSDEEP 192:sxZMRZWu/fwsdV3Idpd5SHW6+WNGYaQMUIg/vJ:sxZM+u/fwsdVYSHbGcZ
TLSH
T1A122A851AE28A57B8CCBE21DBB15BF53D5F9503151911E48AAFC861C04E7ACD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 91b131331be3b2fc2005e197900ad0bcfa9781e996d5436844dd160443db38dd
MD5 a3bdbad4b87f1d8a2637780576e3b457
SHA1 41d3487760551c6e77bc04d1d1609eb5b7437b67
SHA512 94c520c77e842c72ba8c216d2e0c5a2f0b3da483e74d756df6dd73097bfdaf61a94c54d76a3da13862096be9f4b89db4d72c9bbe280bf8e623ca00d4b21d461e
SSDEEP 192:sxZMRZWu/fwsG13IdpH5yHW6+WNdY2JYaAtMUIg5TvJ:sxZM+u/fwsG1YgHbzJUf
TLSH
T1F332CA51AD68E97B8CCBE21DBB15BF53E6F9503291D11E48A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 60bcd1a86cc751d50388856a5736c66b790eb104f8c415adfffde0f7d0e321f9
MD5 6ee4167e231a1868dc645951baa4aab4
SHA1 0835867b2971fd0dcbb5d3ae27957198bc462b49
SHA512 827291cf438b556455196066c9498a2a9708579329e179e4abd5febce8a6cc4ceaaa08a1f30e29e34e63eb28baa2b28db19ab0523cb65e20f60b31ac19a20f62
SSDEEP 192:sxZMRZWu/fwso13Idpd5SHW6+WNGYaQMUIg5xvJ:sxZM+u/fwso1YSHbGc5
TLSH
T1CF22C851AE38A97B8CCBE21EBB55BF53D6F9503191911E48AAFC861C04E76CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 23b504bdca4b3b606fc46d4df5f7ef4cb27e96d16b1bc27a493da83d42e46be7
MD5 51d5aac76ecd0483c321f6e112ef49cc
SHA1 f5083e2ee1d298730c0a284be8f1ddc50a0036b5
SHA512 b7cb5c46051cc976b16dc3123d11a42e5c53a6c2575808ed71670204df19ab828db486265fefb87f3f2d300d115e9c452ccfb617e81e7a5bbedd2c9ca94f805f
SSDEEP 192:sxZMRZWu/fwsG13Idpd5yHW6+WNd/E/YaymMUIg5TvJ:sxZM+u/fwsG1YyHb6/pf
TLSH
T11422C951AD68E97B8CCBE20DBB15BF53E6F9503291D11E48A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 49a28e8d9e0270bb643842b4b6d77bef31ed007da48347485a5c1cd18b9c637f
MD5 ee19373f9cf2fb691ff35a89f101cfe7
SHA1 850982234534919b9fe7c0ea49c77dcb0e33f29b
SHA512 be0f3d6eabfb6fb74643ad0819ab527240234081ab5a1794cff7ff9664c63180b647838440ac5424c18d48d6f437098c8f7e7cecb10ed3fbab5cdb4b829b34fa
SSDEEP 192:sxZMRZWu/fwsG13Idpd5SHW6+WNd/E/YaymMUIg5TvJ:sxZM+u/fwsG1YSHb6/pf
TLSH
T1F822C951AD68A97B8CCBE20EBB55BF53E6F9503191D11E48A6FC861C05E77CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 e977e20e62792dbb9b6b05848a8861e8cdaaf63c39a5472586091a6ac37870a2
MD5 8485287cc7cdf1f66171b3d1e48b9279
SHA1 8894b0bf2c71a9166e3ba185f9a4a76366bd382d
SHA512 8ea60959ceccfea0e2bc386a923e3a11089ca4f8e6778d773a7122a0755027ba6062c57c0800b37d27fd88434c168f10c1f57940c1cc2e75a21690ea2da58097
SSDEEP 768:oRyQRbrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVaKLlRXH3hroRZS1:oRyQRbrWvvlpZu1jaXKLf33aRZS1
TLSH
T1BBC2F93B640CCB7E4FC01E9DDC6A6F976EA802C766588D4447FA984C02C77EE512A4DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 1a24d95e3ba06fd15c7a3002963fa59ec49963e26bf09a1d0799fa96d34878db
MD5 0ea1b3130392074dafffc28ac382f4d8
SHA1 81b7d842dd269630cf0d78775f359edf9aeddf48
SHA512 98f29287f1022be9b75e187378e326a15749494b80571d1bf581a166e83828797fb50b625ca55940bb11f0e38e067b65feae9714dc34b6ce520f8b572764ba49
SSDEEP 96:KHZQjPZzTxavKs4HxKg4auiUoKxuSOgKraml:GZQjPZzTkvKjHl47TW7l
TLSH
T14F91D042717B0285387E294C9474C66E098235F37068EE6B7BB851E54FAFE044EFE4D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

60ac58a8-279d-4567-a3a0-d438e7236885.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\60ac58a8-279d-4567-a3a0-d438e7236885.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 63a7fac8d128969fcd6294c0b33295644f87412a47963f045b04b7964998ed2e
MD5 397f5de081c2ba5180e8cadd54083cb3
SHA1 f725debd48fae54e21d3231cb94a74d995b5cdaf
SHA512 5387fb83411e223b37a45a11ff81be09d3a3ef72b8c42765c1bf3e6f05c99a35f3107d132731b9b3b81e6533bbdb751ba71d967d41861ae54e350339a7ee24ab
SSDEEP 384:OZcIlsNsvy3sE0b/QDp5u8iu8LGXiYoGVVtgOIwZOy3LQo5:sl+cTQrkvmi+DXsQEa
TLSH
T148828E325C7CACBA6CEBA155F54A36038FB4802BE3C96B44D5ED671C05DA5D8030BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 ecc9c709c91cc70bce856ed35a838067aec0d1d1732a63f017ab6757932c5939
MD5 43968d15749753669a8f7c8ded94326a
SHA1 5778f91274811daa4ced580597eae13726f6a2ac
SHA512 60cbce6a3231ec4a806c70e036c5752fb5c69dbd5fcaab3edaaf72c1c5d7d9c98ee33fc3f9331c40d4557a03ec0af4628b3c97c38eb0e3944502c78aee86b6dc
SSDEEP 384:OiFiZcISjsNk8TUNTUlIlmy3sE0b/qDp5u8iu8LGXiYonVVtgOIwZOy3LQo5:lFQ29wgLcTqrkvmiPDXsQEa
TLSH
T1AAC219F248E7987AE9AE5707A77D2E038EBCC027F1859644B798561CCC961BFC306D12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 53ce92f2d42bcd9eeec95d7c213356b293d26171f4736ec4cff8493d52b6a11d
MD5 8f2e71c899dc826c3bb1537feec1c2fe
SHA1 7b0188a5d62f5c721ceb18fe67f76828df7d165d
SHA512 f5ae95a2052b9593cd43d4c60db4023d77e0ff7663021b109d16c04c93b030e6cb62dd1d50d9bd1a80ecd6101f0df0738d431846540e5b98e42ee081b7e9e99b
SSDEEP 192:SONo6iDCQmiUyOZHq5u88PijzorLeLSqxFZFU6:SONo6/hHq5u8iu8LOJFU6
TLSH
T14902EA396C787CABAEE2AD06B54737135FE5012FE6952B84D9E8162C01D729C1307933
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 44b674c71af0b4ceb63bc07e6d9b2a421e35da9b892bfd586c292e2f54947f14
MD5 fd3c1c38575a99a039d26e225a782503
SHA1 2104c4687585af82ee14f64eb8bdc97ee3146c2b
SHA512 2902dcd8389f47dcd06e2861e362812868653bb460e8efbfcb52bc60d5f3cfe08faf67277a83c212c45e2fe084d3872a68a6bad9a7b398df39de2dbc23ffaa19
SSDEEP 384:UZcIlsNsmy3sE0b/QDp5u8iu8LGXiYoGVVtgOIwZOy3LQo5:SlRcTQrkvmi+DXsQEa
TLSH
T1D6828E325C7CACBA6CEBA155F54A36038FB4802BE3C96B44D5ED671C05DA5D9030BE27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 70a7bfa376b4db88b39d1e18ba94fd2cbc6b63556d296b38020bf020fae847cd
MD5 9ce0565ca48dcecb9906a2a6e1a37468
SHA1 671c38b9e6aae9b8debf2c7bcc8288bf398f2878
SHA512 86886b2bf3995d5ca9c778d314d051c8291f418956e7fbbfd6506533199b88943dae9699f8a2d0ee56809d01de31a1e3451aec207de420a9142f93b96d149c3d
SSDEEP 192:SONl6iD3QmiUyf6ZRq5u88PijzorLeLXiPwoQuZlqS6gU6:SONl6wYcRq5u8iu8LGXiYoHVVU6
TLSH
T163122C367878BC6F6DD36855B44B32138EA5412BE7896F84D9EC172C05EF29C530BA23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 0dc6e79baa09122fc1d30aa923afbc4da9fbdde3751c3ee621a1f689cc5c2a44
MD5 f5810bb67c57b7877ab598d48763ed80
SHA1 c0627694ab5f08fad77d4b7202c7fb1c88e27e48
SHA512 77c5db1a90788aeb2a1771588fe0b29614c677d0e70717398af5a31b152d9c7dfd65931df51b1e3291421c192fb6c58deb633f0b682d2d5332bbb1d0550406ad
TLSH
T1BAE0020193141073C01C0234109717043B71C05403C20B4B556001681D203006E31C14
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe59db14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59db14.TMP
Size 392B
SHA256 ca212edb97f8e2372c34eb80827e5a16a63f7a53f6f938665c7eefc36b72a2b0
MD5 45a6acfcd175aa5640132481d2b27653
SHA1 bb01b5e64f6b3aada51a3f779925dd0ea3c9b1c8
SHA512 39be4acb8ea6bca115791708675acda89d74923bf7cdf7479f8e82812cc42b6c770ee3d1577c8fc5da88e66877822339a4a2da6fb63cd27ba880546b043130e4
MD5 SHA1 SHA512

Submit Download

bac39369-079f-445e-afb1-f52a9748b01e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bac39369-079f-445e-afb1-f52a9748b01e.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download