hxxps://www[.]linkpropertyservices[.]com[.]au/

Analysis

user interaction
yes
max time kernel
298s
max time network
299s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/09/2026, 15:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.linkpropertyservices.com.au/
Sample260930-ssvm2sbd86

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2052	msedge.exe

Checks processor information in registry 2 TTPs 5 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe

Enumerates system info in registry 2 TTPs 5 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-240542094-4193773837-3211495583-1000\{00BB047C-ACB2-4AED-84BE-4D37A735BEBC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-240542094-4193773837-3211495583-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
3520	msedge.exe
5820	msedge.exe
5820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of FindShellTrayWindow 42 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of SendNotifyMessage 40 IoCs

pid	Process
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4836 wrote to memory of 3520	4836	msedge.exe	87
PID 4836 wrote to memory of 2052	4836	msedge.exe	88
PID 4836 wrote to memory of 1644	4836	msedge.exe	89
PID 4836 wrote to memory of 2960	4836	msedge.exe	90
PID 4836 wrote to memory of 1644	4836	msedge.exe	89
PID 4836 wrote to memory of 1644	4836	msedge.exe	89
PID 4836 wrote to memory of 2960	4836	msedge.exe	90
PID 4836 wrote to memory of 2408	4836	msedge.exe	91
PID 4836 wrote to memory of 4224	4836	msedge.exe	92
PID 4836 wrote to memory of 2408	4836	msedge.exe	91
PID 4836 wrote to memory of 2408	4836	msedge.exe	91
PID 4836 wrote to memory of 4224	4836	msedge.exe	92
PID 4836 wrote to memory of 4224	4836	msedge.exe	92
PID 4836 wrote to memory of 228	4836	msedge.exe	93
PID 4836 wrote to memory of 228	4836	msedge.exe	93
PID 4836 wrote to memory of 228	4836	msedge.exe	93
PID 4836 wrote to memory of 208	4836	msedge.exe	94
PID 4836 wrote to memory of 208	4836	msedge.exe	94
PID 4836 wrote to memory of 208	4836	msedge.exe	94
PID 4836 wrote to memory of 3536	4836	msedge.exe	101
PID 4836 wrote to memory of 4436	4836	msedge.exe	102
PID 4836 wrote to memory of 3536	4836	msedge.exe	101
PID 4836 wrote to memory of 4436	4836	msedge.exe	102
PID 4836 wrote to memory of 1476	4836	msedge.exe	106
PID 4836 wrote to memory of 3820	4836	msedge.exe	109
PID 4836 wrote to memory of 3820	4836	msedge.exe	109
PID 4836 wrote to memory of 3820	4836	msedge.exe	109
PID 4836 wrote to memory of 4732	4836	msedge.exe	113
PID 4836 wrote to memory of 4732	4836	msedge.exe	113
PID 4836 wrote to memory of 4732	4836	msedge.exe	113
PID 4836 wrote to memory of 5852	4836	msedge.exe	115
PID 4836 wrote to memory of 5860	4836	msedge.exe	116
PID 4836 wrote to memory of 5868	4836	msedge.exe	117
PID 4836 wrote to memory of 6112	4836	msedge.exe	119
PID 4836 wrote to memory of 6112	4836	msedge.exe	119
PID 4836 wrote to memory of 5976	4836	msedge.exe	128
PID 4836 wrote to memory of 5976	4836	msedge.exe	128
PID 4836 wrote to memory of 5976	4836	msedge.exe	128
PID 4836 wrote to memory of 5932	4836	msedge.exe	129
PID 4836 wrote to memory of 5932	4836	msedge.exe	129
PID 4836 wrote to memory of 5932	4836	msedge.exe	129
PID 4836 wrote to memory of 5344	4836	msedge.exe	130
PID 4836 wrote to memory of 5216	4836	msedge.exe	131
PID 4836 wrote to memory of 5344	4836	msedge.exe	130
PID 4836 wrote to memory of 5216	4836	msedge.exe	131
PID 4836 wrote to memory of 412	4836	msedge.exe	134
PID 4836 wrote to memory of 412	4836	msedge.exe	134
PID 4836 wrote to memory of 5820	4836	msedge.exe	136
PID 4836 wrote to memory of 2956	4836	msedge.exe	137
PID 4836 wrote to memory of 2956	4836	msedge.exe	137
PID 4836 wrote to memory of 1012	4836	msedge.exe	138
PID 4836 wrote to memory of 1012	4836	msedge.exe	138
PID 4836 wrote to memory of 5276	4836	msedge.exe	139
PID 4836 wrote to memory of 5276	4836	msedge.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.linkpropertyservices.com.au/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2a8,0x7ff90f6fc188,0x7ff90f6fc194,0x7ff90f6fc1a0
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1764,i,18047654895850881984,4402577809525513002,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1636,i,15401752749635596116,1495271334987594759,262144 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=2312 /prefetch:2
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2444,i,2699761587234487278,1084844389670811684,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,10008710697449270864,6472037221508247479,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,9067153949149460918,12029017850298997044,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,16423953259085608172,7545252018745176743,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4244,i,4030731425466163685,5797703069992162694,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3308,i,11553484190243375748,1477048091928446486,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5100,i,2410826037432793179,17337875875083483919,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16846241232234073035,12200249520122375963,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5684,i,16846241232234073035,12200249520122375963,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6168,i,14211166446005191907,14718424343365202045,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6372,i,11824096802689225498,2956803012533769813,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4496,i,17878331573641841974,11606662119192619136,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5024 /prefetch:8
  2⤵
  PID:5852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,5730437901916347030,13650556008492581189,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
  2⤵
  PID:5860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,1016109339129497846,11811005112709832225,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:8
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4248,i,3825975456212708258,15614698578154678943,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:8
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5168,i,10276414904338141958,98974970733479375,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:5976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6712,i,9098339791452461801,17197319311649438751,2097152 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:1
  2⤵
  PID:5932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6880,i,1164996162752635365,15261976456392792586,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,15370071588918016365,552310431005645973,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:8
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,1794251577991417259,12617678465709743007,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:8
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5704,i,16998664724630279708,15235992314829290498,262144 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6096,i,680139695245961829,13278722971945753237,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,11588085844883399975,6738971779845854311,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,16229837008261554893,7034748996592669297,524288 --field-trial-handle=2316,i,7491732320493255498,10884346591797687473,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
  2⤵
  PID:5276

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3692

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

d1c39ba4-7014-4d0d-92d2-e50203f56bb4.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\d1c39ba4-7014-4d0d-92d2-e50203f56bb4.dmp
Size 8.6MB
SHA256 a01fcf5bdfadc2e613b2f2df166f06045bed53196d2a0e59f7c689bc441025fa
MD5 8b03f42049c3aef80a4a892f0c72b5f3
SHA1 be52bfae15c9ed5bbcfed23d81e188d9fbc1b19f
SHA512 a5b5183f3926d47ec819578ce457737083382abbe89e0fcdac7dc3c3a98ee9ed2d3576790bb3bcf17380b9872d39531090d432258681784b1d8e3bb7e71fbd52
SSDEEP 24576:ZcSD3C8i80e9Rb7Tm4u8CnNLppPQp90lXH6Gq5oebW+dudpLW/7Y1t9Z4hIJ2MF:b48r37Untcp90ZHa1jE3Zb
TLSH
T1A696B356A3938A4BF15942344DD3F774E7F2ECD4A991835722A0731C2D3BB499F2EA08
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 58b461967016818ce2213ba739aa830e079c4747cc98baea5feaffc8b09c915d
MD5 8800a672498272bad98dd79644e30101
SHA1 14a42c33d6271869cc680cadc5ae061e7092e3ae
SHA512 a17f90c73859841f3e0a3211d7f8d1027a7f8ec3a4ef87ddc96b1a39e0b52bc65decb3dd694a7092e22f06f2124864535e2e8632387dd42184abe2d3e22d7e12
TLSH
T135D022F2F32200E8C8C02A3C20030B080208C8000C833220C832C0C23ECCBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7b81d8521f4289b1259fa60587a7bc7131f06581c3a734224a7de2fe2669bfb7
MD5 46bc1ee7f1b3386bbc305d48ade31614
SHA1 b5e469cf75c16715fb850bd86db01e329da2928e
SHA512 09a97914c725107f4c125aa0ff0826f0410030841011f0bc5c9eed9e023261ab13abc5f59c9c311d02baf1b25e7398de5ea81438c8a8ede3cc60ca3906edfce9
TLSH
T152D022F2B3A208E8CCC02A3C20030B080208C8000C83B320C832C0C22ECEBC0A88F08C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 db998f2ab3bc4e87d03b65e45c5cbb178df73d3cf3485b0f37651dcc2814f3c4
MD5 5f5f54c76a35e981894cc5fb6daba05e
SHA1 f502dcb8644de3724c621965a3a911c911ca900d
SHA512 5b35d9868c8c7bc14be58b8d1c82589ffa8c6d4d639a122de36a7603d6e1fdaa95347b26ba4692476227aad23f224b54f96b3ed88d347aa1c403e5ce05da56b9
TLSH
T16FD080B5D9756AF4E465253C02230604714C95425D433105D55145960D9D7C354D7DE9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 0aadfceb58921e25185cc6a196f25c90da6f748909c74b56e2f0dca29e2a1d50
MD5 26997b7df8daf2e3da5bbf07904e097a
SHA1 86edfe3cc5f6025e5a789268ee830aeee2a7654d
SHA512 41b3262aaf2a34684bc3e998aa7ef690651850e187fc4a4aaef70c956334ebf64ca15b5ac6a60b666b9b18ff22931693f369b0b846b269d4bd0236b54d19c382
TLSH
T176E086D846CAC37FF22CA5C741ADA74CE2D03F4AD6CC6EDB7B04848D7145948A6926D4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 75614fb3bc0564de441e7b925676a71b1edfbf6bec0f381af7c8b25628b716f4
MD5 e6c13de43ff91586af5515c62d446f76
SHA1 6893115a0b21a82166e7ff2f8bae209e8035e7a9
SHA512 4628697c44bd543de37b1e79262bf2567167303c44fa8ce01b8fcd9a3d90aabab5b24ceb574f2a3007f4fdc4bd023a471ee7540228123feb82ac9e1ffec46fae
TLSH
T1E5E0DFD64ACAC32FA20CA4C74178770C82803B1E93C86E9A770884847006448FAC7690
MD5 SHA1 SHA512 TLSH

Submit Download

f_000086

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
Size 346KB
SHA256 9be344d8aab52c80881980d24ba1435146143794aebbeb98bcae9a4b41f0bd16
MD5 fc31feb6dbd996017ba0751ebf1a2be0
SHA1 d5e54654c86bcbfc7aeed4377e9183421b5f63f4
SHA512 21a4c7e4b3c8f42a8886bcac34a50ae30e61efd3c0443b66fd3cffc54caaf4265d4ee65521051cc530e2e1dccbfb877a303a119768406da737c3249ab577b0e5
SSDEEP 6144:r6PyntaVKs+9xeKjohEc1avaW5Id9Veu22qVTvHodWVjaVrQXcx81E+/SnCCKCDC:uPynjs+9QEcyIfcN2YTvHo0VjaV2Z/SO
TLSH
T1FF7423717998940FD4622800765A6FF51C403FAFC52AE6E3677B10B34D9E4A7347CA38
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 b683749cc38cfb000773c8878741c96a4f2e25699202d77940ca43a768982f4c
MD5 2057b72c95ba27bfb39e762119bf44ef
SHA1 dd5dc6003df54137f639caafd7db8fc1c3f8b2e4
SHA512 7ca65f625768eabaf907526675527661efebc5a2ef66b3d9d01af16b5b36e63858ee93c7bae6ce8f4bb0543c140fe00941ad70b6f57f75dec862d46f1f9ba016
SSDEEP 96:G7zu50biQV+p0UlFM298HGmqr77NAgua/a+Vjp9tDPD:G/M0+aUk2p7rWarp9RL
TLSH
T1A6B1A946CCC69E92FF58A470C8AA1DAA35327F9761839F533D0CD6A87C4B7D6010635A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59818a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59818a.TMP
Size 3KB
SHA256 0018bb7cf88baefb4b2da5766b2bce9c7c500ffbeee5a9b54d47bf1fe7641485
MD5 5a6028838ff1268e662ed4094c901749
SHA1 5d90e1d6ece370160bd7bd479ef4f851aec1f3bf
SHA512 e7260ca807ed2869776f1bc594f8af58885440b172b8367ac797c5e9c878c9d54344a0667b1000b6409f9ead4a270a0833b34680563675d78dcac145b6e6233b
TLSH
T11861718B5C42C266F7A88470CDFF10AB36774D83B5C3AD123DACE6BD840E726615604E
MD5 SHA1 SHA512 TLSH

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
TLSH
T18DB01269E5507CFF074A83A41428B463C3FF0047421C8ABEEA3873AD42A21FE0828C57
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 d89fb0e6a5fb093e043d75e7d9891ec78428b8b34f736da0b5b8553c0a16482a
MD5 49f3f7389f0fa1bbbaa410e4a03f0169
SHA1 e0c9941f9e54c8ff6ec61faf9b84a3ce09ff4162
SHA512 9726368cd314e04810b3f2ca1c83f6ce36094a3fdb1d9ccdaa8f31704aa5b01247e3f3c284c53c3749e93b51bc12eb4eee9f866459a545d29396a619d4550711
SSDEEP 192:DG+V+3+N+6+v+we+z+f+1+Pp+pH+krx+G+D+t+N+t+g+v+I+H+0+s+u+4N+L+3W:DG0ASBGje+IgIpIHzrxPEmk+BKxAnVj2
TLSH
T135E1DFBADBD48A3D9A0695F09B607F2FCD1A052593BC3C079CD4CF8E53A44359591C4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e465d11b06e8d65d50b8e75c818c99dcd954193695017b54be032898b63b089b
MD5 f3d9b16c635c6f779b3c202a9e174a2d
SHA1 c70fc560a5ec5bfe00420293617f15d66075d1bd
SHA512 40a8f03d5faf190e6e095648e9f8b554ebde68c49284b8f00b975c7182b8855b7e639a88acdced6a7ab0fccc72b3b8fff3d9e71df6b31584634bbbaf775aaf6c
SSDEEP 192:sxZmRfWo/fFsmd1Idp5ZHW6+WNXTw/YrAEsZIgrJ:sxZmQo/fFsmdGjHbc/d9
TLSH
T1AA22A8527E28A97B8CC7D209FA19BF53D6F9503295D51E48EAFC851C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 d58e8796cfec457c85df2a6027161194ea9ea68c6a06815caa3fd660da4c374a
MD5 dec48398f403c6c135596bf50e5b4d0c
SHA1 1164415e65b72e7acccf399d9e77797cebbf1faf
SHA512 4f993683104a17caf941652b003d33e44491778561bd24381aaa522b1dea94ef479b208a9441794acbf73491e25591d9c5b35dd9b9da5fefd3449f9b66bdfc8a
SSDEEP 192:sxZ0Rfno/fFsAdmIdp5ZHW6+WNXq8XYrvEsZIg5Xk:sxZ0Jo/fFsAdHjHbLXWa
TLSH
T1F022A8527E28A97B8CC7D20DFA15BF53E6F9503251951E88ABFC861C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ac0126f0b9450d5528216a6a76de9d66ee65e1e0ef067a4bf6519dda85d2768f
MD5 108bc0ccc465fae646714dba3f24b402
SHA1 963d12dfe927ad84e0411943c246cd0d16bb9dbe
SHA512 c37141f49828641740031b77cdf9dd060d3ef0ebe8b1ef0e318f677ae6bfa48c8f477b6f0c9a6cdd22632cd0dad8acce2e6ba523ffc6fc73a104af5fb985b068
SSDEEP 192:sxZmRfWo/fFsOdmIdp5ZHW6+WNXTw/YrAEsZIg59J:sxZmQo/fFsOdHjHbc/dx
TLSH
T12022A8527E38A97B8CC7D219FA15BF53D6F9503291951E88EAFC861C04E7ADD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 fa800aab4909fb4c0f55a1dd523e1d5fed7db3753a338388ff9c610a306cfce6
MD5 134b6bd3c08c66dcd0455aee5c999c3e
SHA1 984ebf540bcfe4ff22878d809dbb8cfc71af3e6a
SHA512 e11561bfaee009771b0151d8aabd1aa82e5d155e862e3ab76199b94593966fe6202caf80232a42b3ffdbada76f8c56fba7ac30083e39225077ced33e31bff650
SSDEEP 768:XMy4J/DWvbtBh8F1+UoAYDCx9Tuqh0VfUC9xbog/OVCiLlc2Tb0roRo2:XMy4J/DWvbtBhu1jajiLm0bfe2
TLSH
T1F4C20B3B644CCA7E4FC00A9DED5E6F973E9802C79A948D4047FA994C02C77EA91264CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 6733c523b6a2db365a31e9fd138c5b35697df879e5ab309af07d4e220ca994b3
MD5 4a2d392c18b9917df20f56dc02b7cd1f
SHA1 3b3e083e9adc5d72aa9b1f7ead195e16ab477486
SHA512 3a27cb1f0449d6c254a6b75af9e380a486585389585e919b64ef3eb15f55b1b6a8a841c5524ce0c1988a8244ff579f3a514376737fbc8f86c076eb1a69dab195
SSDEEP 48:KIDI1Ks04jyL5f5i5r5/5B5h5B5ab555U5pIS5P5aK95v15l5ax5/5KY5s5t5v5B:KIDCKs0+aS8K/aeGliKeIql
TLSH
T138914490717A064138BE684891B5DB2F028236737058E97B7FBC406A9A6BE085DFD8CD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 251B
SHA256 1fd8b490e74fade89af75fa765fd69b79bcea4fdc47ca71990416a7489bde40d
MD5 50cb56c7c54d0a2dc74b061c619b4568
SHA1 6d47bc7e4aff58f5ca620f2fe700b89a16d78aca
SHA512 da3df6b9c4c190924412eee51856d00fe1dd5ab8406dfd4ef87b2d0f09403475a49e502c495ded005e3db0f0cb949159c4b3f669cac7915f165a70ac03d31368
TLSH
T105D02EE282608C0B1230EA88912C310D9A1AAC488ED488D0EA08B072257CB1A880593A
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 251B
SHA256 5f3c2f2667a78e250be4e9b380e483e9c397a8e54892ca1d02aacd902bc69f9c
MD5 43262d8fbc67a4f82e3da710029935e2
SHA1 5d5ce19051a36d8a242284efead6b8e931c6c7c1
SHA512 adba2d7f41749be2a47d853dca3448111a893e0faa4722fe41ac9c5402df69883552cc43d2afcac8c240414436103a499d99df587de1c4b117ee2515649a8044
TLSH
T1CCD095D74331DC860330E7C0412C321CD6177D4ACDCCD8D4DF04B0211578709C405635
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
Size 167B
SHA256 880cf681e369f98217941225824c36b279fdb4b735d9b040d0fc964d7ed85c69
MD5 290afecc547728d8b353daf1082dc122
SHA1 0ed951dac2bd3e63cf9efdf1322d657adac14bda
SHA512 a1b017aeab9e81e16a64c1c3ffe63efb1f8e216e86337cf48bcbf0ded034acf3a4b842dbcf292ea4a4ef9ceb40363d8de563f6b1108f53fe12b79a590465d5da
TLSH
T166C080E35550CC4B0575E6C4511C321DEA1F854CCDD4CDD0FA0C90111634B1D4C05535
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe591498.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe591498.TMP
Size 174B
SHA256 5e9580a947cc491f1cce88b74fa478aa42156fa68e193f6e3dfc820fa791e585
MD5 e56884ee761490f3734afa5403170801
SHA1 3a25efb604692d5fc623bd578509368499ee6fc2
SHA512 991c1a30ea1309576f25f7ef3039c5c5446ef0ab6046ee9327698d728476cebd587a420f0823532eb2fb3e9a308ebe2b0f2bf323172c2ea54793d751bc0da551
TLSH
T1F1C080E35550CC47077295C5512C320DEA1F8C4CCDD4CDD8FB0CB1112634A1E4C04535
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 9a5538846b6e7677d99a01fba117f385995768c2cb6b5f74af57a2db99f1106a
MD5 4118afabd9c67beda826e2b5e9d1dc18
SHA1 68cccd8e199081745d32100073174b9e53bf78e3
SHA512 77263019df7cca1d59239ee8d14c1fe043ae02a35ac85cb25d9be3acaa2dbeaa52c91e22045d464e1da6ce7e384b40f4402a5c69d4806bff6686448b42e3bfc0
SSDEEP 384:uZcIhsNZ2ZZg00HX58EcOWJsUaUQJ3tgOIwZOy6L8o/:MhdlaabOVa83XsVYU
TLSH
T146828D32A9B89D7B6DF79549F58236035FB89067F2C5AF94C5EC672D00EA298030EC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 19859979b5ca11d88fb6404b44f5cdd514261a52e29d84a7bad8083a5bf6a513
MD5 1e9c361657798ddc70ca8e369baf0248
SHA1 5def9bd97ca6033a3403ee6bb0df711d9673ebf2
SHA512 311b0a7a14545051b402526c9775cbf156c2e7aabba8b61ed8dd6c4cbbf1b55e092efed618a1fcc920229b60bb098584d081dd050138d147a39cac0015e5ef08
SSDEEP 192:1ONF6wlDgQmiUyvZW4X58gZcOKBJBDlQJXBA5U6:1ONF6kg2W4X58EcOWJPQJ8U6
TLSH
T19502E734F9686C7B9EF2AE09F58737139FA5116BE5952F84CAE81A1D00D729C1306D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 d66e6b977a7f25bbcb7bb21a238e42be641da22ba347183f6458246423f9bc8e
MD5 6dd6e6782395bec32aacef98c96e5b68
SHA1 169cd24a0a1cd7bb391fc84962b66fb6e62df142
SHA512 7c354f44d37d7aaeac7f038cdfb968416b9430c28b73baeee6d1a57702303fceceab981a6aa882f358c2d460ccd037e44500eece0cedc8ef304f7c929e36a638
SSDEEP 384:NZcIhsNZbZZg00HX58EcOWJsUaUQJ3tgOIwZOy6L8o/:VhGlaabOVa83XsVYU
TLSH
T129829E32A9B89D7B5DF79549F18236035FB89067F2C5AF94C5EC672D00EA298030ED17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 5499cf42c835630d4e33309a45d8b491f3e12defad85171014fa5b39429a8e85
MD5 e38794a17ea235c44172fcf55a351ceb
SHA1 387fdaf38e3e393bec97194645a677bd81b99a90
SHA512 c8926fa551313e18b9a65b699ea5967e58d37dbc70eb9cbbe0e7fbd98179b2245df3f3506ec766472276bfcc5382aa1ce86cd20bb5e499144b6d1ea2a11027dd
SSDEEP 192:1ONc6wlDxQmiUyxZU4X58gZcOKBJsUakDveQJtiqZU6:1ONc6kP4U4X58EcOWJsUa7QJ3U6
TLSH
T12F121931F568AC3B5DF2A549F08336139FA55227E6897F90C5EC2A1C01EF2AC130EC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 aea6acf0631d97904278a2ace9282e9210b51abd8c470afd937d3d906f7c0b79
MD5 65c4668c4a2740157933d1242afc126d
SHA1 c95b85880e61f8bea5f2a730e30e8f6d43aeb511
SHA512 2ccdb2d18121b48a179f4bea2cfe949975273297c7b6450598f10724b1518b013e084d5eb11703c224bf9e4e2fb3fe88952fceb5c8fed335254667987fcf5141
SSDEEP 384:ziFiZcI3dsN78TUNTUlIlbZZXel2HX58EcOWJsUabQJ3tgOIwZOy6L8o/:eFQtOwgHQlQabOVp83XsVYU
TLSH
T101C208F259E7897AD9AE4747F77D2D024EBCC063B585AA90B398561CCC961BFC30AC01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 cc52cc620800f5c98d822b88e11e16f00964000ea88d19f3d0ebd8b8bd2b3821
MD5 afbbe510ee5097f5082a7e8ae36b38e9
SHA1 37f86d3eaa61bc125a549d8a54c8ea6f316cf143
SHA512 8cf87c5369e5a06be38b8738461b6c8df69c6d23b50e96b2afce7b791cf2cfd15496edbd3888924b9f18a996789e3497787b9784303096060c7c7b17ff4a347c
SSDEEP 384:NZcIbsNZbZZXHl2HX58EcOWJsUaUQJ3tgOIwZOy6L8o/:VbGplQabOVa83XsVYU
TLSH
T1FB829E31A9B8AD7B5DF79549F18236035FB89067F2C5AF94C5EC672D00EA298030EC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 64aaded7e253dd1de0dd0765ef40d95042b5a0f692ee7529087056066cb26077
MD5 9c4404c3790495d3429d96d439bda11a
SHA1 dece19d5bc0a93fcc8b9db1cdfcf957efeb6da93
SHA512 025035503ea27c8f341a1f5a99da2fccbd555fc5e1eb713b5ca7b37cb1bf44f59be773cace12e5058924ee69553858fabd043fcfe26cfbdaa84eb6d0f9d904a6
TLSH
T15941285CA6FA1148B3B77E5AABF6A46D487FB8372F06D45E10010D8E0A67B00D8B1737
MD5 SHA1 SHA512 TLSH

Submit Download