hxxp://WIZINK[.]SMARTCALLCENTER[.]ONLINE

Analysis

max time kernel
299s
max time network
205s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
02/10/2026, 08:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://WIZINK.SMARTCALLCENTER.ONLINE
Sample261002-ktbybstycx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3752	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{DAD6AA3B-B62C-4EB9-8EC1-270722C77FD1}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5032	msedge.exe
5032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe

Suspicious use of WriteProcessMemory 39 IoCs

description	pid	Process	procid_target
PID 1696 wrote to memory of 1416	1696	msedge.exe	86
PID 1696 wrote to memory of 2572	1696	msedge.exe	87
PID 1696 wrote to memory of 3752	1696	msedge.exe	88
PID 1696 wrote to memory of 2572	1696	msedge.exe	87
PID 1696 wrote to memory of 2572	1696	msedge.exe	87
PID 1696 wrote to memory of 3848	1696	msedge.exe	89
PID 1696 wrote to memory of 3848	1696	msedge.exe	89
PID 1696 wrote to memory of 3992	1696	msedge.exe	90
PID 1696 wrote to memory of 3992	1696	msedge.exe	90
PID 1696 wrote to memory of 3992	1696	msedge.exe	90
PID 1696 wrote to memory of 2276	1696	msedge.exe	91
PID 1696 wrote to memory of 2276	1696	msedge.exe	91
PID 1696 wrote to memory of 2276	1696	msedge.exe	91
PID 1696 wrote to memory of 3908	1696	msedge.exe	92
PID 1696 wrote to memory of 644	1696	msedge.exe	93
PID 1696 wrote to memory of 3908	1696	msedge.exe	92
PID 1696 wrote to memory of 3908	1696	msedge.exe	92
PID 1696 wrote to memory of 644	1696	msedge.exe	93
PID 1696 wrote to memory of 644	1696	msedge.exe	93
PID 1696 wrote to memory of 3300	1696	msedge.exe	97
PID 1696 wrote to memory of 3300	1696	msedge.exe	97
PID 1696 wrote to memory of 3300	1696	msedge.exe	97
PID 1696 wrote to memory of 2708	1696	msedge.exe	100
PID 1696 wrote to memory of 1992	1696	msedge.exe	101
PID 1696 wrote to memory of 2708	1696	msedge.exe	100
PID 1696 wrote to memory of 1992	1696	msedge.exe	101
PID 1696 wrote to memory of 4696	1696	msedge.exe	107
PID 1696 wrote to memory of 3404	1696	msedge.exe	110
PID 1696 wrote to memory of 2360	1696	msedge.exe	111
PID 1696 wrote to memory of 2644	1696	msedge.exe	112
PID 1696 wrote to memory of 4344	1696	msedge.exe	117
PID 1696 wrote to memory of 4344	1696	msedge.exe	117
PID 1696 wrote to memory of 5032	1696	msedge.exe	121
PID 1696 wrote to memory of 4076	1696	msedge.exe	124
PID 1696 wrote to memory of 4656	1696	msedge.exe	125
PID 1696 wrote to memory of 4076	1696	msedge.exe	124
PID 1696 wrote to memory of 4656	1696	msedge.exe	125
PID 1696 wrote to memory of 4796	1696	msedge.exe	126
PID 1696 wrote to memory of 4796	1696	msedge.exe	126

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://WIZINK.SMARTCALLCENTER.ONLINE
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x234,0x25c,0x7fff82f6c188,0x7fff82f6c194,0x7fff82f6c1a0
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1740,i,11345710093939905371,15338424023013994350,262144 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:2
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,5685222395727799393,6473075365085592755,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=2648 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2404,i,10476909393717076573,2950833971979864342,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,5595916426030771773,15497083769831407052,2097152 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,5968877668488489364,15307287355467787115,2097152 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4152,i,3312903500264727937,14765094549223373857,2097152 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,9713556220857131890,7836560657773996317,2097152 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:2
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5020,i,7835608349846085210,9213223139922040841,2097152 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,9050707349932220752,11392710249139130318,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,15321095155291194469,4127290699214556591,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:8
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,1049491110814966757,13351042904318581429,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4680,i,1049491110814966757,13351042904318581429,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,811580943803847846,8886100515277864877,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,14423449596162963832,602658524269682550,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,2135268389591632892,10296089788414173859,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4668,i,8353459213457741780,10192531906802185743,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,18216028571433150195,17945867361631304269,262144 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5588 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,9311165559949792235,16445449699760004946,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,11661038630999873033,4573497228233398473,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=es --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5756,i,5461648594597088738,5623643035719951475,524288 --field-trial-handle=2428,i,1966682978570463084,16805350783895689178,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
  2⤵
  PID:4796

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4496

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

05a4a0be-ed86-4c04-a4ad-ad09cbbb93d1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05a4a0be-ed86-4c04-a4ad-ad09cbbb93d1.tmp
Size 18KB
SHA256 e6b06bf8c49692245875f1e3a4d4bdf33671b1ac43ad6368230ce029d1555fca
MD5 4581bccd93d0fc7a40971687ff90e2dd
SHA1 b4c1cb67289d705de37e4f03a741827d8b93701b
SHA512 08077cc6d7494554aaa933d9a2adf5383f38ccdf1dc4cc22d3951281d512e38ca281a811022b4c0a2139313ad1cae934ad7ef67d23f825dad5eca60fecc3755d
SSDEEP 384:6ZcIhsNQUpxb5i5poBGYX5EpE+VAnBtgOIwZOybuoE:4hubiSGYupE6KBXsfv
TLSH
T1DD828D7299B86C7B1CEB6182F58B3A034FF84127A6C56B90D8ED572D05DA198030BD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4ff2ced4-936f-475c-9529-8d902741f7f1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4ff2ced4-936f-475c-9529-8d902741f7f1.tmp
Size 12KB
SHA256 8b712cbd73968dbe5bcb97eef9132238a3638093e77294e0faccabb9767f642d
MD5 2df9d031e57ee2ae2c2aba0bfe85f03c
SHA1 efc664350e08f7832abb32cd5075d5691e727ac3
SHA512 cc15fe5507b27c88833f1148a9f1fe032f0f95c4fec7f0a9b07cce25fd11adcecd5966ee1b9a69d4f611f379bb00db576b2692eef1238a2ad57255703fa491a2
SSDEEP 192:ukzLsNQUwQpmVphvtx2QmiU1RXp34BGYX59ezLBjY+trAgelZCkH1Eq51lYyXj4P:1sNQUwxb5iLpoBGYX5EpE+VAnBxs/
TLSH
T10C424A75A8B4AC374CA76582F44B3A139EF4522B9AC83F94D9EC1B1D01CF29C1307927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

573e5ec2-ec54-48a7-ad5f-35d97b803b48.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\573e5ec2-ec54-48a7-ad5f-35d97b803b48.tmp
Size 8KB
SHA256 51234169791edf6170b0a6e64d6f634db10eed889ba10e5520d17ab5347bae04
MD5 e5f9501e57f6315b52305ee3066a7bfd
SHA1 d968d19c9f37b1c6d5b5440d2a32a9e5e7b17ebb
SHA512 79b8e2b163c83d9c8130467974548bbf959dabd575e83ac2e75a7dbcabe6e369400a29256bf829c54a2871d5a2361a8fa77d14cc27a6dc406cca23bb65990f25
SSDEEP 192:LJONa6DphvqQmiUyc3YwGYX59ezLBjY+trAgelZdkIIEq51U6:lONa61wFYwGYX5EpE+VACBU6
TLSH
T11512E835A8B8BC6B4DD36992B48736135FE45227EB887B90D5EC1A1C01DB69C630B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

775819d9-d2fb-4590-a0b6-348e30b85f06.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\775819d9-d2fb-4590-a0b6-348e30b85f06.tmp
Size 8KB
SHA256 de159ccba5f1774b4377995b677394fc8949e06b7f9e31da4baf03359209e207
MD5 0f448c13b2d2a1aa700977a0f2e4da1a
SHA1 7cf060be95268441ce9d4fe2ed7438df34c54be8
SHA512 e6ef449c5fb72e63cc5709c7ac0c42ce43d9becb37b7936848af32de030a8bb743bb339f47e2e49f22d9b48317a50c7884d604bdf442126a941bbd5fd75bb53e
SSDEEP 192:LJON26DphmqQmiUyk3q8wGYX59ezLBjY+1kk735U6:lON26197RwGYX5EpE+5JU6
TLSH
T14A02D935A8787C7B8DE36E56B48B37175FE4212BAA502F94D9E80A1D01D765C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a3f6ac3-854a-481d-8b92-7733bd7c20ea.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9a3f6ac3-854a-481d-8b92-7733bd7c20ea.tmp
Size 12KB
SHA256 47f6bb9af0fb32724e0b73b6b8f35871fbc3e76cbe8fb237620922415e941ec4
MD5 a27a3d53333f4cbd6de8b730d8c3232a
SHA1 8cdee12b760dd43895b5df1bdea3883b218bdee2
SHA512 99c6416c2a270258c05186b469db7e41c8fb551b4870f5b5727558f468ad20bd3eefe4a325a026c80df4aa87777498aef6eca94045c3bcf9e62950b4d535c24d
SSDEEP 192:QzLsNQUnQpmVphvtx2QmiU1RXp3ZBGYX59ezLBjY+trAgelZCkI1Eq51lYyXj4X/:CsNQUnxb5iLpJBGYX5EpE+VAaBxs/
TLSH
T19C422975A8B4AC374CA76582F44B3A135EF8512B9AC43F94D5EC1B1D01DF29C1307826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7a103bc6-f256-43e2-b77c-6584570031f0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\7a103bc6-f256-43e2-b77c-6584570031f0.tmp
Size 105KB
SHA256 a6673ce49b12fdcbb7d76835e1b016504a29767f7212d8e801c405cb7104ab24
MD5 ca6c08209c2d38cddd20d85d8c5dc47a
SHA1 cec1cabd103f18062e7cb4e4d6f0d8b419a6c0bd
SHA512 21049ac949a133b2d3655a743fa48fb77fd023763be431c403808d8b8cc86ade7133ad2fd2407bc2f19378bde77d294fb858d77ccfdd369434389ccbd4e515c6
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7V:fwUQC5VwBIiElEd2K57P7V
TLSH
T17AB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

1fd72413-9877-40c2-af29-e7c96b6b1903.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1fd72413-9877-40c2-af29-e7c96b6b1903.tmp
Size 10KB
SHA256 87ef1ad19072a0008528ac966ba2333776846bb5818d0b05aadfab0f1590119d
MD5 d7b118c846f6f0280184c0086cb64a69
SHA1 c941dd62b4bf4476b48d897805047405df4a1261
SHA512 7d9ce4b4c878d795e3ac4ed7022f223c3cea8274085fd7d6de585dfda1e0362d146553afbf68d6b49cadd5e107293bbfd9659c68fc58d8b75b367642a9f78ecb
SSDEEP 192:sxZ0LWd/fbsnQEupCmMHW6+WN99a/YgWL1+zIg5OJ:sxZ0qd/fbsnegHbu/0xuA
TLSH
T14A22D9566E28697B4CCBD20ABA157B13E2F6513295D50E8CEBFC862C05E67CD220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

202a5f7a-72a3-409d-a4fd-48f32375bd0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\202a5f7a-72a3-409d-a4fd-48f32375bd0f.tmp
Size 9KB
SHA256 2b4143d2b5233ab791038439a2d5a0c5ae4dc1d85826d839999f5b9878c18528
MD5 0e4a82299cb163023ee9f3cbab6438cb
SHA1 8bfa888e4ab0a49f2360aec35691532f2d5a2dfc
SHA512 a313b7a9356b742ab3952b531b156e6509e59221401785a25cf33b1fd595dfbd9eaea5cc1c78535b85da0b2ebee0a05c508ce70a4054e38c25d52b91a76de91c
SSDEEP 192:sxZ0LWd/fbseQEupCmMHW6+WN99a/Ygv1+zIg5OJ:sxZ0qd/fbseegHbu/DuA
TLSH
T1CF22DA526E28697B4CCBD20EBA157B13E2F5513295D50E8CEAFC862C05E67DD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

46f0e98e-c21a-460e-806c-2bad27d9d56c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\46f0e98e-c21a-460e-806c-2bad27d9d56c.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

52da6b46-2e8f-45b0-a4a8-529444c5d45f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52da6b46-2e8f-45b0-a4a8-529444c5d45f.tmp
Size 10KB
SHA256 8daeef732165b5b409af3b9bd255e05cc630f19b0bb07b8bf0b13d655a66cd29
MD5 0cd40dcc63174bc71d0fd8b2a62669d4
SHA1 3a7e997acfbe5b82da9321e6456682f143bf688c
SHA512 19ad46aa74cdc8da22a511a1fdd2c0ed4755c9d1aec0ddb383da5782577ca0686fcaab681c54a150bcd0fca7c790962f159c73b53781d7387363e6d0c8867b36
SSDEEP 192:sxZ0LWd/fbsnQIupImMHW6+WN99a/YgW3l+zIg5+J:sxZ0qd/fbsn42Hbu/0Vu0
TLSH
T13422EA566E28697B4CCBD20EBA15BB13E2F5513295D11E8CEAFC862C05E77CD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

808d391e-127f-40f7-bb5d-8afca74e8ed8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\808d391e-127f-40f7-bb5d-8afca74e8ed8.tmp
Size 9KB
SHA256 e64f81c8d924658aebd9611769c266e87b3ddd479e10e89545db616944c8cd37
MD5 0ff26bbdc690385bc7f046c7fcdf671a
SHA1 cf7abf1a823d78591e761ec40a6e5cfa72a38071
SHA512 6369f0fa496989863ab16ec0bce5fa6ef125eed015738713d8f0ac14cf2a6b1d386f462712442a5843bc83bc3b2b3173a66c0d0fea2aadbbd6bbf942406c293c
SSDEEP 192:sxZ0LWd/fbs4QEupCmMHW6+WN99a/Ygv1+zIgrJ:sxZ0qd/fbs4egHbu/Du9
TLSH
T11422CA526E28697B4CCBD20EBA157B13E2F6513295D51E8CEBFC862C05E76DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a66c2b7-2677-41a7-9fe9-80fd5273154c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9a66c2b7-2677-41a7-9fe9-80fd5273154c.tmp
Size 10KB
SHA256 3b6a8324d5020811cd8ce64d3624388aee81403b4022227660e8181a37a5f70a
MD5 49a82244eb1d5c39cacc31bb41adba7f
SHA1 6d15444a28b6862b7bc804b75e7bcb3f1201dbba
SHA512 11ea8e9d918aaff1462f3715d521d6222e5aa2eb37f3dcf2fc25160f767435fbaa76702c05dd49c04c4dff14bb1531a31dae3adcfe880c0a36bf1229cf647ef9
SSDEEP 192:sxZ0LWd/fbsnQIupCmMHW6+WN99a/YgWLl+zIg5+J:sxZ0qd/fbsn4gHbu/05u0
TLSH
T1C022DA566E28697B4CCBD20ABB15BB13E2F6513295D11E8CEAFC862C05E77CD220741F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 334B
SHA256 d4ee5414828a7b8ecadc9cba087e036ff6418d69868564bff9d656cee3e53da2
MD5 52fae1a1526a99dbc213e04eeee081af
SHA1 3b30a1b453664898f2fe23f2a95cede337e4bbce
SHA512 5a9cc078a6887a5f79cd448c38da4521638dd7e5567be00fb5f14cc532a0cd8c6ffaa3525fa8b9b762b6e21aa23ba3f0ed844aa42246281de8ef76c36085dd23
TLSH
T1F0E026F509CEC26EA208748702EC934CCB90B61FDAC1691E2740C58D7A4B040F2AE6A0
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 bd84a539e3f643e18833c2435ec4d493ec8f7801af1dae4f3236ad4042306d46
MD5 ae637eefabb88791d83e3e52e2eaca55
SHA1 29d05dd9b0f6d785dfff5c913e054f9899c23bee
SHA512 f16d0d447089cae26593d3981750c92d85d500ec05a8d6a9b5e221791a89a8846a6bba39188503fca956390b5c73d7d2ac077c991a4128dde97cdd4a30d186d6
TLSH
T1D971C8CA58C8446BCBE484B8F2D957ABB6347878448B1DE311A4CCF97F0D7182C64C3A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 c8b4d576a4216b30a803ebff7ec9b6f77b8b98d07c15f3b38b08db6ff7b7f882
MD5 fe51f10d2283a1015d778451a5085209
SHA1 84f871d7efac08f45a517157fd9440a2481ebd81
SHA512 e7797109eb17c72ab0b3afb37ac222a547c8d3189ff15eed1c037f0cd221e81ac45718afb4d5c17f431b430935c49dab1cd9b8897c4c65a8cb6f750a893566e9
TLSH
T1B96196C955C9446BCBE488B4F1E993ABB63474B441871DE315A4CCF97F4D7142C24C7A
MD5 SHA1 SHA512 TLSH

Submit Download

c243c0c3-c4ee-4cf0-98f6-ac87d88e3e20.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c243c0c3-c4ee-4cf0-98f6-ac87d88e3e20.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

6e812fba-4b7c-46fd-879f-de8f7471558b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6e812fba-4b7c-46fd-879f-de8f7471558b.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

eced6a7d-39ba-4176-acb6-ce6e193a2fbe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eced6a7d-39ba-4176-acb6-ce6e193a2fbe.tmp
Size 1KB
SHA256 013a8fc626e6e9ff639d2703668d54cf8a257238bdebcf1e4a002963e59b8818
MD5 d90d2f32a6318d81fcafadda26abd4f8
SHA1 05b5c7a0295d6c68ea7a10aedae9248f21f8bd32
SHA512 4c3385b7c301b10807dbfa545ef92c88a61578faafb9c3359d11392ec9416f828e5025612bf33c10200d270a0547585a40feb7a965b9a53d7c9cce643a52fe49
TLSH
T1ED21ABF383F296BE8A03D6F0D908AD17CF5D0591031C785AC9E4BE1753E29A1E141A5B
MD5 SHA1 SHA512 TLSH

Submit Download

fbee65c7-857c-400f-b42f-8851a67d9de7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\fbee65c7-857c-400f-b42f-8851a67d9de7.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 a79fd9f5a0e8cfc068bc6bd1d998f450fa9e72aeb20e73345ad0f6de4731d7ba
MD5 5bee201b91b2766f7d6052eedcec059b
SHA1 6ae1e3a332ddc1a95f55c96abc565a48ec91b811
SHA512 6eb1e4ca88e39473236984d67ec20daa4bde116dbb439f5434cc11c2b796e07c768dad4d06ca7c57cb57adeb3b3a19aa0fca3612a249549375c6b17c767d5edc
SSDEEP 48:KATMnDlxdktxePIebkKvBH9kLj0c+lj5y1fIrKdiMZaIvKTSovyF2zos2Y4R1Mlo:K80QKZqSWfAKdiqa0KTSKGLaKEUB/sJs
TLSH
T115B1225071BE025139BD2A0E80B1975F924231B77214E93B3FBD54A68E6AE086DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

aacc7259-e1db-41e5-85b7-e578c9c0f5ae.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aacc7259-e1db-41e5-85b7-e578c9c0f5ae.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

dbb9be73-338b-4fe2-9919-793bece1f9cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dbb9be73-338b-4fe2-9919-793bece1f9cf.tmp
Size 27KB
SHA256 c14fe966aa24839a09c592648438198e6068cf793416dba34ad7719c6d960b12
MD5 8ca625ec9c40701c48b5bbb324d508f2
SHA1 315cd6fdaacc89264a0878cf8fa7b62d23dc5ade
SHA512 a70c46101c942a0a961109507699d4e23e1bea94c932dab0469e30edd2c4d304c700e6076c43a552189dc16838db14b49cef9dc7899012e71334cc739636074d
SSDEEP 768:R2ichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzWroT+n:R2ichfPWvPZplu1jan+LKgztqn
TLSH
T193C2F93B644CCB7E4FC01A9DDD1A6F9A7E9802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 1KB
SHA256 0e6af54d8281a5752829a41b66e384a4237a0e45c0d06466ddb172f6bc1320f3
MD5 8e6226d1514a70bd1c60b7895bad0f33
SHA1 3530ec9266f47fb8a50fce0fe10b6291523db200
SHA512 2d393ddb60f4c97d6486566a48ae0addc0f375b4ac8164fdf4f5339c54616f170c98931b09574f26cdd597557276ab703de22d4fb8959da054c898de521e8c51
TLSH
T1AF31B7C0A3DA5464AF89BB45C1AD7503A0F53E7AA32D587223AE84F58F4CC144E7EDA1
MD5 SHA1 SHA512 TLSH

Submit Download

4febfde3-cf03-41be-b5d0-35107937849a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4febfde3-cf03-41be-b5d0-35107937849a.tmp
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

a81efae8-ad12-450c-96a7-f6c617d11689.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a81efae8-ad12-450c-96a7-f6c617d11689.tmp
Size 21KB
SHA256 295992c5f7b079e33865e4371b8d0bf13cd0ae31636ef93dbd488429fe5b444d
MD5 25c7b0cb20fad4119f2f530c36969d6b
SHA1 a6b9ec4100ce340f41bd549d1dc7d10f25ad190e
SHA512 045d1da543c65f58142d5095b5a66029994a8e79c34c5f7d4c051e486b0e4aa33814c229a4717927353656c01f4abab7e9765951aba77e1ba9a9638648a3e5d6
SSDEEP 384:/67FiZcIwzsNx8TUNTUlIlpxb5i5poBGYX5EpE+VAbBtgOIwZOybuoE:iFQsEwgtbiSGYupE6EBXsfv
TLSH
T126A27D7389A89C7B6CFB5A81F58A36038FF44127D9D5FB90E6DD5A2C019B1D8030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

69e2cbb0-73c1-41f8-8264-65edde2c0a7c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\69e2cbb0-73c1-41f8-8264-65edde2c0a7c.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 131ca34676e1104002f2529462c9b59eed620e4f37986f16443613478d7551b7
MD5 a7f9e5606533ed77d22860a1b0492667
SHA1 91b3a79fdc0c0fbcea6d88068c39863cce2173f0
SHA512 5bc4094d9a32007f9e5ce980bb5decd88837e73d712ac5f7b708a16a61a992e49516bacd58f2284885bcf7555574a6db49facc9fbd4663f76c4ef92f04b392d9
TLSH
T1DC41D85CA6E91148B3B76F56ABF2A86D487F7D762F0AD1AD10110E4E0A23A40DD71B33
MD5 SHA1 SHA512 TLSH

Submit Download