hxxp://serviciosobp[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20260911-es
resource tags

arch:x64arch:x86image:win10v2004-20260911-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
02/10/2026, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://serviciosobp.com
Sample261002-semqaasdmd

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3368	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{B3C59A67-AC17-4834-9FC4-467EE08FAB31}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
904	msedge.exe
904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe
2424	msedge.exe

Suspicious use of WriteProcessMemory 48 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 4528	2424	msedge.exe	86
PID 2424 wrote to memory of 3368	2424	msedge.exe	89
PID 2424 wrote to memory of 1412	2424	msedge.exe	90
PID 2424 wrote to memory of 3396	2424	msedge.exe	91
PID 2424 wrote to memory of 1412	2424	msedge.exe	90
PID 2424 wrote to memory of 1412	2424	msedge.exe	90
PID 2424 wrote to memory of 3396	2424	msedge.exe	91
PID 2424 wrote to memory of 4412	2424	msedge.exe	93
PID 2424 wrote to memory of 5000	2424	msedge.exe	94
PID 2424 wrote to memory of 4412	2424	msedge.exe	93
PID 2424 wrote to memory of 4412	2424	msedge.exe	93
PID 2424 wrote to memory of 5000	2424	msedge.exe	94
PID 2424 wrote to memory of 5000	2424	msedge.exe	94
PID 2424 wrote to memory of 2744	2424	msedge.exe	95
PID 2424 wrote to memory of 2744	2424	msedge.exe	95
PID 2424 wrote to memory of 2744	2424	msedge.exe	95
PID 2424 wrote to memory of 876	2424	msedge.exe	96
PID 2424 wrote to memory of 876	2424	msedge.exe	96
PID 2424 wrote to memory of 876	2424	msedge.exe	96
PID 2424 wrote to memory of 2000	2424	msedge.exe	97
PID 2424 wrote to memory of 2000	2424	msedge.exe	97
PID 2424 wrote to memory of 2000	2424	msedge.exe	97
PID 2424 wrote to memory of 1556	2424	msedge.exe	101
PID 2424 wrote to memory of 1556	2424	msedge.exe	101
PID 2424 wrote to memory of 1556	2424	msedge.exe	101
PID 2424 wrote to memory of 4024	2424	msedge.exe	102
PID 2424 wrote to memory of 2540	2424	msedge.exe	103
PID 2424 wrote to memory of 4024	2424	msedge.exe	102
PID 2424 wrote to memory of 2540	2424	msedge.exe	103
PID 2424 wrote to memory of 2360	2424	msedge.exe	105
PID 2424 wrote to memory of 4184	2424	msedge.exe	109
PID 2424 wrote to memory of 4184	2424	msedge.exe	109
PID 2424 wrote to memory of 4184	2424	msedge.exe	109
PID 2424 wrote to memory of 5004	2424	msedge.exe	113
PID 2424 wrote to memory of 5004	2424	msedge.exe	113
PID 2424 wrote to memory of 5004	2424	msedge.exe	113
PID 2424 wrote to memory of 3408	2424	msedge.exe	117
PID 2424 wrote to memory of 3008	2424	msedge.exe	118
PID 2424 wrote to memory of 1400	2424	msedge.exe	119
PID 2424 wrote to memory of 4380	2424	msedge.exe	127
PID 2424 wrote to memory of 4380	2424	msedge.exe	127
PID 2424 wrote to memory of 4380	2424	msedge.exe	127
PID 2424 wrote to memory of 4180	2424	msedge.exe	129
PID 2424 wrote to memory of 4180	2424	msedge.exe	129
PID 2424 wrote to memory of 2080	2424	msedge.exe	131
PID 2424 wrote to memory of 2080	2424	msedge.exe	131
PID 2424 wrote to memory of 2080	2424	msedge.exe	131
PID 2424 wrote to memory of 904	2424	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://serviciosobp.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7fff832ec188,0x7fff832ec194,0x7fff832ec1a0
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=es --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,5737255609314306468,15492160035929142984,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,8701743396657060801,15885826412473664001,262144 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=es --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,7795835493836198954,1614584495458878040,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,13065116249071389194,6517717715956451468,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3440,i,1924238477004447626,3059418851418012104,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4228,i,1161253011849715026,14522192148415630121,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4264,i,4826492467538905550,4872011227109984894,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=4372 /prefetch:2
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3652,i,5657223924317630902,182075116076432418,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5288,i,8341342733525932738,9375176945648506333,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=es --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,11867393513698929230,11552190428132628635,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:8
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=es --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5280,i,16361017554679555842,10484484000696908943,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:8
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,1424434716063791295,17631951983321060771,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=es --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,1424434716063791295,17631951983321060771,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6176,i,16577145506723124146,16806111124175124606,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6388,i,7154817906261354408,7492031926150420468,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6508,i,10561345904725115474,4212369102623441684,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,8921458576588948238,1074245275111395769,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=4828 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=es --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,435075947995907889,572919910451523010,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5208,i,17475290599090279317,10757733750832522906,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=es --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3704,i,10008037454688382915,12270286734172182303,524288 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=6396 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=es --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5460,i,12343583063321421723,5279545903997823656,2097152 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6008,i,11003983725942405989,2962139264818530644,262144 --field-trial-handle=2244,i,3693828845187964279,8840169764331372746,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:904

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2a72c223-1e99-435a-82af-c53c375cf9a4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2a72c223-1e99-435a-82af-c53c375cf9a4.tmp
Size 18KB
SHA256 fb3009fea3dfdb3bae14a1ce05b569edd2d2eec09b9136f6dcbd5d32d757be9e
MD5 237c78fa348e32bfe5162e87cd5a7962
SHA1 f1e9e2348b624d95117848a9b8ce58f9f35c551b
SHA512 6bd10e4a7fd5e298c9de62ecc169706e323f241c879b0867ca94aa8f95f584835b4a02a2ebd4b4276b893a3ea955990966f03cd3a0e3489d0980c0c5c22e82ab
SSDEEP 384:JZcIhsNdUEy5Xp/BGYX5EpE+VAH8JtgOIwZOyGoKoi:BhzzJGYupE66mXsOKh
TLSH
T1B5828E7198786C7A1CFB9156F58B36035FB8452BA7C8AB9095ED1B1D01EE2E8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fad01ea-aa0c-4d27-9cb4-8e454960dc7d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7fad01ea-aa0c-4d27-9cb4-8e454960dc7d.tmp
Size 8KB
SHA256 b07fdac9f8e8e96b199a96ed1d4ce99cdb68317cf2b2164263871275d6545180
MD5 f6e7ee178c630fc25fd75ff6d844a7eb
SHA1 f17abd77592a93f0a2af58d9a736afc1dc3b60e6
SHA512 77a01bd41215294ba37880bd066af0b735ad7cf4eecadeeb840542ace040822b86495c91f77686d9ab3b2280aaf77c91f773d25d41d15a874d3c3c49e59c95ef
SSDEEP 192:LJON26DphmqQmiUy+Nq8wGYX59ezLBjY+1kk7C5U6:lON26197RwGYX5EpE+5iU6
TLSH
T10402D935EC787C7B8DE36E56B48B3B235FE8212BAA506F94D9E80A1D01D765C1306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82e2743d-b3fd-4181-94d7-836d8f8a8c1d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82e2743d-b3fd-4181-94d7-836d8f8a8c1d.tmp
Size 21KB
SHA256 1e2a2fd5fc9f1a0016b56b2443c6efc5f79309c451b446a717c820ce3cbbcb09
MD5 011e981d68a48220293765dfffae8d6e
SHA1 5f051d918a34c52daac2fbf674ac4caff51ab931
SHA512 443e6989be28c449918ceab2afc739936d61a49047390eb989e3c58bcdcc55be798414a693362875fd405fbf717899e84ca7637b1f74f2230fb865c55985e140
SSDEEP 384:T567FiZcI6zsNO8TUNTUlIl9y5Xp/BGYX5EpE+VAj8JtgOIwZOyGoKoi:cFQS3wgWzJGYupE6kmXsOKh
TLSH
T1FFA26C7388A89C7F6DFB9A45F58B36039FB44127D6C4EB90A6DD5A1D00EB1D8130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

962c42c9-b18a-44a9-a809-725715e35f91.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\962c42c9-b18a-44a9-a809-725715e35f91.tmp
Size 18KB
SHA256 e58ccd38ef692deafba11b87f3d049bd0cc1ae171f0c5ce8f01e1047cfcdddab
MD5 3b9910e25e851a4716026daf8a515849
SHA1 01940a33000c65d536a5c262885c3a6d82eea49c
SHA512 9b869bb8ac2e497e502123ca22b2b7faac258dd5c3d0567f3a35fb6b41a23ccefe0a7bdac70c4df86745dd63da1c044e2ed109eddc9d08b090fe2136534dbfa3
SSDEEP 384:L5ZcIhsNdU9y5Xp/BGYX5EpE+VAH8JtgOIwZOyGoKoi:dhuzJGYupE66mXsOKh
TLSH
T176828E7198786C7A1CFB9156F58B36035FB8452BA7C8AB9095ED1B1D00EE2A8130BC27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b5552865-2917-4e84-b0d3-cbc8aacba541.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\b5552865-2917-4e84-b0d3-cbc8aacba541.tmp
Size 105KB
SHA256 25559293c954898f2da344ed5fe3faf3c076ca2a1868befb99178bedacb3d026
MD5 7921e958d547711c39f2211be9d582e9
SHA1 d327f17351a129da59733ef73c24b256addb1b88
SHA512 29c83b34cc319b93140a7156f0e4fd32fca94b626b32f9aa46eb5471603b5bab4338ee0313db91199b04ee0ff93fc3dd5d552299e129f6c1cd750f4211244525
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7E:fwUQC5VwBIiElEd2K57P7E
TLSH
T117B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

1f4ef796-9482-4582-8dc3-5d29a6d7303d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1f4ef796-9482-4582-8dc3-5d29a6d7303d.tmp
Size 10KB
SHA256 e108d89079b081c50b8c2bb98ca0662dfadaa411b0c2ffd8254f8b6b73d001a5
MD5 f6f3447111759849c7a0826e8fbdfebe
SHA1 2450c64140e066e83b9c40fe9f57d1ce438e8398
SHA512 93be3cfd8f1a24394dbcfc734016970af1571f86df4600cc1c83f0c90136bf87e772d83e7b08348d7f89b76a71894d15aec9bb12a394ad6c54f3b0573103a41a
SSDEEP 192:sxZMLWO/fisFIIupZSHfd6+WNjRO/YgjP+tIg5+J:sxZMqO/fisFA0Huc/Vak
TLSH
T1C922A7526E34B97B4CCBD21EFA55BB13E1F9503291D41E48AAFCC61C04EA6DD220784F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31b00e40-da8c-48b2-a6ac-7555afcd97a8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31b00e40-da8c-48b2-a6ac-7555afcd97a8.tmp
Size 27KB
SHA256 f4fcfa515f0a306a69ac006de0445fc90d8b24deb4f6fcfcfcac1edacfd923bb
MD5 379131fd3972570ad5016f975b70f454
SHA1 918829dae68b2b593bf226adb1aafb7773a92af1
SHA512 1e07b227b2a9acb1b03e3ed864e5a7d895cdb183542032c2c7a0b2d5f42483ff2759caa79f8c2b18a12e7a6d75ac6ba41f59450f0fe52bc10da79adf160569e8
SSDEEP 768:TIichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXz8ro9eZ:TIichfPWvPZplu1jan+LKgzn8Z
TLSH
T14EC2FA7B640CCB7E4FC01E9DDD1A6F9A7EA802C7A6588D4047FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3cd544ff-e778-4de6-84a7-6653a8747456.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3cd544ff-e778-4de6-84a7-6653a8747456.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

6d59f94d-006f-4537-9f1e-976ce7ad2ff0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6d59f94d-006f-4537-9f1e-976ce7ad2ff0.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 affa361b6576c3f14ea5fd5f846ecb152936d02ae817fca61e6e5826e68c44f7
MD5 ab2f97e2e484f8300fa4058565ddaf14
SHA1 bb6187bd449cdc463138979c4c390d036ffd721b
SHA512 e6d48a448fe38525abc354b65197a363800468cad9d263244f5b60dfe2da754904f17205f55c4b1bbffb3a2574a66393f90a4771ea72936121251a6366b15948
TLSH
T1AB61A5C955C9446BCBE488B4F1D953ABB63474B4408B1DE315A0CCF97F0D7042C24C7A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 322f3e20d71c92d812de4a32a3f77e923f4f94118915ec894ee0c88a8e0a7925
MD5 bca5795d273bf63dfab31ac2bcfccddf
SHA1 071da3bba8174b00d13929f87963f8a4f74683b8
SHA512 dac55d7ff33246ecc2982d060256fa0854f23cd6b4394921bedf4e6128486d98e578cd4f5d5bd7b069292bd991303ac5c66dc50996edaa36b666dad6dcc2eb06
TLSH
T1BA6196CA55C9446BCBE488B4F1E993ABB63474B440871DE315A4CCF97F4D7142C24D7A
MD5 SHA1 SHA512 TLSH

Submit Download

a880c0dc-005f-4282-82f0-13e8fa5cad8a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a880c0dc-005f-4282-82f0-13e8fa5cad8a.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

259bb661-665a-4f35-9cb6-3e6ea72e5e4d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\259bb661-665a-4f35-9cb6-3e6ea72e5e4d.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

a78d5418-8ee2-4c8f-82eb-3e763dab4eb7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a78d5418-8ee2-4c8f-82eb-3e763dab4eb7.tmp
Size 478B
SHA256 5017776c8972969c6c55e944b861f5e95e6cf54f930a4cb652a1c9e60b759a5b
MD5 5be57561a5ee00623cb3512e0e687b4d
SHA1 0ca427052b6a59446b089015e3c73e7dcf00fc43
SHA512 3c7349e448f27740d19bf92a8a17a03a94f7580d3b066bed541aa0e329f98633d230eda950068090b58a6b8a8952d198556348153e3b9c6d5a262885b987fbae
TLSH
T156F09EB3C3E059AE8A0043F06518AF1BCE6D0402831C7C59C5D4AE2B93F2065D40199B
MD5 SHA1 SHA512 TLSH

Submit Download

bd4cc343-7c77-4839-abd9-9d05a9ea1b68.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bd4cc343-7c77-4839-abd9-9d05a9ea1b68.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 ec09eec67ba76a23ee587f694c6970968a43c2de6b452af2048046e31de75eac
MD5 69927ccd83ddb5e3cf4730ffafeb32c3
SHA1 11d26ad2ce7bd0fc7e278ad196a46876974f5b40
SHA512 39cbb800b0009e8caac4d54d8d75dc682b5c2357d0e0843c5168bf9ab45f658bbef5a844163000f04f8024af7496651fa0d6668ba31e1a28d2082d8f7b9ef13c
SSDEEP 48:KATMnDlxdktxePIebkKvBH9kLj0c+lj5y1fIrKdiMZaIvKTSovyF2zos2Y4R1Mlq:K80QKZqSWfAKdiqa0KTSKGLaKEUZ
TLSH
T11FB1151071BE025139BD2A0980B5975F924231B77218E93B3FBD54A68E6BE086DFDCCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a1ea4131-34e7-4a0b-b4e8-c684244533b0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1ea4131-34e7-4a0b-b4e8-c684244533b0.tmp
Size 10KB
SHA256 64e4e32fa57d587ca34aa53da67d54ba9e51ba8382c7bea81630d60da7dae0df
MD5 a0f5652f68df5560a042c567c2ef2407
SHA1 39c0215ec4af8c520fa9b6e5517d18c97b318946
SHA512 d465e426425d907deb31f37acb4b212fae57936b6284a7873ca2d8399ab6a494bc5f76855af7e11f1c4c6773925241fc6f9de79846a86d73a295b3ff32bcaf3e
SSDEEP 192:sxZMLWO/fisLIIupZSHfd6+WNjRO/Yg0P+tIg5UJ:sxZMqO/fisLA0Huc/IaO
TLSH
T11522A7516E28B97B4CCBD21EBA15BB53E2F9513291D51E48AAFCC61C05EA7CD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2ddf265-1f39-4ec9-a704-0dbddbfc23a6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c2ddf265-1f39-4ec9-a704-0dbddbfc23a6.tmp
Size 10KB
SHA256 1176b04c5abd1e9dc4dffe23476a4e4386aea491228c229f37f26343d9bf0f61
MD5 a4fcc258c40520999963cd60f1b66046
SHA1 9c4498b1bb7e33d59d924162931ac8be718894b6
SHA512 44e3f635b3e01e65e7da4ffe7a245bb66ac9db9a9d1e3e4eec1f07c97e752561686faebd2c04bc645d3de8db3eb2a7bb915ad7cf201d2f201ba091fe0838c2ff
SSDEEP 192:sxZMLWO/fisLIIupvSHfB6+WNjRO/YgaP+tIg5UJ:sxZMqO/fisLAqHKc/WaO
TLSH
T14A22B9526E38A97B4CCBD61EFA15BF53E2F9503191941E4CAAFCC61C05EA7CD220784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d6018bff-4aba-4ab9-b01e-f695619e99ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d6018bff-4aba-4ab9-b01e-f695619e99ee.tmp
Size 9KB
SHA256 166fbb8287294e4c5200b16bc1fba3d308e2379d2c1a0b402d76bc7698f98498
MD5 2d61081123ba4fda80ed6df886a6b341
SHA1 02f719a8fefff70a0d119f61c32490e386b83e58
SHA512 622309b24665e6a95acc31836fe0caa0fa4f9a226abbe6e725d8e2e305cd6a70c54399c7cab8f12a305d58e79277c8fe9aca35648790b9a0135b5ca76e1b7116
SSDEEP 192:sxZMLWO/fisBIIupZSHfR6+WNjRO/YgjP+tIgrJ:sxZMqO/fisBA0H6c/Va9
TLSH
T18022A7526E34B97B4CCBD21EFA15BB53E1F95132A1D41E48AAFCC61C04EA6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a87d423d-f354-4359-a9a5-6b17e97bcd4b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\a87d423d-f354-4359-a9a5-6b17e97bcd4b.tmp
Size 22KB
SHA256 e7dfcd2af3cefc7ce57f7bf6991d35a5d20958cb42766f953d9e1c76fae333b6
MD5 5cb2b7e81b4702abd9866dd283d10b96
SHA1 5384d524ca48437435a367dbbc158070ce70493b
SHA512 c5558f99f45f9b2e4cc7c7fd80211556401a16d808a8b34aaccf6cba23f5b5a5e834235a19cf251015bda0baa50c8bea1b0a20624e7e483f5a039e0d86134f85
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uQ:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAZ
TLSH
T168A2B81DC81C7E3257CA2F7D6A2F9DB276CA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d4380d6c-bc22-4012-9924-c63e6ad50154.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d4380d6c-bc22-4012-9924-c63e6ad50154.tmp
Size 8KB
SHA256 2ff6a7e7228ea49e8f502fc78aa36e186af7633be0a2e55d1cd51b819c5b1ef0
MD5 8dec8c2203eaa2e3af29bf66ab2327c6
SHA1 5155bcb4f890ff00f8511c2ac0545854d7dfe6b8
SHA512 539ec3f5d727e664b00b66fcc88fe8f8e4ea7e9e2c2465a838e21e9e8fde2e84a36d8e5cf690594979fc049f87f049c3bc5641718025121c3eec6a984e46a0d4
SSDEEP 192:LJON/6Dph3qQmiUyLNdwGYX59ezLBjY+trAgelZpkII9q5PJU6:lON/6108dwGYX5EpE+VAe8JU6
TLSH
T1BD12F835E878BC6B5DD36952B48B35135FA4122BEB887F9495EC1A1C01EF69C230B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9b4fc7d9-0ecc-42b7-baac-6bd4bb2f0f2d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\9b4fc7d9-0ecc-42b7-baac-6bd4bb2f0f2d.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 1cd09abc396871a9f8f742d61f595f4af2879ddbf3e7a2c4fc80f2bb03c5866f
MD5 81b73353127468d861dac929776461ad
SHA1 0d2f2bfe1b242fe8d8783006d23d2f0ab71f5787
SHA512 1de230c84166376501c432755b839a6a7bfd217d7be63f69843f9d443b2fc1891f9059f14e253d082765004bdaa084f88bea719569424d453fa265478bdad016
TLSH
T16841E758B6F92154B3B77E569BF7685E487E7C772F0AD49E10110E4F0A22A40C862737
MD5 SHA1 SHA512 TLSH

Submit Download