hxxp://its[.]jnj[.]com

Analysis

user interaction
yes
max time kernel
149s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/10/2026, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://its.jnj.com
Sample261006-rx5hdact9m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2608	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{84EC08FF-1897-402D-8A72-1FAD52FDE0CA}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 3236 wrote to memory of 3096	3236	msedge.exe	88
PID 3236 wrote to memory of 4976	3236	msedge.exe	89
PID 3236 wrote to memory of 2608	3236	msedge.exe	90
PID 3236 wrote to memory of 4976	3236	msedge.exe	89
PID 3236 wrote to memory of 4976	3236	msedge.exe	89
PID 3236 wrote to memory of 3344	3236	msedge.exe	92
PID 3236 wrote to memory of 3344	3236	msedge.exe	92
PID 3236 wrote to memory of 4484	3236	msedge.exe	93
PID 3236 wrote to memory of 4260	3236	msedge.exe	94
PID 3236 wrote to memory of 4484	3236	msedge.exe	93
PID 3236 wrote to memory of 4484	3236	msedge.exe	93
PID 3236 wrote to memory of 4260	3236	msedge.exe	94
PID 3236 wrote to memory of 4260	3236	msedge.exe	94
PID 3236 wrote to memory of 3296	3236	msedge.exe	95
PID 3236 wrote to memory of 3296	3236	msedge.exe	95
PID 3236 wrote to memory of 3296	3236	msedge.exe	95
PID 3236 wrote to memory of 3984	3236	msedge.exe	96
PID 3236 wrote to memory of 3984	3236	msedge.exe	96
PID 3236 wrote to memory of 3984	3236	msedge.exe	96
PID 3236 wrote to memory of 4536	3236	msedge.exe	99
PID 3236 wrote to memory of 4536	3236	msedge.exe	99
PID 3236 wrote to memory of 4536	3236	msedge.exe	99
PID 3236 wrote to memory of 3156	3236	msedge.exe	101
PID 3236 wrote to memory of 3156	3236	msedge.exe	101
PID 3236 wrote to memory of 3156	3236	msedge.exe	101
PID 3236 wrote to memory of 4812	3236	msedge.exe	103
PID 3236 wrote to memory of 4440	3236	msedge.exe	102
PID 3236 wrote to memory of 4812	3236	msedge.exe	103
PID 3236 wrote to memory of 4440	3236	msedge.exe	102
PID 3236 wrote to memory of 868	3236	msedge.exe	106
PID 3236 wrote to memory of 4016	3236	msedge.exe	112
PID 3236 wrote to memory of 4016	3236	msedge.exe	112
PID 3236 wrote to memory of 4016	3236	msedge.exe	112
PID 3236 wrote to memory of 64	3236	msedge.exe	120
PID 3236 wrote to memory of 4736	3236	msedge.exe	121
PID 3236 wrote to memory of 4400	3236	msedge.exe	122
PID 3236 wrote to memory of 3484	3236	msedge.exe	124
PID 3236 wrote to memory of 3484	3236	msedge.exe	124
PID 3236 wrote to memory of 3484	3236	msedge.exe	124
PID 3236 wrote to memory of 3768	3236	msedge.exe	133
PID 3236 wrote to memory of 3768	3236	msedge.exe	133
PID 3236 wrote to memory of 4796	3236	msedge.exe	136
PID 3236 wrote to memory of 4796	3236	msedge.exe	136
PID 3236 wrote to memory of 3240	3236	msedge.exe	137
PID 3236 wrote to memory of 3240	3236	msedge.exe	137
PID 3236 wrote to memory of 3240	3236	msedge.exe	137
PID 3236 wrote to memory of 3464	3236	msedge.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://its.jnj.com
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7fff9750c188,0x7fff9750c194,0x7fff9750c1a0
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,13720082533746648,10462560938889494443,262144 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:2
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,576247606243432171,7883820196853685109,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - System Time Discovery
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,13565303739318777033,909847832471907076,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:8
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,16487630110711622885,9482244565743013440,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,3588921704460569179,1586071667776534521,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,2060732383293431020,3390972946423582496,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4212,i,4421101841850474382,6395789317150324839,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:2
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4816,i,10565355619044341892,15644215390028943908,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5208,i,5412811976924387284,15568254879079713033,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:3156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3504,i,10611386528189606626,11630219857337881702,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3432,i,5809705824952520156,12181923689731906204,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,6137096078724519978,3294314207998993850,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,6137096078724519978,3294314207998993850,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6208,i,4785716108091235032,1647592628553293341,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,672759866561576348,2732265163101222099,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,1207392535377393767,6434490456309734937,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:8
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4468,i,16080740074170449561,156876851421066268,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4844,i,7956609240170835647,1810899693339604225,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=2104 /prefetch:1
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,10543956956564316977,13361444129800324729,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6040,i,12438603105252164115,15655584558214575128,524288 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5172,i,7133208318695546224,7869940321131461955,2097152 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6612,i,12407121678608088928,7069533540262403109,262144 --field-trial-handle=2424,i,1297487870906447748,3969161967350334070,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3464

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2684

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

29b52131-c0b3-4642-bf6b-caaea9f8a472.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\29b52131-c0b3-4642-bf6b-caaea9f8a472.tmp
Size 8KB
SHA256 26cc5782aa1489cd275d07304cc9510c38f7f013f8e013b09004c1d73757e8c3
MD5 7e58e0d070307316d4b22ce404ebd173
SHA1 4048018ca0adcdc3b942c0cf3f15096a9046e99f
SHA512 1ae455b12602bd2e4c5416389b401e5cca9e562db01e269cb69a42764d23538a9cb1b2a8acf4f0a7a6c6a547e929131fe779783421a7841c0c3ae3987c42c1e5
SSDEEP 192:SONk6ygpQmiUyBVEtOCTVgcSMosSPzP6oU6:SONk6lHNtOCTVHglbbU6
TLSH
T12202E935BC687CBB8EF3AE06F48A23179FA8117BDA552B40D5E81A1C01D765C2303D36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

44d3137b-7c8f-476f-8ac2-d955c0756330.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\44d3137b-7c8f-476f-8ac2-d955c0756330.tmp
Size 18KB
SHA256 fc7deb15910e13738719ef71e15ef784ad677309a2e6b920ed8c156c65d702e4
MD5 ef34398af45c8662db2c9ba1a0f85f5a
SHA1 f118c3c7d8e01de25f5d443a155f2fb1b7347149
SHA512 7c69928d3f96218104b76fa24f194d7a5732eaf3435603c71856e6baf75e643d17a198640dbc663c746387e516afb0665bb44cf720a34a013c1cf24c840b331d
SSDEEP 384:gZcIhsNyMwqNIbM8LOjTVHglhBzMtgOIwZOyfo4oo3:ehPanOFzMXsBdA
TLSH
T17C828D726C785CBA5DF7E141F98A32038FB8816BE6C96B4190FD5B1C01DB6AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6b0f3734-a8eb-4291-9320-512a74da3fd1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\6b0f3734-a8eb-4291-9320-512a74da3fd1.tmp
Size 8KB
SHA256 32f1fd13bc6788195dc6def154b60364ffadd552f8fea092461b4786a4a68441
MD5 2215bf08b2a265696c1ff07dacadece1
SHA1 3a2d00340661d6e39175bfdf2c120040432d4cc2
SHA512 7b53e655fcb8fc7eec9d5bc3513913d6db47c5457bb2e65180f36a777db3299890b4ca8ee9f3b6a5d094c5629e680c99173287894de5ff0461f0b20930b6f8e5
SSDEEP 192:SONr6y0QmiUyBcTEJOCTVgcSMosSh2BEwE3U+qQU6:SONr6T9gJOCTVHglhB+MU6
TLSH
T1E612F9357C686CBB5DE3A541F48B32039FA85267DA497B41D5EC1A1C01EF6AC2307D2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

301b5bc2-0c7d-416c-abe2-f5b51d2abfd7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\301b5bc2-0c7d-416c-abe2-f5b51d2abfd7.tmp
Size 9KB
SHA256 a784ec3a8cdb2cb02b188e05a55877612cca6e2db7f88f9dba3b2a64be74518f
MD5 b8c38cf10394110fc3b32ca459a56642
SHA1 11409c68eef68c3931388e11d31a7df8af78a171
SHA512 21f4a77f7140609ece375f9535962e41a142e219a532dae89430c83305d16b8a71a0487605d8ae2929a3874d6b3a85bee175146a711b4552a96297f174ddced6
SSDEEP 192:sxZyRiWp/fis4JPIdpddHZP76+WNGYRPR+FIg5aJ:sxZyrp/fisUg3HiGmWM
TLSH
T14C22B5526E38A47B8CCBD21DBA19BF13D6F9503291D51E48EAFC861C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7b027b93-8470-4c06-808f-c6fa7755381b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b027b93-8470-4c06-808f-c6fa7755381b.tmp
Size 27KB
SHA256 2b57ee74799731201214be8066842131f4ecd3c535e4a7b937b45dfcb00a78ec
MD5 dada09a7ce01ae8d742017921f03601f
SHA1 c5690b2253a5125f7b474b5e7ee7b14361267dba
SHA512 caa2022d181c5207e2943482538bf2314d96d7d02e6fad64852a4a5b8852c6e460b72f578c1bea1dfe6b68114b77664259de669d3ea827c6f246fcdaca25245d
SSDEEP 768:THK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3sroN+jR:THK9uzYWvcQWsu1ja0HL7Q33N+jR
TLSH
T1D4C2F93F640CCB7E5FC01A9DDC5A6F972E9802D7A6584D4047FA984C02C77EA52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fb8af1c-4c06-4d06-a530-1bdeb295fc98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7fb8af1c-4c06-4d06-a530-1bdeb295fc98.tmp
Size 10KB
SHA256 f767fe8209567b739731c5e1e1155f376a099cf3a3edf4d494c0c12a4226d561
MD5 21d3afc55bda0c7343a86da9449e346b
SHA1 9c28eefadbaa3919070a154bc03cc97034b7e6a6
SHA512 f65973e61cc505de242fdee5fe28f9f1587c39d7c50ad0d488296d405d9d874c85bb525da8797b9e083e12decb848e5e7a4643850483af76b8211cd31763c01f
SSDEEP 192:sxZyRiWp/fis7kJPIdpjdHZ+876+WNGYRPj+FIg5wJ:sxZyrp/fiscghHOGmgG
TLSH
T1B022A7526E38697B8CC7E21DBA59BF53E6F9503291D11E48AAFC861C05E7ACD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 163f549d2e4fb8d46898cb46c52b0e6c75550a78c258a273c57160f16014f9c0
MD5 b3d73e5fe0a62ac38b181470119d3263
SHA1 b75871c593f880522370e4c545a15566b7870bcb
SHA512 bcf5fdfbedd7f4f84be4823954d303c6b4cd041f92c3e7b24a8550e715efe0e63f72b946c59233bb7844b4dc9cdd5c63616563817e02000ac76ae528b916220c
TLSH
T165E07DE408C8C32EA258644F83AB670C93E43E9AF3C1A90E3B04C5C4B60B040F6E26E1
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 888c796ebdc9a7d4cce7dbd88ac80c0374e927f6f7564c6039b29a5426fcb370
MD5 3a6648bba78a9b320964876c0fb30f1f
SHA1 a532a1fc1238324c40d5b34128a78afceca84385
SHA512 3b8618a6ee3aa249d95832bb87ed3674df13131b1c36206a9d5f75206f477b5e28859b61b69a90002955d6e78743c5010f2ee597f3f5b8dca209c80b6072cb9d
TLSH
T10B61A2CAE1E34895F7A806B047D70DC73333DC8365672E5E9468DDF8788A7926109310
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 313606bcd30b09e2fd87d22ed2609e04be71a7af89bf68d28de9edde0e6283a6
MD5 ad3a948af2d7fd03377a50b8c5a471a0
SHA1 9a780f5f44fde67dfd7b415b74c34c527ee5235e
SHA512 5b36512ad6db46983eb3f2b9737f3179eeb1baa27fd009f39481a5f7a5dab33d9227f8886769d828c2497a2416729999effe4256a3686ab2346cbf31ec4f1aeb
TLSH
T1A861A2CAE6E34C85F7A806B047D70DCB3333CC8354672E5A9468DDF8788A3926109310
MD5 SHA1 SHA512 TLSH

Submit Download

3e9f76ef-bd05-464f-bec2-d7560c7a91b1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\3e9f76ef-bd05-464f-bec2-d7560c7a91b1.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

274f6b13-a4f5-4765-a87f-b762bd316da4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\274f6b13-a4f5-4765-a87f-b762bd316da4.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

36e200fb-26a6-48cb-8eb7-7a365a605f66.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\36e200fb-26a6-48cb-8eb7-7a365a605f66.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

f21ca2ea-3bd7-4d30-946a-2725532fc59c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\f21ca2ea-3bd7-4d30-946a-2725532fc59c.tmp
Size 949B
SHA256 80ef3de2bbc3b10679c2bc2696cf3c6eba05a700a5df08c1004438583571b954
MD5 d98da19b6b6f2603c0076e623245fee3
SHA1 08dd34e534e6b6464035b103871011eed249f8ee
SHA512 7d8db5fefb53ca2c6b0a11fa9feae2f844bfece74baccfbaaa023afa615d8b25631e78eceb2c15e9d327b36ab909a311e56ec6aacb8cff5bceae26ff5c8e8ce7
TLSH
T13611BDF3C3D585AE891156F05A24AE2BCE1D0A05421C7C1985D4EF2793E3475E10299F
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4810972d718e0cb26aa1d48e29b668bf860e5a6864563d984d436f6ce050a85c
MD5 af0029a0c5340d483fc04425a0069d7a
SHA1 e997069edf91a907a3ade1d4b68545a67032c838
SHA512 f6cf2482d3ae8f459c4bae1b568e468b88e293f8bfdba7cf44604632a427705f676992c2da419496f5dcb789296b2210ab26faf64b7c76b788276be2c5fde7e6
SSDEEP 48:K0mImRAthrvzMb/KXIS5MK9Z1zMxxcYKbRRymDI1Kocwvy9lIxKek8i:K0mJGQKjiOpD2KocKulOKekV
TLSH
T1E5912299307B8261387E2A5892AD861A469130F33159E57F7BBD41F16E2FF404CFE8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b541e0ba-fdf0-4d3b-ba8e-33ec8452cdac.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b541e0ba-fdf0-4d3b-ba8e-33ec8452cdac.tmp
Size 10KB
SHA256 0427f911eefd309cbae7ba8147263b8b76a5c68dd89ff87aedd9cb23f81cc9c5
MD5 a5f2c2cba97a85dc56136916f5923bfb
SHA1 e9a53a88325c48db4408039a9d5ac98b563e1cfa
SHA512 b60938de9d5c600cb543b4eea18e6e3d772856a22e261f84c93ef1c9bd06af34886d1b930a7c189b942deaa8e32845079809d6bfa1b59dd1ab0f61d0c535ef5c
SSDEEP 192:sxZyRiWp/fis7kJPIdpddHZ+876+WNGYRPP+FIg5wJ:sxZyrp/fiscg3HOGmUG
TLSH
T18A22B7526E38657B8CCBE21DBA597F13E6F9503291D11E48EAFC861C05E7ACD130780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb92fc8c-5a29-4f2d-a298-6ba610943f0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb92fc8c-5a29-4f2d-a298-6ba610943f0f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dfe305a4-9335-468d-9c22-5ecb8e88dff8.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dfe305a4-9335-468d-9c22-5ecb8e88dff8.tmp
Size 9KB
SHA256 61f17f0c9093c98f1720ca99ee7fbbfacb8d832de0721f1590f52e731a2586e0
MD5 a4e72d58e83b0508b91fb4ce866a2ff6
SHA1 ba0e4dedcbb7903144ba31980a7eac24450eb567
SHA512 495e91e3fadf48016551afeb153120085814e6a8bc6dd5e94ede890828817ee7df2e9b83c3309b025bd810e71f0d872199cf9f548a12c8dd0476b582af05a54b
SSDEEP 192:sxZyRiWp/fisPJPIdpddHZP76+WNGYRPR+FIgrJ:sxZyrp/fishg3HiGmW9
TLSH
T1AE12A6526E38A47B8CC7D219BA29BF13D6F9503291D51E48EAFC861C05E7ACD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

d88873e3-9c7b-4c39-ac07-6372ec32bb05.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d88873e3-9c7b-4c39-ac07-6372ec32bb05.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a491dbf5-fe6d-4e2b-9ec4-bc1a90537d12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a491dbf5-fe6d-4e2b-9ec4-bc1a90537d12.tmp
Size 18KB
SHA256 5b46466c2ff01c6d5509ab18400211b76ff14a66dfdad2675f04c47de84c5a89
MD5 b10858a238d035128130416948badcd8
SHA1 655b3f3f4c7f5cbc4d3d7ce2f8dabf479c11b79d
SHA512 77e32b68ba61b712f0b45872d639ffbca469989bd90b24be7a1eac1376de58a51403f747788b16e4237cff1b95d3a7af83ce9bed14827d20331b32e294baba94
SSDEEP 384:RZcIhsNyTwqNIbM8LOjTVHglhBzMtgOIwZOyfo4oo3:5hianOFzMXsBdA
TLSH
T131828D726C785CBA5DF7E141F98A22038FB8816BE6997B4190FD5B1C01DB6AC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

efec31b1-a3cf-4568-8a95-5806bf5ded2e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\efec31b1-a3cf-4568-8a95-5806bf5ded2e.tmp
Size 21KB
SHA256 6317b821dce3310e3ccd7b12668db07ba75cc2b2d660d2514b41036c10b317cb
MD5 1fc747a56e9ed16073c7a0d970b36af9
SHA1 3d22590fecacc53e9ed0d90b9b1b85ee2bb4bc14
SHA512 4a77d9fab6be1b294e6db2244ef294640d7f6ee6c4b628649ea41f373e02d5b2375d15b5ff0fb4cc6b0a3742865846c4c03d626a3186fde85583860163e8b088
SSDEEP 384:giFiZcIVzsNK8TUNTUlIlMwqNIbM8LOjTVHglhBLMtgOIwZOyfo4oo3:7FQtPwg/anOFLMXsBdA
TLSH
T145A28E735CA88DBFADF79A40F98E32038FB441A7D595BA51D2ED4A0C019B1EC130BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27ab0a7f-1fdc-4250-8e41-4530b1cfe8da.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\27ab0a7f-1fdc-4250-8e41-4530b1cfe8da.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 6f0953d10840b30947034afe22e5f02b4a9878f79d61555bbf24e2765e0a3c21
MD5 cafab99ceebea01198a41a48f62f0592
SHA1 74dab886109bd3b50262f3943b9195ceb4da31bd
SHA512 828d78a28f93e38aedcdc6b92cf8c18521c96dcfd2a11e07a94915d70b4209114b96ba379988a22adeaf170ccde773a8fdc874ec7e9ee8ac2e84147af546dafe
TLSH
T16941095DB6FA1148B3B77E169BF6A86D887B78373F06D45E10010E4F0A23A45C861B37
MD5 SHA1 SHA512 TLSH

Submit Download