Overview

overview

3

Static

static

1

windows_download.html

windows10-2004-x64

3

windows_download.html

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    0s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/10/2026, 00:11

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    windows_download.html
  • Size 19KB
  • Sample261030-agtmhatyhs
  • SHA256 43f8a417216264d9ccd4392c632e51738cb892cd35f30846560352f0830c8a2f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
discovery

Malware Config

Signatures

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Enumerates system info in registry 2 TTPs 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\windows_download.html
    1⤵
    • Enumerates system info in registry
    • Suspicious use of WriteProcessMemory
    PID:2736
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffd2699c188,0x7ffd2699c194,0x7ffd2699c1a0
      2⤵
        PID:5300
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1856,i,13867201607213566520,12014829497036552744,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:11
        2⤵
        • System Time Discovery
        PID:4248
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1680,i,5391599112481643198,8515299750997882618,262144 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:2
        2⤵
          PID:2740
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,8886349959950552936,945074878157241277,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=2536 /prefetch:13
          2⤵
            PID:3680
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,9698539220333722391,10149063943067526897,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
            2⤵
              PID:5708
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3584,i,9420524807263218252,5843726657932366995,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
              2⤵
                PID:1340
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,6528666836870361492,14222027086287387210,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:9
                2⤵
                  PID:4912
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4376,i,17804173579678374825,17932584675141009205,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:1
                  2⤵
                    PID:2908
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,12788926210970703896,1226809455554659269,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5428 /prefetch:14
                    2⤵
                      PID:3840
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,17987277035699152156,6578132243322396616,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:14
                      2⤵
                        PID:4544
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,2402644149365366458,13202146406403090785,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
                        2⤵
                          PID:1360
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,2402644149365366458,13202146406403090785,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
                          2⤵
                            PID:4712
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6532,i,13615234538971178504,345873136014217665,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5404 /prefetch:1
                            2⤵
                              PID:2312
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5192,i,12840974647593129779,5469363978804232522,2097152 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:1
                              2⤵
                                PID:4172
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,12256338631502578071,10855935175702156488,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:14
                                2⤵
                                  PID:5272
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,3438633318944553286,14161620602971681552,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:14
                                  2⤵
                                    PID:4300
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4544,i,6406564494413312676,10850306314826556978,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
                                    2⤵
                                      PID:3480
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4484,i,5736852138326584015,3888789220973893123,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:14
                                      2⤵
                                        PID:672
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,8140073617841285261,5921524777538261730,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
                                        2⤵
                                          PID:2532
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7016,i,10599320081606065965,1535423085239977263,524288 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:14
                                          2⤵
                                            PID:5108
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5592,i,5599928349867183477,9074202765584316954,262144 --field-trial-handle=2620,i,10186995988042726486,17638836346803968583,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
                                            2⤵
                                              PID:4556
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                            1⤵
                                              PID:5532
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                              1⤵
                                                PID:3520

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    0f86d35b-2f61-42f9-82eb-7fdbbf0108f2.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0f86d35b-2f61-42f9-82eb-7fdbbf0108f2.tmp
                                                    • Size 40KB
                                                    • SHA256 47888fc06ff249e72abdd001c192d6ff612dbff16d0acbdde7ea9a4353f32faa
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    797b61b5-5ccb-455c-933f-e91061a86619.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\797b61b5-5ccb-455c-933f-e91061a86619.tmp
                                                    • Size 33KB
                                                    • SHA256 86b9b192dba4e9124ec6a767e75c97b2f182e1d80ca39e42fa2bdb885e06e446
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    912662ca-edab-4277-9618-7400233850f0.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\912662ca-edab-4277-9618-7400233850f0.tmp
                                                    • Size 37KB
                                                    • SHA256 18c87ceeefe7a71a104654a052f617ceda8b6eefb9527c54f6be679ebc241b63
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    973fe7bd-b615-4262-909d-57a6f0622633.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\973fe7bd-b615-4262-909d-57a6f0622633.tmp
                                                    • Size 38KB
                                                    • SHA256 54a948bc2b6a532458835556bc23048616aeac733652af11ed0b107cf26cf7ec
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    settings.dat
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    settings.dat
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    602fe826-412d-4bff-92ae-b7f37c0a7296.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\602fe826-412d-4bff-92ae-b7f37c0a7296.tmp
                                                    • Size 70KB
                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    60c8e211-62dd-4789-b8ae-c7169660ecba.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60c8e211-62dd-4789-b8ae-c7169660ecba.tmp
                                                    • Size 11KB
                                                    • SHA256 73dcf67b5b48980f093906ab56bebbd903bf78df7de7ac9bd99accfefc1a3b68
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    70af41e6-b7b6-4b9f-89ea-2500081c01d0.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70af41e6-b7b6-4b9f-89ea-2500081c01d0.tmp
                                                    • Size 11KB
                                                    • SHA256 ab4df8f4fc919ade2df48a99dd366ce36491517d170c6c44087a8963d2083f61
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    815def63-eb15-450e-a87f-040edb2d9f85.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\815def63-eb15-450e-a87f-040edb2d9f85.tmp
                                                    • Size 11KB
                                                    • SHA256 30ba13718cba5218ae32dfe78310fd4facb041dd90bbb2b01071f9995fefb2b3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    temp-index
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                    • Size 3KB
                                                    • SHA256 76d6f04c7c768afe12530395d190e09b956b7688b630228381444d58b3e84643
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    the-real-index
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 3KB
                                                    • SHA256 5aa98bccc502901243c8454377bfb17de2fbb1c52fb76f540d12419a7afca06f
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    a4866d3e-01c3-471b-aa10-6282f3c90b4c.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\a4866d3e-01c3-471b-aa10-6282f3c90b4c.tmp
                                                    • Size 2B
                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    10383ad4-38fe-49ba-8564-62be77617c5d.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\10383ad4-38fe-49ba-8564-62be77617c5d.tmp
                                                    • Size 2KB
                                                    • SHA256 e7e0903f40c75a1bd66dc312ac80ade80a80669f7931f98610be10df42887b7c
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    42683b97-01c9-4e8e-8d94-dde109a1eafe.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\42683b97-01c9-4e8e-8d94-dde109a1eafe.tmp
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    Sdch Dictionaries
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                    • Size 40B
                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    CURRENT
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                    • Size 16B
                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    MANIFEST-000001
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                    • Size 41B
                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    db7059a2-9d38-4ae3-8e41-f33ac07deac9.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\db7059a2-9d38-4ae3-8e41-f33ac07deac9.tmp
                                                    • Size 23KB
                                                    • SHA256 0c2d4439dcd35c81e2ad220843813ada2eec82e59d46cccdde2667a646b571d5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    OperationConfig
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                    • Size 3KB
                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                    • MD5 SHA1 SHA512 TLSH
                                                    Submit Download

                                                    be920860-cff1-4441-bd6d-573967d62d2f.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\be920860-cff1-4441-bd6d-573967d62d2f.tmp
                                                    • Size 22KB
                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    Local State
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 33KB
                                                    • SHA256 503079d24f4b67fb221a9d864468d2a9926564d6f3a3fad51ba24092e1bdc329
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    bebd0495-4ad9-409a-a752-90f932d3cab4.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\bebd0495-4ad9-409a-a752-90f932d3cab4.tmp
                                                    • Size 36KB
                                                    • SHA256 3a865dc4b4b5c6862d2b17d357650315504a234eddc2fcbc4a07a9d4a37c2797
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download

                                                    6ede7b9f-0c0b-4c23-a555-818814838702.tmp
                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6ede7b9f-0c0b-4c23-a555-818814838702.tmp
                                                    • Size 13B
                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                    • MD5 SHA1 SHA512
                                                    Submit Download

                                                    ScreenConnect.ClientSetup.exe.crdownload
                                                    • Path C:\Users\Admin\Downloads\ScreenConnect.ClientSetup.exe.crdownload
                                                    • Size 1.9MB
                                                    • SHA256 923b06c3aa9a203a32ab6a1c4ca3638c9c4ae9a09d7a6df50a8d4a8c04cad649
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                    Submit Download