hxxps://lumintweaks[.]com/

Analysis

user interaction
yes
max time kernel
749s
max time network
743s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
29/07/2026, 00:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://lumintweaks.com/
Sample260729-bb74da1clf

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3840	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134297603869987198"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-540052884-2969440504-464782435-1000\{106E32C1-F5B4-4C6C-A155-B1DF06294298}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-540052884-2969440504-464782435-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe

Suspicious use of FindShellTrayWindow 36 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe

Suspicious use of SendNotifyMessage 34 IoCs

pid	Process
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe
4280	msedge.exe

Suspicious use of WriteProcessMemory 51 IoCs

description	pid	Process	procid_target
PID 4280 wrote to memory of 4816	4280	msedge.exe	83
PID 4280 wrote to memory of 3840	4280	msedge.exe	85
PID 4280 wrote to memory of 1836	4280	msedge.exe	86
PID 4280 wrote to memory of 2524	4280	msedge.exe	87
PID 4280 wrote to memory of 1836	4280	msedge.exe	86
PID 4280 wrote to memory of 1836	4280	msedge.exe	86
PID 4280 wrote to memory of 2524	4280	msedge.exe	87
PID 4280 wrote to memory of 3188	4280	msedge.exe	88
PID 4280 wrote to memory of 3664	4280	msedge.exe	89
PID 4280 wrote to memory of 3188	4280	msedge.exe	88
PID 4280 wrote to memory of 3188	4280	msedge.exe	88
PID 4280 wrote to memory of 3664	4280	msedge.exe	89
PID 4280 wrote to memory of 3664	4280	msedge.exe	89
PID 4280 wrote to memory of 400	4280	msedge.exe	90
PID 4280 wrote to memory of 400	4280	msedge.exe	90
PID 4280 wrote to memory of 400	4280	msedge.exe	90
PID 4280 wrote to memory of 1692	4280	msedge.exe	91
PID 4280 wrote to memory of 1692	4280	msedge.exe	91
PID 4280 wrote to memory of 1692	4280	msedge.exe	91
PID 4280 wrote to memory of 2552	4280	msedge.exe	95
PID 4280 wrote to memory of 2552	4280	msedge.exe	95
PID 4280 wrote to memory of 2552	4280	msedge.exe	95
PID 4280 wrote to memory of 3768	4280	msedge.exe	96
PID 4280 wrote to memory of 3768	4280	msedge.exe	96
PID 4280 wrote to memory of 312	4280	msedge.exe	97
PID 4280 wrote to memory of 312	4280	msedge.exe	97
PID 4280 wrote to memory of 4288	4280	msedge.exe	98
PID 4280 wrote to memory of 4288	4280	msedge.exe	98
PID 4280 wrote to memory of 4328	4280	msedge.exe	103
PID 4280 wrote to memory of 2756	4280	msedge.exe	108
PID 4280 wrote to memory of 1008	4280	msedge.exe	109
PID 4280 wrote to memory of 1752	4280	msedge.exe	110
PID 4280 wrote to memory of 2908	4280	msedge.exe	121
PID 4280 wrote to memory of 2908	4280	msedge.exe	121
PID 4280 wrote to memory of 992	4280	msedge.exe	123
PID 4280 wrote to memory of 992	4280	msedge.exe	123
PID 4280 wrote to memory of 3488	4280	msedge.exe	125
PID 4280 wrote to memory of 3488	4280	msedge.exe	125
PID 4280 wrote to memory of 4712	4280	msedge.exe	127
PID 4280 wrote to memory of 4968	4280	msedge.exe	128
PID 4280 wrote to memory of 3556	4280	msedge.exe	129
PID 4280 wrote to memory of 4968	4280	msedge.exe	128
PID 4280 wrote to memory of 3556	4280	msedge.exe	129
PID 4280 wrote to memory of 3820	4280	msedge.exe	130
PID 4280 wrote to memory of 3820	4280	msedge.exe	130
PID 4280 wrote to memory of 3140	4280	msedge.exe	131
PID 4280 wrote to memory of 3140	4280	msedge.exe	131
PID 4280 wrote to memory of 4900	4280	msedge.exe	132
PID 4280 wrote to memory of 4900	4280	msedge.exe	132
PID 4280 wrote to memory of 60	4280	msedge.exe	135
PID 4280 wrote to memory of 60	4280	msedge.exe	135

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://lumintweaks.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ff90f1fc188,0x7ff90f1fc194,0x7ff90f1fc1a0
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1816,i,6218738469892382522,13896211473909604898,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,6958393416374243904,9226248518627065886,262144 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:2
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2052,i,7024457176527099534,11476140515535244564,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,545199721164714635,11743364930546399511,2097152 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,16384232963616873253,49708456648622129,2097152 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4204,i,6389689862634125682,16578552779966825494,2097152 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4216,i,13880678089440641248,6618056583766564322,2097152 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:2
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3640,i,15846783740005078604,7089273193854443135,2097152 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,3185380224047612113,3263816238187012090,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5296,i,11953652366321106738,13571652292600514478,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,17835016476266998028,6300992195110714896,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,12174045134175480973,4252724014641178849,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,12174045134175480973,4252724014641178849,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,11472824661230815776,9616127595415612917,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:8
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,5517909174464111775,1187502952858066036,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,285884381708864609,17914798644992944192,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1004,i,16625621896974606919,13842944496168013454,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=5676 /prefetch:8
  2⤵
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2132,i,5179292789266822979,1246359626268573176,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:8
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,9330317093013207741,1582936420879372985,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:8
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6328,i,7234924888414647748,10335890008467138236,262144 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3976,i,8031289084756830719,9994489987705586912,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:8
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,11908620232660399913,4516102882261888866,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,8067687502050616085,17115223836783827637,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2812,i,18138981754518689220,13506968588609249262,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,9398344663334997864,5837979947581947468,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1508,i,17744059517510485796,12915547875427932483,524288 --field-trial-handle=2452,i,17832449223665885542,13241459905310272693,262144 --variations-seed-version --mojo-platform-channel-handle=3324 /prefetch:8
  2⤵
  PID:60

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:332

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cc11c2ba3ec4cb292b61dd36af338e083bb0ce5868e654b17f3c58ecf3c8fdfb
MD5 22bfe5ff5070c92c37e54f6f278efd25
SHA1 2fc94025f3a738879f1fcececb95937cbaa0cdd1
SHA512 b57abd220e674cf733b39ea299fc66d6fe964ab448ae0758482efe80597e3678909cd989b9635acc0317001af0fe6dbbbccfd3cf110ec5ad1b9e4c084de22188
TLSH
T16FD09220B719A2C3E24704BA94A6AB52A916C57AA0B7F7017232640CAE65089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 201729318e073e437978c4f830a6df095e397d14193bbab8cb94016e3e0e1540
MD5 038903102cb76ddedd18207430e00005
SHA1 e694b970e01eb43fddfb00d36857e2b64f8c931b
SHA512 bacb50167c8d736bccc259f2ffbffff915c7c6dc188c6c2c1476ded8cbd822ff968f690173d1b8e35c352ec62f9ace3913a556b80bc1a59211be000ee9ea7447
TLSH
T17DD092207759A6C3E24704BA94A5AB52A916C57AA0B7F7027232640CAE66089F28F192
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 cd4d217adfc5b2bd17e403d24d7d260a791b61d3c1afaa55cbac14e6a9637268
MD5 87f77ce1261145d15a8b561f97d207ba
SHA1 24aa0e68c5a293673e90c742113620b0db9ec4f0
SHA512 c0837f2a022331a3d6d5691f74889b35212867c89328aee925e09282171ea901f03f0352869a98db949a03c0325207996de6b0ee3f467baccb79c76b32f1bc11
TLSH
T11DE0208A4DC9C65EB704A447416D630C9181360FD6C46909270CC9D97107080E3F6565
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 dd0c4ac1d04db5d8d7f146978a0b5c42c972b792559a38e1d695b1df17cca709
MD5 e7bb5ed5b52e6a9a2328e72ea1b6c7d6
SHA1 7706c60d9267de3709dd08e35ab9e93cc53d3308
SHA512 0f1b86b998cb13e5b699c6795ae8453c875ef23f22b21c198bb5eae8eb4f262c03631f0ce9192aa40ed19024cbcdd62c90898b7c54a3ce0fe57b8ac0bf256f51
TLSH
T112E0209844E5C37D621474D78AB8734D9180370BE2C86E151B0C85CB704384067D9551
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 5a954ebc134ab5891a81ca5d86f2ce835be742d724f2442f92ac37b9e1dd9fd0
MD5 5619c07714df00255acb4ffd53a05e00
SHA1 c733316400df6afc9c44597d7ea5c7276464171f
SHA512 8cac049ea6a7ebd335b8a32128f6296bc64ae970e79b012159f488acdd312472f42adbd67a76969b94c395f381718e88721b4353e5a65b5c74ba4029b43fb4be
TLSH
T16BE026A806C8C22EA208649746FC636CD7803F0B92C86A0A1B4CC58E7242045A7E37D4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5330af54f896150ef6c3494be2102466e25e5101996edc691a7b1b861f5b22d3
MD5 08877c763ff43b5d9ea6cbc2105a0e66
SHA1 8bdbb0e45fdc33616fd08a677fc4aaa2c5dd83c7
SHA512 b0415da7cb42b0440511bc423e8627aee12d96b0a70e562ab0dff82b21686d350c348bcb9ca469c61ea6fb060407f68e48efd20f3ce3a7b810b26c2ee61d5ac4
TLSH
T1FB81743D09254862E3B5883278CD52847DB1C9DDFE335EAE017AF9B4E50D71A812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3c485cfb6801ced7dee247447e75fc14db02bdf753f38e248fcda3c267aceb9c
MD5 eb80a4fe52c3dfff426e30cedc7a9c29
SHA1 15063c7ee49c25361bb602d0239c51724aead91c
SHA512 30e790c6bb404aca208a364d4a8bd4788da0b448a4aefc6d1bf225b57c60a452e99d8a8a32c8b7a8fd97c417e766e8042f3e9791e9ff4bc6953e60801c7dca83
TLSH
T11881743D09254862E3B5893274CD56807DB1C5DDFE335EAE017AF9B4F50E30A812B0B8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b8eb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b8eb.TMP
Size 3KB
SHA256 6c878b539590da88200c61dcfcdf5ff948ec092eca4b31000ba9a613c680a872
MD5 995c516ce5e89251b4193649dfbe1ee2
SHA1 021ec9be8faf11784127537ee6e05621b589221b
SHA512 01f78db91467161bd2bdb697a7926f68dd8e2100ea011fc5c3f5d93753d5632ed898fcf82fd0b09aab353540cc4acee47e80c30539cdf784d6403d8759d8c6f3
TLSH
T15C71523D192609A1D3A1883278CD12847DB1C9EEFE336DAE0179FA74E51D71B812F0B8
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 65aaba280f3e08d2afc1c6bc26dcc601570e38582f4bb39846e01558d1c31432
MD5 b0283c78477f24538e176d222fd6d739
SHA1 d1eb1d4a318c9a88d0756fb609f8858a1591d6c3
SHA512 a9bf66b947ab641c539bcd47f9df04d20d5dccd9c555b7768f47fc8c15e6c8c37a1c24cead8c80a079e91135db446ac76b61470efefa9e1cba5b6a835be26521
TLSH
T106715EB693F98D6D892161F4A6186E1FCE290425C32C792E99D5EF8793E1033C142ACF
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 46c9d250f96d8f35b244ec51a422fac8770b4a68347b9df1848f710f3f0f74ce
MD5 f2fe47958aa02eee2a661f05679534e6
SHA1 8284d7f254f97fbb0f83dd3ae9975d984adac56e
SHA512 4c7e88713d767630016c999aaf15a5875f5be64cf9db40257d466fc406232065fef0df55c432b062860a060fd8bc7cc52e0e86c1868981b11df1d46469d2e8b0
SSDEEP 48:YALlNeO9OdPG29cGorGCG7RG0Cs3zEsgUOsRCKsxPstYs2LsvNsItsuZJs5/zsBH:DMO4n2tX6zzd7WMWuTdgwzwQ
TLSH
T199915FF2C2EC8E6D892112F4A6283E5ECD1A0555D32C7C1AD9D9DF8B93E1436C1429CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c2dad118-2948-4c3b-b428-7d31dc866d0a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c2dad118-2948-4c3b-b428-7d31dc866d0a.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 993c4431523763c79ae60dfc37c0cbf8f5842da2cbbd6c8c8209c79015ba14ab
MD5 4996c49a9cdfabc68971c26524e657a4
SHA1 07fc779d94ea85f9376d2a2f3da4137b0219e9b6
SHA512 b3b3f19e29dcc1af2fcc95e9fb96a04d3a443296de5a187ef3ad6e267627c434c02ceadd5e9ccbd1823a8ec48b9bcb623d602b3160bda68afb588d520ef8dbc4
SSDEEP 192:sxZgR6kt/fjsHC8ZVEdp9eCHW6+WNXhJ/YI7ajIgrJ:sxZgDt/fjsHCE+fHbf/49
TLSH
T18622A7566A38697B4CC7E21ABA19BF13D6F90032A2D51E58E6FC8B1C05E76DD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 25KB
SHA256 7f28bcc81824b4b1f07adee031f556f788f3e38d52470f905c8ab3b482396357
MD5 90b8ce984bc647d7e9822cb5544f907a
SHA1 de9dec778ae04300d7de94f2302e837d205b7da0
SHA512 6b48f956b56da0846eb4fc05d963c5e2e0d1e45b9acd40b197fda0e8c99c8c66f232f71f83a2110837203bda4cbfc611904cedee390838bdb5325e861315e7de
SSDEEP 384:sxZgGt/fjsbC366s8qMpRiYnazAW8pZS15posJWeT+Axm9HbLFtm:sYGt/f4C34Mnc7WeT+ceHb5M
TLSH
T1CEC2F606A924C8779FC36D1D693C7E3399EC406262C5DEDA5AECCA0C019E1FDAB4B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 adbcd35f35c73e7c691b3d7c72588aaa131cff2b033ea39e846cb265864231a3
MD5 ffbfd153fe654c958323890062181b34
SHA1 4cb86612fa5b0594be1e054f8c3e513cc0eeb365
SHA512 45dffa498b0acdd944219d7da2cf4b7c0173250ff7cee22043d4943a153c87c2c53f2ce8455b3ecd8bdc589dd491d1720747a9cfabd601b75fa96dd418d4448f
SSDEEP 192:sxZgR69t/fjsbCZZVIdpDeCHW6+WNX1FxYIFjajIg5wJ:sxZgGt/fjsbCPm9Hbfx+m
TLSH
T13932B7566A28597B8CC7E20EBA19BF53E6F9403292D41E58E6FC8B0C05E76DE130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 41dee166927d62520a4450a7056a9014c71c191fc61ab5ad70b297f114bfcbd1
MD5 9cb53e43ecf51e66b37001cd160b6ee1
SHA1 734e79aa9fc66ede1fcf9ad120aa5945c57b301b
SHA512 95c0e055c3719fb175bfe18927ce654ae5150e9089ed1eb322e28c91b35f09336ddaac4b601d5453bea94943dcd7f9c3784f209ba7b7bb62adda82025c08ed88
SSDEEP 192:sxZgR6kt/fjsbC8ZVEdp9eCHW6+WNXhJ/YIlgajIg5aJ:sxZgDt/fjsbCE+fHbf/Fs
TLSH
T11C22A6166A28997B8CC6E21ABA19BF53D6F9443292D41E58E6FC8B0C05E76DD220740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 ab1718cbed2be11793e309c43718b434139e8eb3a22c231b7224ced32cfc6aee
MD5 7608957f46b9a252719704d949f8dabc
SHA1 97f8b664ffa134e1f1b4f37531e6607230f77134
SHA512 3fb2acd3d8040ef4da7506c62922a6206f0694e7d38b1b8e08bafd6a38268a55ed8089ca535f336a39b14bdc4d8536fb8bb91d076a087f91811d68eac38fc4b7
SSDEEP 192:sxZgR6kt/fjsbCZZVIdp9eCHW6+WNXEAXYIYgajIg5wJ:sxZgDt/fjsbCPmfHbrXQm
TLSH
T16922C8566A28597B8CC7E30ABA19BF13E6F9503292D51E58E6FC8B0C05E76DD230740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8c871c1065ff34b8055d141117f84f49b1c9d140f8e974cdf03ec8e842f1cf0b
MD5 aa6add3cbb4557f2c699f0b6ecee0630
SHA1 8e2abc4f618b41d1fae2197fe814bb893f625360
SHA512 57f465996e5c72da0638a0b002e3c079a1ee9ae4308503b55cce7382a8abfcc15250ca36fe4ab52bf8c92bbf20c036b3eee138a803e058978036eb6363374ae9
SSDEEP 768:wPyqbblWvJDjT8F1+UoAYDCx9Tuqh0VfUC9xbog/OVE4Ll6AR7HroOtpC:wPyqbblWvJDjTu1jah4LAs7UOtg
TLSH
T185C2F93B654CCB7E4F800A9DED5A6FD73ED802C7A6588D4047FA994C02C77EA512A4CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index
Size 1KB
SHA256 2854589f127f6a1ed5134127c3e6bba53fd5569b9938109b88d78ed9c9466425
MD5 2572deb3993836d30bb9412c9f06d5c1
SHA1 00239ad193093a283936a18b2b6ffbaf438c3021
SHA512 c50b730b7261e4e9f39ba422d1ac7e8bf47969b79b18f95407c97debc518629e40ce3553ab2ce87abb90b9860b49050774d856a1d3add302ba334957dda4ae30
TLSH
T1362121DE4E91559FE9A549F31032A1E073B0C9CC6F11E3535C7D32772D223892A4B1C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cf0c0.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ee743e92-8f67-4188-9bcc-a865d9829eff\index-dir\the-real-index~RFe5cf0c0.TMP
Size 1KB
SHA256 00249167ecac1ca67edfe147aad1310816d1addc762da94959fa339f76d8d0ee
MD5 a83326198d9a14e91c230bb37d8fe6c5
SHA1 96a1597cf95c8f3c96c7022415a66a7f5edf6268
SHA512 b2d65384255894ab8a4a04a6cb281adc7f44e50ad41a3d89eb40d3e65a3fb2084aa6501f9a449308566f261912bcdcf1f66581b74ed9d38620f2abdab82ac0f3
TLSH
T1C52140CA8692890FECD084B60653A4F83370C9006322B3D3A979633E5C3679E2E5B0C5
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 5ee01528dfe041ac332d549a75297dac7c61a291cdeaa57aeb2cbb943994fbab
MD5 d38b0b7143a2bd7bd1c7e663bde1fdd0
SHA1 63bebc8b4913f2529b51c9fae2cae04e0709e485
SHA512 bdc73dd36e27484b0d307d7b9def0c43536b6a9754b119328d40c96234e82acc71aed681be045a2a95e9d48d53bdb9c187e94874c56f99616c5f9132c1393b4b
TLSH
T13EE06FBA2AE70800A8ABC7EE087344A64410F828C8A1EC4F1029A28750622B02822C26
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 4c32b99b9fb405f049286411b32de3a361dc739cb89d7a914b2b1e5dea1b5f79
MD5 99073e9f158379a5b507b7e95ca92afc
SHA1 bac5b3b45ddbe336567416896a088ad6d584acfd
SHA512 001aa7f7a90844faa7b5dc8b3483cc8dd122c09d72fa5d22431a370e13130a572da2c39b169cfbd32455b977ff0eeacb61e521209b1f8ffa9f01ccc6b7567084
SSDEEP 48:KPYNs4iCiac6vpI9IaKGveOaS4K7H2oTyuEVQUK+agembzIfcgKU1cCgAswpLikg:KYbaKYIKOfuKQY+S2gKnKZ
TLSH
T1F5915716757E0742783D2998B3AA99374F4532A33018A4EF3FB850624E66E120DFDDED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\308cda6f-c42c-4f5c-b42f-fb3589cfabdf\index-dir\the-real-index
Size 72B
SHA256 0e0d77e95d24fd22801caa37b8df37c4dde259f5173274649a466e5613dd79c7
MD5 8fd031e05f310a34ff0590f02c560e59
SHA1 4eceeb4223e4f4d315322572b79048aa6b407c9d
SHA512 ad69298cf7d3bc4a7b39a5dc0f6311192c61613823e7970d46583edbd5d80124ae76f1353cc6c9086cee46088fce9b288a5311e7b8e5edd3da19c94a05170096
TLSH
T1EFA0023851941209D4100670182B156122624914E91C0307C0D136C4CCE24A54D03178
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58876b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\308cda6f-c42c-4f5c-b42f-fb3589cfabdf\index-dir\the-real-index~RFe58876b.TMP
Size 48B
SHA256 5644315f80dab337c0d87ab737bea85e682b2ad772dbdb8ebaa3e9fdf9649656
MD5 6af21b7895d30e17e2e0021e92af0d08
SHA1 50b163de421b961ff3e71dfa4dd41f42ee6f802f
SHA512 27a4a8980764dff88ab733c682006aa7b80b44f9554cebfaf65255e04f78458fd3df2407b3fb5bf5996e0bf889927a1f7ff1b6068f2af2e8bdc747971241e760
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 174B
SHA256 e3d0b69e6a646f3e9b66c74998bd15dbe408d346438cc9c767699f2f97c162a9
MD5 ca55c477928a277e9c1932e46ca0bf05
SHA1 7383c97efa2ff5f47e413916341acf11d0a45632
SHA512 f8c9c40c7d45de2ec0d90efddad2153fac32ce85086bf1cc9f096c0e79120dfec2a2e3f2d7b96adbc4cf91b9e9998b11c9407da86c12b589c0fdf91621013c97
TLSH
T18DC08CEB5008E59F4AB1BAD0141DB69DC81742898CC4CDFCCA6470213034B3BAE42C36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 99B
SHA256 98f674119b53b29f3853781536b2dbedb3bde6695c429ce4bc012957fd53558e
MD5 fce72748efc1aa07467d5eb3011e85eb
SHA1 4d328a78cfce213a99a143eae0e83ef2006e0454
SHA512 3c22ea331bb13c5fa4ae3777d40d76adddaa8630b729a37cb90d53cd6453415b868cd34a27ddad202f841cda6d58a022ed1d59a174d77fbd17d62ca08fc6cacb
TLSH
T1F4B002FB5405C19F4E7175D05515B25DD447028DDCC4CDFC8D15B1613124B776D46C53
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 180B
SHA256 2f4f863ce7aec6f3815d189b252ca0cda319c2d14192b223d04c03c405ce54df
MD5 46089d272766b80a53b60aa502264d33
SHA1 e3c7ee17e5d8c735a519b8ac7b515fbc082a0f69
SHA512 38b5cffef88a4a00ca9c269dbf3d3c9af6636ff6583b936305430f6a517ead48f779fe2472069125119492d867dc53d4d6d406fa6b156ad228f0dd9eff2ba08e
TLSH
T1B6C080D75014D58B47B175D01419B54DC4174D498CC4CDFCCA55705130347379F45C36
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe585d1f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe585d1f.TMP
Size 183B
SHA256 1e25ad4e0f941636b859fd2f02341cc51147d758dcc7668d04d8041b81c2e77e
MD5 013e11edaa151d4303ae900607496685
SHA1 3a5e2909e8e10c17459b431dd7874b58a80561ba
SHA512 c1894cd876e9582d2e59743553e5bd52fc6afdf5a7e68205114ff6acb3d08e774fddd1237e3f73656af36dc3b3f09b09688cb873c9be37ebe830899ec0428e92
TLSH
T115C080B7952290AE5F31A6E1541571CC90131E6FDCC4C8FC4A55F1723038B636FC2C22
MD5 SHA1 SHA512 TLSH

Submit Download

bdcd6bb5-20e1-4cfa-a36b-efcc2f10abbf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\bdcd6bb5-20e1-4cfa-a36b-efcc2f10abbf.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b33c49d5349c9aacf06fcd3307f5efc1e0532bcb83779d251f2aba44cb8bae1b
MD5 f4461ba08f228d15443a89f6f5b4cefd
SHA1 5e8bd36ce1745acb07f955313319774de8ffabb3
SHA512 436f061f6d785293b871aee9034d46b1b78ba6cceb0b1509ce6538dc71f419dafd3c6f7583ac8bd14664f59bf878d7bcfff435991cf58a22026341c0fd69d890
SSDEEP 192:uwLsNOnQgvvJLkRbE0QmiU1+P04VRNKFCk5dZc0vokSRGqqef67:vsNOnN5Ob7OLVRNT6bcb767
TLSH
T197420976AC385C7B5DA3A906F54B32135EF891A7EB882F40D5DD1F0C01DB699130B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 22KB
SHA256 33c3c7d5464fd7616e75ccaa7d903649ee6e39c0366a9028825408c5acc54924
MD5 9cdd2f094f389e5a68ed16e8babbce20
SHA1 e3b13fce9bf8fe7b83d643909a322fe36bf89233
SHA512 ea8e18866529c874d17e2a605eeb0de622dcaaf9a2d892c8925185ae45ab42f294c1d063f6bad220b35185c4d89188253761bd8a8cee8519b679e74b0aa89358
SSDEEP 384:8iFiZcIbzsNe8TUNTUlIlc5N5Ob7OLVRNT6bFv7ScjmwO:nFQPLwgqfTJHTkv71j6
TLSH
T16BA25E735C688D7AAEF6AA06F48A32138EF451B3DAC46B40E6DD5E0D01975DC130BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 02ac69e08d2aaff498ada1aeef849d50625d75f982f0a52d28498f0c841a28b4
MD5 c3ca9e3aa969af6c171a52adfb4168a2
SHA1 b6389c2c594d7d2cd7b150f1a1cc624ceb729eaf
SHA512 4de01b5709d18919c73b81f84165f7ed3b427a20868a9393bdfc5975a52ad894d46019831568d53464fba90853d4084c1ddbbf93dd662fd348c7cf4ab3429bd2
SSDEEP 192:/LsNOEQgvvJLkRbE0QmiU1+50ZVRNKFCk5dZc0vmkVRGqqefU8:TsNOEN5Ob7GWVRNT6bqG7U8
TLSH
T11532F936AC385C7B9DE2AA05F48B32135FB8516BEA893F40D5DD2B1C01DB69C130B52B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a23bb744cc880e9250391a9308086d58ac62db7b8d0118637fa2be13833d8439
MD5 6012d5e839944002b81a6aed04f350a1
SHA1 188c6394ff0bb0f530c9a441b2482d568aa13a22
SHA512 adc62c3252184a9541fc70d9394fe1ab6d3464804ddc9869906f1e610a90669122ca0e7dc34e09c6bd85df8f663c6c3d3669913b160174dea8e7c2cbaef71c33
SSDEEP 192:tONb6JkRtQmiUyR2W+RNKFCk5dZDh3RREU6:tONb6UrPW+RNT6bVkU6
TLSH
T15002FA35AD382C7B9EF36D06B58737171FE4116BAA952F40D6E81B1C00D765C2306936
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 0c3c575d245d08cd6ba8331262a55d13aa436b9b792ea59f12a5c695a606aee1
MD5 97b18e70503575ac8c3bc0a54e0dbd25
SHA1 2e21bedf0e5f03a20eee709977f76932daad143a
SHA512 eabd7f1c68093bf0bb0cb3b757de529b753cbfca795aa4a361485f11cd242b5784b433de498dce323a70217974620286b692708f33851647e8e230d476c4c09c
SSDEEP 192:ufm+xasuheOwQxMGsNOc5QgvvJLkRbE0QmiU1+P04VRNKFCk5dZc0vokSRGqqefQ:LZcIhsNOc5N5Ob7OLVRNT6bcb7ScjmwO
TLSH
T15E926D77AC385C6AA9E6A506F48732135FF89173E7C81F40D5ED6B0D01DA5AC130BA3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6851242506eeccc65b15f2478a9d37af869376f7974f891cba535ab1a76e147e
MD5 84e4e8f848f0b6663d3330106553dadc
SHA1 9d31218cf228c347f914533b523f67779dfd0d71
SHA512 16607089fe7b1b58d70b3b947fc403bc8ddfe698d4f954b61a292ade7bc61e6358381363bfcade32f6e9647aeb165031bccdfc9e1e882f10345dc1376f797af3
SSDEEP 192:aONH6JkROQmiUyE2J+RNKFCk5dZc0vMVcGqqefU6:aONH6UKIJ+RNT6bn7U6
TLSH
T12512EA36A8385C7F9DE2A902F48732135EE5526BEF897F40D5DC1B1C01EF59C134A92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

97bc52ab-ccb1-4fc3-b392-901e923a6e31.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\97bc52ab-ccb1-4fc3-b392-901e923a6e31.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 9501c3e61e76c493b9d844ac540518bcf2b9e3c1e3976914232182e23c34b44f
MD5 1e7a90402d4133c2b2c09fb43daf9b8d
SHA1 109e8f4de5bf10ffac01adc9f16a559d51388e1f
SHA512 893baa18b4192de52499db9e184cd506b58b85d8e374cc653379ef76d4e93b08e184554f06bc1e9c018b900a8d2823771a3ae2a02c513e43fafd558085e05649
TLSH
T130413B5DAAEA1158B3B36F4A9BF7A86E847B7D772E06C55D00110E0E0923A40C971B3B
MD5 SHA1 SHA512 TLSH

Submit Download