Analysis
- user interaction
yes - max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 14:37
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://mugsyjeans.com/pages/reviews-1
Resource
win10v2004-20260513-en
12 signatures
150 seconds
General
- Target https://mugsyjeans.com/pages/reviews-1
- Sample260808-ry5jrsydnc
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 7 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 154 api.ipify.org 155 api.ipify.org 156 api64.ipify.org 157 api64.ipify.org 163 api64.ipify.org 179 api.ipify.org 359 api64.ipify.org - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 3096 msedge.exe - Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier msedge.exe - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry msedge.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306734361292438" msedge.exe - Modifies registry class 3 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ msedge.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ msedge.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{6B107928-FA54-483D-844E-A56691C84ABD} msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5480 msedge.exe 5480 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
pid Process 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe - Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe - Suspicious use of SendNotifyMessage 32 IoCs
pid Process 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe 1376 msedge.exe - Suspicious use of WriteProcessMemory 49 IoCs
description pid Process procid_target PID 1376 wrote to memory of 1292 1376 msedge.exe 87 PID 1376 wrote to memory of 3096 1376 msedge.exe 88 PID 1376 wrote to memory of 1748 1376 msedge.exe 90 PID 1376 wrote to memory of 1748 1376 msedge.exe 90 PID 1376 wrote to memory of 1788 1376 msedge.exe 89 PID 1376 wrote to memory of 1788 1376 msedge.exe 89 PID 1376 wrote to memory of 1788 1376 msedge.exe 89 PID 1376 wrote to memory of 3920 1376 msedge.exe 92 PID 1376 wrote to memory of 3988 1376 msedge.exe 93 PID 1376 wrote to memory of 3920 1376 msedge.exe 92 PID 1376 wrote to memory of 3920 1376 msedge.exe 92 PID 1376 wrote to memory of 3988 1376 msedge.exe 93 PID 1376 wrote to memory of 3988 1376 msedge.exe 93 PID 1376 wrote to memory of 4744 1376 msedge.exe 94 PID 1376 wrote to memory of 4744 1376 msedge.exe 94 PID 1376 wrote to memory of 3984 1376 msedge.exe 95 PID 1376 wrote to memory of 4744 1376 msedge.exe 94 PID 1376 wrote to memory of 3984 1376 msedge.exe 95 PID 1376 wrote to memory of 3984 1376 msedge.exe 95 PID 1376 wrote to memory of 3684 1376 msedge.exe 99 PID 1376 wrote to memory of 1760 1376 msedge.exe 100 PID 1376 wrote to memory of 3684 1376 msedge.exe 99 PID 1376 wrote to memory of 1760 1376 msedge.exe 100 PID 1376 wrote to memory of 3192 1376 msedge.exe 101 PID 1376 wrote to memory of 3192 1376 msedge.exe 101 PID 1376 wrote to memory of 3192 1376 msedge.exe 101 PID 1376 wrote to memory of 3956 1376 msedge.exe 102 PID 1376 wrote to memory of 3956 1376 msedge.exe 102 PID 1376 wrote to memory of 3956 1376 msedge.exe 102 PID 1376 wrote to memory of 3316 1376 msedge.exe 103 PID 1376 wrote to memory of 3316 1376 msedge.exe 103 PID 1376 wrote to memory of 3316 1376 msedge.exe 103 PID 1376 wrote to memory of 3836 1376 msedge.exe 104 PID 1376 wrote to memory of 3836 1376 msedge.exe 104 PID 1376 wrote to memory of 3836 1376 msedge.exe 104 PID 1376 wrote to memory of 1952 1376 msedge.exe 106 PID 1376 wrote to memory of 5048 1376 msedge.exe 116 PID 1376 wrote to memory of 5048 1376 msedge.exe 116 PID 1376 wrote to memory of 5048 1376 msedge.exe 116 PID 1376 wrote to memory of 4688 1376 msedge.exe 118 PID 1376 wrote to memory of 2072 1376 msedge.exe 119 PID 1376 wrote to memory of 3900 1376 msedge.exe 120 PID 1376 wrote to memory of 5716 1376 msedge.exe 122 PID 1376 wrote to memory of 5716 1376 msedge.exe 122 PID 1376 wrote to memory of 5900 1376 msedge.exe 123 PID 1376 wrote to memory of 5900 1376 msedge.exe 123 PID 1376 wrote to memory of 5340 1376 msedge.exe 124 PID 1376 wrote to memory of 5340 1376 msedge.exe 124 PID 1376 wrote to memory of 5480 1376 msedge.exe 125
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://mugsyjeans.com/pages/reviews-11⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1376 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffe171dc188,0x7ffe171dc194,0x7ffe171dc1a02⤵PID:1292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1912,i,18141114828202315450,171062880779425220,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=2256 /prefetch:32⤵
- System Time Discovery
PID:3096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,6379089274150627976,8605642554423665093,262144 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=2216 /prefetch:22⤵PID:1788
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2468,i,3113508585308975901,9944710969612410620,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:82⤵PID:1748
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3404,i,437821297397692057,2972192698910062389,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=3448 /prefetch:12⤵PID:3920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,17576875332253279097,9544975579822109944,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:12⤵PID:3988
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,908526251593558179,16478041523193405292,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:12⤵PID:4744
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,671960530854019284,16487193717798527303,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:22⤵PID:3984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5128,i,16843057278878366120,3050004837117275065,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:82⤵PID:3684
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,16257289810338300180,3880822571453286958,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5100 /prefetch:82⤵PID:1760
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5504,i,18086781726797359054,11307581766799809707,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:12⤵PID:3192
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5756,i,5603988967693267099,10270230382204280604,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:12⤵PID:3956
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3624,i,5147855068247655147,4724167344363088827,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:12⤵PID:3316
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6216,i,371081638790214176,10436878538420793496,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:12⤵PID:3836
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,7425515637861636512,15085949062918906697,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:82⤵PID:624
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,7425515637861636512,15085949062918906697,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:82⤵PID:1952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=4244,i,13916745617481690355,16831538003333143296,2097152 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=4700 /prefetch:12⤵PID:5048
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4272,i,12263606162963601157,11446509727665149130,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:82⤵PID:4688
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4232,i,16866185835703159790,15760296178293504301,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:82⤵PID:2072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,15018907885641646471,8302939125055262559,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:82⤵PID:3900
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5244,i,18120516404365506641,13718692118904321763,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:82⤵PID:5716
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,4460108098236108792,16505341598456992810,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:82⤵PID:5900
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=748,i,12043503573301737486,8650189695668861425,524288 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=7072 /prefetch:82⤵PID:5340
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6620,i,2613196353244439483,5749611763015531814,262144 --field-trial-handle=2220,i,12132129687979675021,5163458050418030148,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:5480
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:4668
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
- Size 16KB
- SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
- MD5 8c7cdfea4284ba987d295d82a9c7ddd6
- SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
- SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
- SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
- TLSH T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
- MD5 96dd753cd2d8557b97ab2cd76f7fc6cf
- SHA1 81697ccb13fb04a07bd47b552b3607597251f36d
- SHA512 355c412a688a71b124e85c0527177b3f97efceb2a5553f8428e0913940daffd3bd176f5476b940c64eee52d543f0568112ac073984d9a64015adc15cbef552de
- TLSH T174D09224BA29A149E282007AA881EB565219DA95296B9622E620C44DBD2B925A3851C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
- MD5 7a50c2e276f05b686e8cb6c95b86650f
- SHA1 bc892af04a9d6b1bee8047f67518d676df864301
- SHA512 f1d02fd9f067323214d78de08172e1a78028eba76f4754436f4d77b849e8422865dcea22be13f21c36ac2c5807b393c1dffdb0a3217c3353a517a0467461a474
- TLSH T19BD022203A28A008E282003AA880EB020208CA80282BC322E220C00CAC2B820A3800C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
- Size 334B
- SHA256 ae45e75cefe7234b4b3c1ef6d44397bc28c2119f7cff0bc465db9b3301bf416e
- MD5 176beb7168fae94b6aa6f5a91cf92f7a
- SHA1 95e20246d9cb5771051755dd8dfff1e46b6e0a6e
- SHA512 51eefd1126dc92d636a379a4cb5ee6be7cd30e96650bc767ce8618cd3b92600163a1a5123ae70df414cd26e501f755623687c622d22cbe93666750cc04a36bf8
- TLSH T1F0E0269D2AC8C22EABA2754B61AC534C92E13F1B9BCCEA1B170089857201440B2C3EA1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
- Size 28KB
- SHA256 e85807e6e1d10ceac311e4444a94867b40c64878e084a7967cd6a6e4b1d482e9
- MD5 18cf7eef97955c8955fec9299f026a7e
- SHA1 7b78a9697b9173061cd4fe2979e55101989f70e4
- SHA512 1bf3c3f49d4dc85babcca18f08c39b465dc26f37f132547cb7eb5f1d173b6f5be1fd7cd7b54fde27556e0573af62c71c0b0f85711b0e08189bcb106ed11e9932
- SSDEEP 768:XmNKsJcw8y70k1iYEpNP0twbndMDE9+4AUCBtuFrq0afM:mcwz03pHPcwbneEQHBtuFrDmM
- TLSH T168D2E1636F7EA23B434069E579A24BE03E9C7BA18C067B2C88332465797FD7796845C0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
- Size 29KB
- SHA256 ef6c8ff3e3f77a02b962532b41956e79efa9d6f4edef5fd6e8fbc39cc4696680
- MD5 6104aa3f963dc32353668fec863628ad
- SHA1 2b57243e812159aacca7ec8f48e9869f4121b38b
- SHA512 911c25075ba5b8c4ff39fa25929b5dbd8f362dc5777ee02d9caa363702be9ed54551d84e7a56543b102d4416e9adddfbf1187bc563a3e9f5f493be1c387b3666
- SSDEEP 768:mRwzZCjhXtIQ7KF9ViJEgLbk1sxJUB9qrh8349aGaUV:mRC25r7e4JEubaiOB98l9GM
- TLSH T1B2D2F17A05C2C2FE1E042B995D6C5DEC11BD67363973C7F5153C15A8F9368B4B718408
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mugsyjeans.com_0.indexeddb.leveldb\000003.log
- Size 16KB
- SHA256 6f8803eac1c41cee648820f489d1f2fc165de97b80e0fd310393d6c0d1fff719
- MD5 fdac0ac91a0a6ffe90903228b00a4db4
- SHA1 6c5a64ef6c221c6315432cbb75a4dc8d2e3a6b67
- SHA512 c34bc488767be36d88c99adb5e8780b09ed42f1d824e90491990c067a9b1210689c02a7d1f400fd15813ec90831552668f5b5d0751dbe6f35535300bc4370036
- SSDEEP 384:9vnrBljhLdThRLQiTGq/gRGB5O4rEjHAOlDg2RDLH9cksMUcUU3BmsKWHsRmbgFe:HljhLdThR9TZgRGB5O4rEjHAOlDg2RDD
- TLSH T11F72305F6AD48E2BF93E557519A25FC807773E86BD81C65EE0C4F3ACC9316004E322A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mugsyjeans.com_0.indexeddb.leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mugsyjeans.com_0.indexeddb.leveldb\LOG
- Size 349B
- SHA256 97ef2d0c297b2c25da191587e8158f1c26eff886254fcc02185365f31322e6f8
- MD5 ee5882be2546f732df39d795538ab000
- SHA1 7723b70e8c3fd2442b6b8e1ff1434d9e592945e6
- SHA512 f359c6c5a2c868ccd64f48cae7b2e4f77fb050c41e23257b145cab915669feec9ceb16734dedf1949f8a7c6f8969e2866de02aa7e487b39d1472ee9c644ad9a4
- TLSH T1C8E0922895C9CA2B555460DA65347B0ED6E3290EDBC8AE860F02E8087D42088F5AE2A1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mugsyjeans.com_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 111B
- SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
- MD5 285252a2f6327d41eab203dc2f402c67
- SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
- SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
- TLSH T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 24KB
- SHA256 a101879fee9949dc800477e5e71f219a7aba0e3908d175a9f676f1a2549f9cb2
- MD5 029f539a763b2af81ea87eb9b0adcd03
- SHA1 40a14232f50744d80471fd3f9d3fee4c3798acc7
- SHA512 7958592d44e0cf82ba9ddb73cc8a4764bae274b09e17e329d36b3326af7c7a9f8f352a8f66429b96e8dba979675ff23542f7cf66b35c35231d8ae92922107a3f
- SSDEEP 384:DQDlTZEr3y+GGs3e02Sen6vIleqeKrf2yZowwJ1kXGPZfuCAqQXvbJOkPXB77MLe:hhr9STqDqIgUxxK2
- TLSH T19EB249EA83E4C73EDC1151F4AB152E2BCE294528127C782B89D4EE87EBD3472E14164F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 a4bf81eb1418ea6a8baf7ee05bf2bb8c314afda23703a316e9ba16bfede03514
- MD5 8d02d43be59e5e0ad652e72184c69731
- SHA1 cee184183b2b4c6b1919bbdb0ed17e92c8225bc5
- SHA512 5b8841a8f46469fb5d5f934b46da30dac1b2cc0154b691dbe04fd84a05f20437210b34c01ee8fe89bebc650b87c94144438d02aebe5ec9d1a2b3829379f2c74f
- SSDEEP 192:sxZkRIkB/fnstbDTYIdpW+HW6+WN1vb/YCvjdT/IgrJ:sxZkRB/fnsJDTp5Hbd/1T9
- TLSH T1CF22D8126E38A93B4CCBD219BB15BF13D6F91432A1D41E58EAFC9A1C09E76DD120740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 c3f0d4c960ff29a3ffb3a68877ef892c409877c137c1ce1c8616acb5c2c5150d
- MD5 6b924a407baa47117dc88aad60760964
- SHA1 a95672b111349a7ae117c98de72b13b5c64b46dc
- SHA512 9f80d6aa5372552ab2d29a934e1d69fe022b83494867a91770633b8f15a84d1d6fdc9e826e4bf3e14db41512b0a991b02d1aed72f2b60c0d258f5d14b9d50918
- SSDEEP 192:sxZkRIkB/fnsobDTYIdpW+HW6+WN1vb/YCvjdT/Ig5jJ:sxZkRB/fnsQDTp5Hbd/1Tj
- TLSH T13B22C7126E38A97B8CCBD219BB15BF13D6F9143291D51E58EAFC9A1C09E76CD220740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 10KB
- SHA256 455b32aa5844b1b1eaa9268f7cab1797ab1b8c6e56f3a941a1ddbe4d8da2d729
- MD5 d1d063f8cdde005b4d9227d40dff1efa
- SHA1 d0def1b6e947a3991942432f67a5d36ba2f343bd
- SHA512 903bd7baf74eda061d4c307ea4f444931f50cdb1e9cca8640e4cafc21dfe5400295eaa3029df1e0966ac2f1cbc36f777f6cd05524f4ce84a3a0c20441b76a54b
- SSDEEP 192:sxZkRIkB/fnsobD+IdpW+HW6+WN1vb/YCWPdT/Ig5xJ:sxZkRB/fnsQD+o5Hbd/cTV
- TLSH T12332C8126E38A9778CCBE219BB15BF13E6F9143291D51E58EAFC9A1C09E76CD120740F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 27KB
- SHA256 ee42c428f8873b8c608c52432fdb3803a6ea6456d6dfc965e994b423dc44c030
- MD5 9d03b48478bbf364687ffbe4b5bd15fa
- SHA1 a7ab4ffc26db67d225a9c06d0ff04096c77a3a8c
- SHA512 397686153625478096332ab053539026072f77babacdcda5f6b8913e9edb94425efd81ac0aa7e8890ccc78a3c80440c876efe457cb37b20fa31431f371f13389
- SSDEEP 768:WeqbUj+WvSCs68F1+UoAYDCx9Tuqh0VfUC9xbog/OVHZLlRTKr4roF:WeqbUj+WvSCs6u1jaaZLbWrDF
- TLSH T17FC2E83B340CCA7E4F801E9DDD5A6F972E9802C7A7988D4447FA994C02C77EA512A4DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\2cae8c39-276a-42a5-9269-0bd58eb3bbb3\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\2cae8c39-276a-42a5-9269-0bd58eb3bbb3\index-dir\the-real-index
- Size 72B
- SHA256 45ff29a412a52ffcebca77d2d92fab2d1bf94b3e0c512e7fbc112534f6e14473
- MD5 10b6ae3356634d2efe016b2dd7d94da6
- SHA1 27b2881221a374dfebfac8fad520c441dbc6783c
- SHA512 8a7974629176a32ab044a30c1d7f3e3aa286afd62a71d1fbb94e9df45e7cd7bce2f015859965bdbf265d6447f3ee05d8001818bc8fe929dcdfc7bc8d3205d378
- TLSH T1CFA0022506C90A82DC14C7B411450159237CEA201102AB0340E500859D92BC59502930
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\2cae8c39-276a-42a5-9269-0bd58eb3bbb3\index-dir\the-real-index~RFe58ab10.TMP
- Size 48B
- SHA256 f821770d5a3a79cbe2bc93010eb1b2e1c47508c64c6eedbaef63876a06e94d40
- MD5 3c9d41a5533038c20d27e75f8b1f7a3b
- SHA1 1effaa11c50d28059ac081e98d7d6823b27ffeaf
- SHA512 b9b0ad05a9e9205f354c8763753d763d329b5284828ee1b32ef0455cc7440a28b6a356c1381cff31b3bc9ec9615326bab6a999fc32f0ea9ab72ac44c0e1c81c2
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\4878eab1-7a16-4077-9888-d6b50d4635ba\index-dir\the-real-index
- Size 72B
- SHA256 2689afc5413f9c47a1fe4be4066d8de4198482f85ee9f0ea6166a0fdc6634641
- MD5 795c06b8a19ab98068ee5603396115dc
- SHA1 3ceabf1026133cbc465c3f0f48162320b929544c
- SHA512 d5538c9d127b7967855d719faca341aff962ec0637c40da9fe1a76a2bcdc3ccf9f3e6d535a0da9f2a07c89ea02efaff1e194ae152070ce2aadc8e9c0084ad7ee
- TLSH T1D3A0022425E40107D06A037551C541C0733C9D5003875B4150D050A8CCD73928641810
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\4878eab1-7a16-4077-9888-d6b50d4635ba\index-dir\the-real-index~RFe58ae8b.TMP
- Size 48B
- SHA256 515a7009718557fdd33bb0ba688cb8b2a97981b26631c440c7cf814c5074ba27
- MD5 623870ea911bba2910d4211cf70ab3b8
- SHA1 d4cb70c50e2ee4cba0bec9c6adde058bfa6fcd4c
- SHA512 ef6cb3afeebbcf89b9ae1e95f1d3cf3a755d6b7d7344aa5a51c37c3111fcc5efd70ff4aa10091b0bc6ba6fb64159f7c16b873e6cca629285d779bc6c74316d8e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\548c4ba0-66d3-4a06-8524-0ecc61e4f6c6\index-dir\the-real-index
- Size 72B
- SHA256 ee5a3bbde3ee5a79fae103f62c3d2fc8653984eef628439d108bcec952317c98
- MD5 b108c85ca93d04e4b9b56eebd5a66de1
- SHA1 db0220d9e585864263c8ed2ac81c3b50120f4310
- SHA512 687683efa866e68a2c2f208452bdd08cad355b902328e6009e20428a5604f72ba554544c840119325c8fbfeab93f78dae24582f9bd6c8ccea83c190663eec74f
- TLSH T145A002125EC50D56C842877074D956C0236A796005029B1366A04445ACE25D28145521
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\548c4ba0-66d3-4a06-8524-0ecc61e4f6c6\index-dir\the-real-index~RFe58aa83.TMP
- Size 48B
- SHA256 b7ef3ee0863d607440ddadb084a27fabb757ae797c15a4707c87d661b8d28e05
- MD5 4a4bd446d99af0fe8d86e4861eba5b8d
- SHA1 703fcc2b3c347ab6d7b30e0eaf5da3463d40cfe2
- SHA512 c08e8cdd13edf79320c93594d50e5d723fe8299f489fa3667dc0270e9a856cbf647e44bc5e714332c5abc4c678c0f11ac33f592101cf4368966130737f2aa370
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\60bd6392-97b6-4267-909d-4e0b1bfc9d71\index-dir\the-real-index
- Size 48B
- SHA256 8f334e50b5a6321ffa8eeb51b94da967741ff40be8191bf9f907d9823824f1ac
- MD5 ee09ca2bcc75993e78fd4f2e28677245
- SHA1 103bd79f07c56419d9083baba335ebe5f1de1793
- SHA512 7460e2dd85d947a4c5db5de8cb419c4af614414bd36d788ac49798eb73d5b12f829a782fb77c0362d5689e567be96fb4e783e06c9a56f654d655737593fedb1a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\60bd6392-97b6-4267-909d-4e0b1bfc9d71\index-dir\the-real-index
- Size 72B
- SHA256 ed5e40b0ad6557db2752ab4da287051b3160a960c9d0aae0e1d5bac4a5443c0a
- MD5 3e825e557c3fb4b80c8cb5d82415fea0
- SHA1 b1f76f33313883ce148d806050e032885232c113
- SHA512 5e5bcf920b0b368d4a85359da4f7097dc575a14e454f3f2632f9b0c4fb6e4dcf14921467c024c1d2ed56cc95d1d8f672f53aa02d03c94918f0fdad2c32054f07
- TLSH T1A0A002B011CE1803C824A2711582019C733A59504241EF0B45B856549CB31C04502518
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\d1f62ae1-72d2-4392-a565-e1f0735d1e2a\index-dir\the-real-index
- Size 72B
- SHA256 fac38d896f6b7639a39e5788cfdcffd4ace2a55f656934bbde1b3fdb95566835
- MD5 cbf7e1ae5b645589b07e163907b8f9d2
- SHA1 f381c29e12dab4c04c55838071d34346cf2a98bd
- SHA512 baa12c00a7dc1efd05dda450024311e1426d692135133c0e75c7a89ec6c340041f9971c3cf877a719dffbcc5eac425b4a39317025002267129ef73a05567c499
- TLSH T163A0021471804147C50063B625C21340337D6D6043576F434D910078CCE5B404711425
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\d1f62ae1-72d2-4392-a565-e1f0735d1e2a\index-dir\the-real-index~RFe58afd3.TMP
- Size 48B
- SHA256 cfc14ec784f304cfcc0fd8ddc2345f9401a17a7287155af924ecafa2e4257745
- MD5 0d6c7b3264e9866eb340642a66a94d3d
- SHA1 6615a3fd8ce46e1a4fecc436cc7650ff5641fac8
- SHA512 f63fecc3683f3078cbdcb956350f8878868b52530ff9153627ce00426bc42cd1f06569d8d8cb12c2d51d6ac10f39746c5eafb0321c37af1b329779200b1da41a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 273B
- SHA256 7c34228b7111d4349461279c8aaf12314c983be948de83417779877abed8715f
- MD5 8e0538af5612c028af86390255ed583e
- SHA1 685925624d77027cdc9502672c5f41a871613d6a
- SHA512 4719356c5a1ca8b2bfec8c1103772f55e4ec9977fb9617ffb7b0419c54df3e27be6fb20ed2929a91a9ca4c06b03fd11ee70e04da17bb26a17346c8553718efec
- TLSH T1F0D0EBA325E28040338609803BF0F44B9AC33DCE9CC8CBCC1821B0861E3020702196B2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 414B
- SHA256 4760cb0fd4257058eaa0f47a820a58d721ab27b5fc0e2917e0ef7f5c9ec83075
- MD5 a1e83b33e1b70a056444a7fc6408a45d
- SHA1 8fe9a218193441fef35bf80d84b6c95c3e0f9193
- SHA512 c95db75a23fc9c1e892642269476931efd02cb8235f9c1c6de1c8dc16dd21fbb11618a983d159b4d293d230c505caad8cfba957a1b9463861fa5ceaa832bd6ef
- TLSH T19BE02B6322F1858976994B8036F0E4879A833ECE9C88CFCC1465B14A2D346479225AB2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 495B
- SHA256 3001c9772e5bb22d11c735584a0974a36ee9a5e59a0bf6abefc079c4d2975420
- MD5 29228946ed17450fa5c6725f3cc29101
- SHA1 13133762cfb14b058ee0b1935fd721cea346270d
- SHA512 96af22eae79babc9957c72b14ef3a57910d398768bf5b7c44c6572bcb5310a72971e8cd76aa3f3332c1ff73cdf401b05dda97f39f6433e4586bee890a20aacb7
- TLSH T134F0596332E1894872A90A4136F0A44B19923DCE9C84CECC2879711A1C30B075215BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 618B
- SHA256 8004f57e9284b7483edd2684a7aabcbc50d9e96ad59403071fb110b03165ee1f
- MD5 3526cf808affde35fd0271543bf21457
- SHA1 2db82ccf5bed3870adc110efb8d10d425169c599
- SHA512 879873ba3f9349ab4447ba7a94556ebb6fc765782aaf4a135f89253dee494d08c239e8668770dad6d4d66604e94d23e6147f072f1e8299337535def4023b8f6d
- TLSH T1C2F07DA222E58A5576A98B4525F0748715833DCF4C45CECC1865710A1C30B4786197F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 686B
- SHA256 9ae7a3f4d70ede9d6420d3731e18f671f20490c4099b3382e99dd5a86ce7be0a
- MD5 9951e2f9d72f1feba3629eed23ed4102
- SHA1 0d4da284a82549ffbad0655d977458f58846ff91
- SHA512 5e2a51e12b09cb05f92093b80e797f95822c708546d4365b5352a47badef12d3f5e1154217ecf906e7f0a82de10d3b870ad0e3cdc8eba1df1f05dc7b23860f7a
- TLSH T16201FEA221E68A59B2BE8B5531F478871A823DCF9C46CECC1864B10A1D30B4346197F2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 782B
- SHA256 48452671bb5831cf9c432951aba891c36a8cc4116a4e1535cf4e2b0b2d5be1bd
- MD5 9bc37ffe0b8f7ec1d39f9967e8331dce
- SHA1 e52bfefe1558404bebc18491c947cab15b195bf2
- SHA512 c08278fed1d17ea63888386996b6243e793d4bbc3cb94f8d9d4bd53d88347ffa292a74f4ae0fc103e94f8d3f2b568e50e091bcaf47a9fda568fe5175fe23311f
- TLSH T1250120A232E28A48B6AA8B5531F438470A873DCF9C06CDCC1869700E1C30A035626BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 931B
- SHA256 02d2dd182448e5f4feae22023b6ea8f79c0f5c1a1dd1643b834e582aa47647f6
- MD5 8b7f073009edf8f2577b5e840016328e
- SHA1 caecbb8b94a436e70a2f582641f00a8066471c44
- SHA512 626770ea193a9d744db36ec005bdb59888a20b5d3f8d3d761fe05523e97fd6bfe9061e3ae0e63f13a2e174f9db2491791605eea5676d63ee8048848f20be95a6
- TLSH T1A611D09122E6CB4473AA8B5522F0685745863ECF9C1ACDCC1864716E1D70A034627BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 1009B
- SHA256 140708b4e2f7ad80bc8f2abb038a3243a575e7f4dabcb50a7135e43ee403494e
- MD5 e0648d756152206e3ea3b3ce34eff76f
- SHA1 5fe8212dfa0884df0ef25f71115e6bc218fe716f
- SHA512 336f1d1a3e6bbcfe424198843b12de039ce147b725d71d5b70b9e0608c99847fa9749f5576137a1af711a2da07e1a52ecc391038ec171b158b89ae6d8c78ae26
- TLSH T1CE11CE9122E6CB44776E875522F4749745863ECF5D19C9CC1864616E1D70A034A26EF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 853B
- SHA256 99b883084129e7346c729e452586a3a2b0724a06e2a9865c3d24003bf99b21b0
- MD5 08f123cc13608d33cfd6fe2300603809
- SHA1 59dd046c2b1346b38b845f2af4d8e532c3ae47ec
- SHA512 5e6e947dc4207f89a7f4584a9853b3332572445bede98c41cdc39311af5c8d34e397d0dd4b8ca66f1b78e1dfab236a5188602e73579ae5317425fcc88f27a5d7
- TLSH T11701129232E2CB0872AA8B5531F0A85745873ECF9C06CDCC1879712E1C30A43461BBF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt
- Size 1002B
- SHA256 6f4451c0d409fb766a790039e7cd6381b2bef10bb61815c58372b8e85cc36269
- MD5 881846c0b200f4f3cda15fffe51c9ddc
- SHA1 d67f3efccba4d83b0c63402cb084342bc4f5d72c
- SHA512 ec36fd668009624de66d0c4f7d9876d798ca98d5622335fc1aa21a1bbdb81cc519a58e17d8ef984a7cb6ee8865338db9c4362fc4ba008e5121fd09b06e6826e8
- TLSH T18C11CE9122E6CB4477AA8B5522F474A755863ECF6C19C9CC1864516E1D70A034A27EF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2f0c826ce3ed64f5441e77baae8de21215d393d5\index.txt~RFe584fc1.TMP
- Size 193B
- SHA256 e5b3766c2700041b208b248eecfcd241e6926a56d0a5fe99ad255aee8cc2e8f3
- MD5 20d35fa734694316882a0faaeeacdc90
- SHA1 562c3d4daf54776d8a954574d533c7a032accd7c
- SHA512 ed33ab62756a3ce063a7c6557a049b79e2207d49af8226955b6406df4a00752eba9ae07c6e9c667677dcca61689623855c028977490152aa98fbe869a67cd381
- TLSH T14DC0C9A612D64A853A5A0A81BAB1A4839A873DCEACC8CEDC596174812E305179228AB1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
- Size 2KB
- SHA256 96c93dfa7bdd7e62b15f92fd7ca5d9bbe9fc844a14ec94c3e8db8e6484c16f26
- MD5 a5dd05906978fdd92c89244e0f57a70f
- SHA1 42133b36e8d6a419067be3581c53a26188be6c28
- SHA512 7013e1c98fbdbc195a2836b1b8098ff68fc08e9c7de098464cd93a7c374858de265f0f31e2835e676ddb8e3e0d8a1b8da6a400127f54daafa820071efb7e03f2
- TLSH T1A551E96ED80A021BC4AC153668CF72D833364945CFAF3FC6159D603879C33A1AE91276
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
- Size 4KB
- SHA256 28134c0fff2a653da9a0bcbbddb4ed7ced8b70650e34e1f69da86a8bcff27f3b
- MD5 38308f890f2b5160112b566e1fb15d84
- SHA1 2ea3e60f910ade48e1c8f50d2ab34dbe3ecae2de
- SHA512 e0bed065872d60cb23c63f24cf02a8a2844d7ec07cf8465b43f436766c65f186753b02c429bba4cf874248950a13879a17c8f6fb7f8dc3529a48333640ab4a32
- SSDEEP 96:KlkdQ0uS+gyKHzssgK01s2gA8s3WEtGZiKCo96oK7CiJ:2kdQ0uS+DKHQsI1s2r8s3WEtV1nJ
- TLSH T14D918F5134BF06453CBF3928969985365E4271A33609A8BFBBB800B21E67E111CFDDCD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\35449b10-ee9b-45b7-980a-bed72e898e53.tmp
- Size 22KB
- SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
- MD5 f768bcb451a187c18099961c484eef8b
- SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
- SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
- SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
- TLSH T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 11KB
- SHA256 f336fbc93f4142981bd612f3d0cd8e6e86c22dc4b504a0552e7ea01d82815dbb
- MD5 6217090551b3a1dceaa548201cf629ec
- SHA1 19844d0e406d8e763b0e6bc1bc58ed63f8d48eb2
- SHA512 aaaafbae6c8efc88ead0290386706307877d8fa3e0ebd96feff9ee4a831caaab92d694b60558dd23a81ab1754c72014fbb370f313628b20250fb867a4f90baa1
- SSDEEP 192:xLsNfVQ37uKbi+gQmiU1+YS2n4Ea+jqOmWtmtuv++UamHsqGU8:NsNfVg7uHLgYt4Ea+mOByuv++UHUU8
- TLSH T108323B366838AC764DA2A684F44B3713DFB8402BC68A6FD4D6DC1F0C05DB69C230F91A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 538f91fbd159ab7251bcebbd5e6d412e868e249e7409d3a3ee5f4b19744671ef
- MD5 a0624e8213041e82078f0dc7a09953a1
- SHA1 432f26c2f7b2f721d9748efb2b92f24a2a4f5d17
- SHA512 8ad88a7d66a14dd5796fe64cff9d6b95f85ec7280251b374ae078c90963bb17a76d77ce570464d3fde18fb7a42551a59033b34fdf79ffd08a78cb84391e160ff
- SSDEEP 192:YONq6DbXQmiUySYZwIBa+jqOmWtmtuv++zNzHsqGU6:YONq6hlYWIBa+mOByuv++tHUU6
- TLSH T1B4123B36687CAC775EA2A544F4873617DEA9412BDA4A7F90D6DC2F0C01DF65C230F826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 800713699c99887bd478e2744584b4d39bddfc97624868a65d76d2e39faccfac
- MD5 76b101d5c01629ff4d759e853091ce16
- SHA1 85f449f2486574b4f46f162b475d6059ab49c8ac
- SHA512 00036232ecf92ce125459bc568baed26135759bd12fb7d3ebb26a8b437990d13385e90e49448a851925d2a6a2fb86d68d619dc619743cbb5c84cfeec0919356d
- SSDEEP 192:vONx6Db6QmiUyCwHBa+jqOmWtm7RgHnIU6:vONx6uYHBa+mOBHHIU6
- TLSH T1C302E83969786CB79EB2AE49F48737279F94207BD9562F84DAD81F0C00D764C230B836
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 20KB
- SHA256 89f6f06cdc2287bc183c8cfb31b3177c9d273d55a314e7d9af6d3d4df38a8f5d
- MD5 abd41b9ecac0dbdbc9d6f179a40c0cc4
- SHA1 6faa3b98725ae836fab073083950d3e27456a330
- SHA512 bf3b2efb158773a3e99c8be61f76f710e76997e9c41cf598b5daece349fb8c62c3a17f3a58ff064574a4faaef2c1d2b112e5c92b3b273205a766613e4f592171
- SSDEEP 384:fZcIhsNfDg7uHXgYt4Ea+mOByuv++UHUnTKwBODNZOC9WO:3hrutbabOAqxUHUnewBKZOwWO
- TLSH T14C92AE366C3C6CB25DE6A145F94B36078EF89077E1C92BA4D6ECAF1C04DA65C130BD26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 27KB
- SHA256 a0a628e3064334b7688780df31006ecdb735243272eddaea95ba3652ecb939be
- MD5 f703840e2517b59b59d8a1343911abde
- SHA1 7193681d34b93947ecbee9ea98b35390d30dff06
- SHA512 3a798bd1cf613b560e87b15bde934f7e5402ef381742a3a186a4b0022efbfcd1e51675b0bef9a9537bebc4dc54ba8d13088a121aefdf637cb577dc34ed8ef616
- SSDEEP 384:KiFiZcI4zsNB8TUNTUlIlDg7uHXgY+4Ea+mOByuv++JHUnTKwBODNZOC9WO:BFQEQwgAu+babOAqxJHUnewBKZOwWO
- TLSH T10ED238F218EB9876DDAD9747A77E2E038EBCC067B4856650B3985A0CCC9617FC30AC11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 7c254d47a877ff4ad939b89695c1c0c21fc567d06ed5c7186e8f61fd990c4454
- MD5 21eff97967cb19ea0bb8fa0a1702adfd
- SHA1 fb9a3abb7c8fd8b63596a570b6c0af5a0239f1c2
- SHA512 3b0a7dc52d20099164e92d8867be8ba0e3919b019509e58a6f83a693b7f55a1a95a4f3e2b39d20079a37011ed304c3e933cc0309e4d9fced7bc82e4c02e57f9d
- TLSH T1FC414898B6FA0008B3776F5AABF7686E187EB9772E06D45D10110D4E0A73A40C871B37
- MD5 SHA1 SHA512 TLSH