hxxps://augl[.]net/

Analysis

user interaction
yes
max time kernel
1048s
max time network
783s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/08/2026, 16:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://augl.net/
Sample260808-vb858a1bph

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1992	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134306814251419438"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-668679576-120646659-2289335452-1000\{FD242237-7700-481B-A48B-A257EBD77B85}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-668679576-120646659-2289335452-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1168	msedge.exe
1168	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of FindShellTrayWindow 58 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 1980	2100	msedge.exe	85
PID 2100 wrote to memory of 4048	2100	msedge.exe	86
PID 2100 wrote to memory of 1992	2100	msedge.exe	87
PID 2100 wrote to memory of 4048	2100	msedge.exe	86
PID 2100 wrote to memory of 4048	2100	msedge.exe	86
PID 2100 wrote to memory of 556	2100	msedge.exe	88
PID 2100 wrote to memory of 556	2100	msedge.exe	88
PID 2100 wrote to memory of 2196	2100	msedge.exe	90
PID 2100 wrote to memory of 2196	2100	msedge.exe	90
PID 2100 wrote to memory of 2196	2100	msedge.exe	90
PID 2100 wrote to memory of 4956	2100	msedge.exe	91
PID 2100 wrote to memory of 4956	2100	msedge.exe	91
PID 2100 wrote to memory of 4956	2100	msedge.exe	91
PID 2100 wrote to memory of 1796	2100	msedge.exe	92
PID 2100 wrote to memory of 2636	2100	msedge.exe	93
PID 2100 wrote to memory of 1796	2100	msedge.exe	92
PID 2100 wrote to memory of 1796	2100	msedge.exe	92
PID 2100 wrote to memory of 2636	2100	msedge.exe	93
PID 2100 wrote to memory of 2636	2100	msedge.exe	93
PID 2100 wrote to memory of 2076	2100	msedge.exe	97
PID 2100 wrote to memory of 1188	2100	msedge.exe	98
PID 2100 wrote to memory of 2076	2100	msedge.exe	97
PID 2100 wrote to memory of 1188	2100	msedge.exe	98
PID 2100 wrote to memory of 4440	2100	msedge.exe	101
PID 2100 wrote to memory of 2404	2100	msedge.exe	107
PID 2100 wrote to memory of 872	2100	msedge.exe	108
PID 2100 wrote to memory of 4224	2100	msedge.exe	109
PID 2100 wrote to memory of 3408	2100	msedge.exe	114
PID 2100 wrote to memory of 3408	2100	msedge.exe	114
PID 2100 wrote to memory of 1168	2100	msedge.exe	116
PID 2100 wrote to memory of 2204	2100	msedge.exe	117
PID 2100 wrote to memory of 2204	2100	msedge.exe	117
PID 2100 wrote to memory of 2456	2100	msedge.exe	118
PID 2100 wrote to memory of 2456	2100	msedge.exe	118
PID 2100 wrote to memory of 2456	2100	msedge.exe	118
PID 2100 wrote to memory of 3232	2100	msedge.exe	119
PID 2100 wrote to memory of 2332	2100	msedge.exe	120
PID 2100 wrote to memory of 4072	2100	msedge.exe	121
PID 2100 wrote to memory of 2332	2100	msedge.exe	120
PID 2100 wrote to memory of 4072	2100	msedge.exe	121
PID 2100 wrote to memory of 2392	2100	msedge.exe	122
PID 2100 wrote to memory of 2392	2100	msedge.exe	122
PID 2100 wrote to memory of 3416	2100	msedge.exe	123
PID 2100 wrote to memory of 3416	2100	msedge.exe	123
PID 2100 wrote to memory of 3416	2100	msedge.exe	123
PID 2100 wrote to memory of 3040	2100	msedge.exe	124
PID 2100 wrote to memory of 2916	2100	msedge.exe	125
PID 2100 wrote to memory of 2916	2100	msedge.exe	125
PID 2100 wrote to memory of 2916	2100	msedge.exe	125
PID 2100 wrote to memory of 4904	2100	msedge.exe	126
PID 2100 wrote to memory of 3996	2100	msedge.exe	127
PID 2100 wrote to memory of 3996	2100	msedge.exe	127
PID 2100 wrote to memory of 3536	2100	msedge.exe	134
PID 2100 wrote to memory of 3536	2100	msedge.exe	134

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://augl.net/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x258,0x7ffd3431c188,0x7ffd3431c194,0x7ffd3431c1a0
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1872,i,17132475201725701677,17962916834277645708,262144 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:2
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2004,i,3836640976940969471,8864996971261653435,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2096,i,17180717075000544706,5319126821284570220,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,11732458657219166753,16605388906389701423,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,9927771899870530400,9918697901437914172,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,21499475441541238,17953202555780043693,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4236,i,1991162427493503471,17319328297872902003,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3580,i,15527400068848315897,17562414317566862759,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,15737122301886718174,5762870828188451667,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,14275766963758568242,15444621130387083526,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,14275766963758568242,15444621130387083526,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,9372097435851823505,6187230159633185712,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5900,i,8896692912824424593,15906124256624253187,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,6675684728862862114,15856326575379423392,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,4241460370092462860,10183082718074338941,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=2172 /prefetch:8
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6036,i,7735071760569716908,16086339488179290623,262144 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,3938551469076484463,554852850780075340,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5304,i,1194763996772911761,2367912678424239938,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,16253613878146263318,4288762731182305558,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,10595379627467534840,5544424738114923066,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:8
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,16128009372789040940,6512644756015948031,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,7552821715650565069,15553356003723859641,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:8
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4300,i,8993541797377395583,6426211245121473687,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6804 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,16677135203331308169,16691014722454313358,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:8
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5016,i,600518416700044564,8209981881804114829,2097152 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5168,i,15237546860430782918,8051523791357266433,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,11788763466466743841,5648453159125370862,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,13610115631079155189,8737627582594233026,524288 --field-trial-handle=2348,i,9477629259111281615,14432855907316580279,262144 --variations-seed-version --mojo-platform-channel-handle=6300 /prefetch:8
  2⤵
  PID:3536

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 e2cc1d4d00526f020d431721155aff61c9c0b3d16520a4d3506620b049d65f12
MD5 4e04397b6cd0f5d67cfbaa74499ad812
SHA1 bf738da478e23015d9913782534dcbcf1d15116b
SHA512 22126420acccee027ad3de158d48d2014ec8a0030397cce61a6d454814ece747959fd4c4bb50cf521eaf8a33eb2842795f8c9df0b9962f8505af2b63f3f4df53
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P78:fwUQC5VwBIiElEd2K57P78
TLSH
T130B3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 16KB
SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
MD5 8c7cdfea4284ba987d295d82a9c7ddd6
SHA1 7d1a3a66f2d64a383b230196ba89a263ce7ee957
SHA512 59c8229e834c944265aed4131c79f41f9f940a48651b9fb18800cef5bae36d17c7fd5880120c6fee8ce22a157b65bc63846b65765bc4dc86e15926dcce400d0d
SSDEEP 12:sf9iXhV0xoUZxCe+JKlkQuMRxCb8TXuYJ0IJpPK6BsyW1inPiz:U9iRqxoUZxWMk8xVTeYWI31BtXP
TLSH
T105724C85B34498FFC8835E7189BD27903774F6DF1F02866B6A6A760E2E271C84F44224
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1c8e6fcbb66aba64fe595f222fc4117e00e82ccdc0eef2100a1b4f7babb04f87
MD5 398d1e7948d46a763209c466fdacd0fb
SHA1 b26f2c32bc106089a59ce779d792beaba59f92bf
SHA512 a0bbf31d803e7333d004f03de9c261732d00cceb5d82dd64b5f0decf8adc8b840891187c72bb21cce83873e6d4dd2fab89d4c7efa320afe2ef3589678dcb1424
TLSH
T1B6D080277A196004F3964175A483D7061319956129575711F310C44CA9775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5d2c4e39ddbeb0ac61628bae04f1ac5787600ec893b0e230d1a84d61470771a9
MD5 cd6e704306442404371caebfec7f5b29
SHA1 e4beab8b7820af3633bf7c75a5498a958a95832e
SHA512 de66681a9245e8ece7d7e2ea2080251c395f2aeb8a885ac007eaf16f2ee3a3e36610d2afc17be964a038704371cedfbe4da91143ebed5adac20dbda97768d6e6
TLSH
T13AD080273A196404F7964175A483D7061319956129579712F310C44C99775D553C11C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 558B
SHA256 543f6886debed0079841dd45eb11a4e28faa087bc621b068f348772e78d4f79c
MD5 181c04b7412774e59f519e747e75d11d
SHA1 754a8b44b77cc127f6304aa37bab65c7749cb5f7
SHA512 15171070e587414f2b29d4fa4d2054eda61166b3055f821fe1b1a1a46ebe0426a000c342e75410ccb521becd227ef3c3ac4e66e071141d1d7026dcb6f9f46c5b
TLSH
T156F0464767A5CBA58F38A95F9AA863080590724AEFC9CEAF260D6595BC40C4071639F8
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 3a1067dfeffd2c9172efeb6d274a7cab6f3274d7d5863c5eeee87d76b5a3f77c
MD5 d21ac694a7a3f43b0450ff16d74e52ac
SHA1 e2ad71e22fd38090c81b5a614d45dc3cf7ae8361
SHA512 c467925b0be08c1e7dfd87f1a76652394cddd3ef413a2bd68b3366274b13ae82eab03b176b46bc044c1a652b95ebe88a35ccdd22d9df20735bf3e577c4c9b274
TLSH
T1E8E0268458C8C22EDF09A94B51ACB34DC2C0370A9FC8AD2F271884887482850B283DB0
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 158B
SHA256 f803625f7089762ff6faeb3ece82729aca5f5a8ea6348ac385095f4ef1109a96
MD5 886d3a2f30ae328537f8a8495b7ac587
SHA1 7c18a459a31db22bab627b1df46f4732da5c15d8
SHA512 8d54299c0b059afd776373426c1e9e04dc2a04db5ba8722970b08f1abe9288e7b9230a4254217fff0985090db156a1f16de461ec7037774cdff0e4deaa405a0a
TLSH
T1D5C080D8BDCC845DC281187E5716F400075176119417A6170551FCC03241EE01F29120
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 156679162b88fae0bd13029566bc6d812eba141000288c199b2c268d1f3a1711
MD5 d1f8a0ecda18880e5a0391fa0fee2117
SHA1 c0d3657efa4e475c40675959296a72dc296b8872
SHA512 82f11588b6fac1686da6536733a81c3e13c71e7f4893489e43d898bba86c8c555883069bb7f0a4dd4dab52ed40decca97d0b43c4add8a65373e464d3587410da
TLSH
T1E071D3386E1384A0D393F2B375D242A031A98AFBF456DA76C06C1860261772FDF1B03D
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 8b71f6fba4a5424a2290951b4fff0e4bad663fd30d1d88a64911ad1f85280170
MD5 26ea745590019400e0600cb9e6641088
SHA1 1bcf04f46385ec83425c5876a9ef597beba47ae6
SHA512 5fc40aebc6e7de54fafada4d8202d6a567e0dfaa81dad4d66922582da046351d25783a6a4d61c388db01825947b641532df2076d144464bd1b15b0ba11084e80
TLSH
T165518EB3C3DCC66DDC1256F0AA24AE2BDE1D0909826C3C1AC9D5EF5B93E2470E24195F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7f81e664ec546204cca07a5503c149d8f21dfbab99371abad04960e8c7af465a
MD5 09c8ad147e391bb096983e26d0296c84
SHA1 1d1f2c2dccb56931d25d85701c89ae22cc7954f9
SHA512 c82e6dd0c995f332c6c00a33d928e26d555cd62a0dc9a0363779c228d7e43db71b7963bafa532b195b1468293fc6b8dfafc1d62789810c17a17872285dc6dd2e
TLSH
T1104180F793E9C25ED81192F0AA14EE2BDE1D0505836C7D19CAD0EF57D3E3071E142A6A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 519bded8a88b1f9248647e1dd3b8c3d3f721751f641491fc8bdc0a72020f6d45
MD5 d443658ba66406f69f98b7669fd36273
SHA1 e61ba2ecd24bf01f0375507e3004a726b808fcb4
SHA512 2dc8f97100c75c9f17af255771fe058bd6b5792d66a655544b0549331055a09917d51e4c4c3a6cd87f0eeda22109f6d49d30903abda8edd8b39da618bc8c2b81
SSDEEP 192:sxZtRSyM/jK1Ml8MkL/ftsDtxIdpD5HW6+WNYz//YCDLBt+3IgrJ:sxZtsML/ftsDt69Hba/1tq9
TLSH
T1A742F811AA34A977CCDBD20DFA45BF53D6F90473A2940E54ADFC9A1C04E6AED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 0de214875ee5266c9a8e4eb36e372dc582f7c51199156fd53d626133f687aaf7
MD5 d8e7ea6693ad7bb930cf718186c234ee
SHA1 06c20dce745213818dba2acb9c5c19bab37b710b
SHA512 1e03b03da1bb579cb6e2b757759799bcdcbdff9109121b598b1b5a9a6e37c48daa712b5d0c84248d45b224b804cefc3f486ff13f767849ae374e9c99d9a23da1
SSDEEP 192:sxZtRSyM/jK1Ml8UQikL/ftsXUxIdpB5HW6+WNYlaFYCmwat+3Ig5lJ:sxZtsqhL/ftsXU6XHbfFwtql
TLSH
T1AE52F711AA345A77CCDBD20DB941BF53D6F94473A2940E48AEFC9A1C04E6BED220781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 34f0872c045cac25eae0bfb04a3c16a823f62ba52c7796c1ab2364a993748a6f
MD5 f942dee0f20d8e85c877ebaee7a47a3c
SHA1 be42695398a28bb4218b311165d40b25d81f4a5e
SHA512 442e80b6ee46e700f909b32122416c24d466cfa3674217c3cc8e22bf61524987d4eef366ff11c9049e64fba2bbceca6776ca8e0a81f9d6d465ac9068ebdbe608
SSDEEP 192:sxZtRSyM/jK1Ml8UQi9L/ftsXUxIdpB5HW6+WNYR2XYCSwat+3Ig5lJ:sxZtsqUL/ftsXU6XHbhXUtql
TLSH
T1F852D611AA345A77CCDBD20DF941BF53D6F94473A2940E54AEFC9A1C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 ae650bdb683ecf0ebb2f8085f3900476d254d7fc4820a2ea9b747401367d439a
MD5 64589c4dc55a167ebe1a45faef3c65f1
SHA1 9ed5f44498cc6df53c1e49fefe5b10f3f6b18507
SHA512 c72a6b8798069eaa1c557eca74d969f804c88cb11b96d3cecd2738a598eb424120f2361d0c0d137d4a9d13b8f79246c3c170dee2bae6518fe2617aa97368478d
SSDEEP 768:IJ8bqn+WvSCt68F1+UoAYDCx9Tuqh0VfUC9xbog/OVnZLlRTKVVroB:IJ8bqn+WvSCt6u1jaCZLbWVuB
TLSH
T1C7D20B3B280CCB7E4F845E5DEC266F962DD801CB6B988D4447FA894C03C76EA512B5DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
Size 816B
SHA256 05172d79a6fd399e29f72bc7e49b9f4f1af80a871a3ce4fffcb98327e0fc8a4e
MD5 6ba4ae813b3a42cc1c16cde01b3060a5
SHA1 3dc1496b1adc1221ccf2d16950c196c5e7f9bb2d
SHA512 258dbcdc6589166ee813f1e51c6c2b0d1e35b7f8f1d8ad1d63812c6e3747b81d7e9fce20a9255270a3fd3cfa4d9ef18c20135a6bec605b08654f2b7545aeab04
TLSH
T1FA0102859EA58D1FDE560AB314B930F4737089DC6711D213546C32272C3634965175C8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cbc14.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5cbc14.TMP
Size 816B
SHA256 4b3fca19eafbda4c515fb3862844d02d6e8cf5b25eb15cc2652a513121ad4c43
MD5 d04bd42cbfb416656e4e3f18a3267628
SHA1 e5d8cab34c22b6aea6631d220cf84dc5a9483199
SHA512 2c892d76e7d8b9c4f5db6f4be84d96ae8ebdb9026446fdd8584738f8d021fafcb5a83d0f91935d93f104a3c0286ed4f02ce12196c64a172dc4d53f6b6f5f5b40
TLSH
T1CE01E1868B964E1FEC5505B6099560F87331C9106322F793907D263A1C7A38969070C4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0f8b5b925ae18cd7e274eee04264a4aae7a477deb7c788ead80ad0f17528e214
MD5 7df90902cea2bdc5679b2b2956dd7e32
SHA1 47e223a28d8e710e631d7aace26d7481a79908e0
SHA512 4700a03fdbebccc4a7aed36bd8b98318a85d758512a442ca449b2b009aa206b030b89ebcdfc1f55213e36c90dab491b275378be62d20fd6c05e4c5ce4b055da9
TLSH
T1B9E020FA2DE72860BC7BE3F9247148E002597998CD86FC9F1079A1D750F3361385AC61
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 4199540df52cef0c51aeecc5e4b70472c9d4409364469ac3db1ffb9d4183dfa3
MD5 fc3bbc40183882bd38e06bcd2d6f7477
SHA1 9511ae6a4d4163df6d823fd7efdf117fb0938cce
SHA512 bb7f531cc14db1502f75c317bb7976245ffa0fa1a355843e2c32e3a36dc5672f9df011dfd3d279329415e2d339c782c85624af49152ec3427a3907ec66bc5813
SSDEEP 48:K4/IhKkosty1hI9KaIg6DIJKEAUnyVTIBK8osP:K4/6KkocOh2KaIND2KEAmuT2K8og
TLSH
T1D1C12006F03B320239FE69489796A6368E5171637819A46F3FB801A21E77E111EFDCDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3b033d41-9d1a-441e-8902-ec60589aa5ec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\3b033d41-9d1a-441e-8902-ec60589aa5ec.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 15KB
SHA256 25e55133fc527934bb8359bfc3472cfbf8125f897df5130dcf2bfc89de41c69c
MD5 f69eda64f3811989c12ca2397b2580d8
SHA1 bb3f641b1d5c173c158573971f7d6d639f7b4ea6
SHA512 2cbdedf35b5865d83e9ffba94d7b36a7303adb3b7a111acc1a5bd6b62d5b6646a441922d998d3ed11605864e93775bae4a4ceaa99bd20dc211259e9596fa4084
SSDEEP 384:ssNDU8YqfY1CdEa+1OADDnTKwBODNZOCq08:sGOasOADDnewBKZOn08
TLSH
T1B8725C36693C5C775EE26249F84B32079FF85067DA852FA4DADD6F1C00DA29C230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 d426d4a82e08237011f2437ea897b50224a1afeeb7c5499939bff6f3a1ebf99a
MD5 abb342c1e0fa261bb8157a9616484d8b
SHA1 b4ba4f19cfe86e663c9247babf8bbb9dcd124619
SHA512 7391c7ff1f53e68728e7e0a15a1f6860ca547c3a638347378685b47ea82f233c371315799e4a74ee9e44787b2e633812b68d7f3bc47e217d18f85502ee72d2fa
SSDEEP 384:CiFtzsNf8TUNTUlIlnYqfY1zdEa+1OA/DnTKwBODNZOCq08:JFVQwg0OasOA/DnewBKZOn08
TLSH
T178B2F8F258DB8876DD9E5747A73E2D038EBCC063B5856A64B7895E0CCC861BFD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 908f6d0fe488496fcde448ae347fb46dd776ef8fbd9c02a30fe56e150e5e405b
MD5 25791f3fe5d6742af688b0cc7f66c152
SHA1 566474ac2e83dc3a38a5e5b31271788f0dbf09f4
SHA512 4c43f46037d9a36f7f5efdd2be9aec95f78f500ed5a29c22a7b7560c889d57c1a2cc7900a33d66cb73c78e8837e1f1c4e53fb907b90f2ca5160e466512af0061
SSDEEP 384:CiFtzsN48TUNTUlIlnYqfY1zdEa+1OAKDnTKwBODNZOCq08:JFVdwg0OasOAKDnewBKZOn08
TLSH
T118B2F8F258DB8876DD9E5747A73E2D038EBCC063B5856A64B7895E0CCC861BFD306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 16KB
SHA256 e00d6273c5f94e37467e9e578c8c2cfd3e99d5ab075e45e749b34add5a0eab80
MD5 3bb99287f6909cf8f259555ab6730846
SHA1 07714b0affcd82f4a9c11b166e2544f2e2e19029
SHA512 41b938b463eda20e386896a32dde0debe422f2f221266177549dc9db4ba01e7e72ab06ffa4062174f9977d607a9980af758ba4717d595713609d47cc00022b87
SSDEEP 384:KsNDUnYqfY1CdEa+1OADDnTKwBODNZOCq08:KzOasOADDnewBKZOn08
TLSH
T19F725C76693C5C774DE2B249F84B32079EF85067DA852FA4DADD6F0C00DA28C230BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 a3b980721004ad1cae03dc458c8a0d2c0446a2b26261625c651602be331be4c7
MD5 693b9117c8dc621f85cc1bb23dc852e6
SHA1 770f0acd8f4c208eec7248844922c8c5705cf40a
SHA512 6a5b683d86f0dd22ed8f598db93a1a4ba05ff8fe652918815de2d9d824509ab3fe3bf0531e58bc8e1f6a1b982bea6c2a7a7d057ec440e2e0f93899557b21168d
SSDEEP 96:EqONkeQsjpf1bxX5ih/cIPURHl8h4otop5nnDekBfPgvE5BzatIRdy+ZhOmGsR1t:vONa6Db6QmiUyDTHBa+jBOmBRGRgMaU6
TLSH
T15E02E935687C6CBB9EA26E48F88737179FD4103BDA966B94D6D85F0C00D765C2307836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 3ea802c14b3cbf1b85bcd63c81973527ad229fc52dd379a5259050305c1c98e1
MD5 611298a8787ae0b3db0606880f54b98e
SHA1 31b17d2ce25aeaf658b44dea7000e4b35a8ff8cb
SHA512 65a3a2d5d2ae93d7676cc0db7298c4622e11e21c2290090b5bcca390fac347f984c2cad91dbfd945edf156786f764a2c7033aa38fa1789ad13edd98d76917d94
SSDEEP 192:bON56DboQmiUyOT/Ba+jBOmBRZWM9Nzmq3U6:bON56Ax/Ba+1OATDU6
TLSH
T1FA121A3679689C775EE26558F88732179EE4412BDB8A7F90D6CD2F0C00DF65C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 23KB
SHA256 ba23b7c4eedf201aa4de43ee3dda9a4c2e38ecd681b2430fb7af8af80d28656d
MD5 5faeed329a32500f878720f9a0516d74
SHA1 3d554c1d847d6fbd68a87aa88dbf7719ce0c4f14
SHA512 849dc57810da4d39f68acf7ed622818e4aa5689ee6b96cc6d673bb28db1309b3e48c7405f0bd096d6a0e21ef570e8962f92a8002d25ae46ee7897fbd53d09360
SSDEEP 384:CiFtzsNA8TUNTUlIRnvqfY1zdEa+1OA/DnTKwBODNZOCq08:JFV1wgHOasOA/DnewBKZOn08
TLSH
T1ADB209F258DB8876DD9E5747A73E2D038EBCC063B5856964B7895E0CCC8617FD30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 248d96c9dc650758fa3f660c4fbeed290f758bc7f02f8454cfa98f30c37c1cca
MD5 7612b608da63347c02e274053b6ee33e
SHA1 188c85f02409939016cbc9991c6f4ff172793c6e
SHA512 c9914020a77b459c1c061e4e7b0040bf589f633c6ce3010bd13fd9080bb48f4b47dc115c6c17d74797d96a40b7c4f0acd6a337d3331ae9f9fe0587305bb0f7e3
SSDEEP 384:CiFiZcIhzsNA8TUNTUlIRKvqfY1zdEa+1OA/DnTKwBODNZOCq03:JFQR1wg6OasOA/DnewBKZOn03
TLSH
T1F5D239F258DB8836D9AE5747AB7E2D034EFCC063B5816654B7896A0CCC9617FC30AC11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

71e3a450-a202-4a32-b4a2-3913748d9c10.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\71e3a450-a202-4a32-b4a2-3913748d9c10.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 bb64555efee12521aac7d9ec1a6e747292bf4814cff103bf86fc3e12327b7f36
MD5 e956dc582456d4bf4e10e9a8ef6c1c5d
SHA1 45589011d06c08061eef5e78c409d28ce10944df
SHA512 fd575c82ff45177fab7dae2a90f245250cfbd4b0c19f32390bd178960bcf0de27e5b44df93055b4b15db80cc71b527877f7f0f28e9a2a5f3886444d405251a75
TLSH
T10C412768B6FA1148B3B76F5A9BF6686D447E7D672F06D46E10100E4F0B22B40C971B37
MD5 SHA1 SHA512 TLSH

Submit Download

index (2).html.crdownload

Path C:\Users\Admin\Downloads\index (2).html.crdownload
Size 6KB
SHA256 f9debe1d14975ccd5c4057d359b2066f87a354d12f4ab146a050c5e1dd655c4e
MD5 bbc7e0194fc7147912ce88ed0eb4324b
SHA1 46833f8154e40a55249613ffd4c70a3ff1708d47
SHA512 3fa08ec715ef83a1747c45ed0d904089031d3775eb6edab5edfcd336c57d75c809fc32e282c9b4bcc44018cb9412a2d5f7920ff2accb94c31781d53d8f8e804b
SSDEEP 96:qEcJiOoFVKbfyFGpLht6UsTFaV8sZ2sC8YAv8NcWZsZVjtq:qPiqfiyht5yaH28iHZGVjtq
TLSH
T156D1956A97234E76427642FD37A2B38AF75090065B0303763AEAB1573FF06616CE2D5C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download