hxxp://Windows (c[:])

Analysis

user interaction
yes
max time kernel
899s
max time network
734s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/09/2026, 01:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
http://Windows (c:)
Sample260908-cecbjsyshx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4104	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134333063672933081"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2370214745-1838013427-2987045292-1000\{A7231A8E-12E2-4C87-B68A-B5E367660F2E}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3764	msedge.exe
3764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe
4932	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4932 wrote to memory of 1612	4932	msedge.exe	87
PID 4932 wrote to memory of 4104	4932	msedge.exe	88
PID 4932 wrote to memory of 3480	4932	msedge.exe	89
PID 4932 wrote to memory of 1824	4932	msedge.exe	90
PID 4932 wrote to memory of 3480	4932	msedge.exe	89
PID 4932 wrote to memory of 3480	4932	msedge.exe	89
PID 4932 wrote to memory of 1824	4932	msedge.exe	90
PID 4932 wrote to memory of 3780	4932	msedge.exe	92
PID 4932 wrote to memory of 3780	4932	msedge.exe	92
PID 4932 wrote to memory of 3780	4932	msedge.exe	92
PID 4932 wrote to memory of 4424	4932	msedge.exe	93
PID 4932 wrote to memory of 4424	4932	msedge.exe	93
PID 4932 wrote to memory of 4424	4932	msedge.exe	93
PID 4932 wrote to memory of 4508	4932	msedge.exe	94
PID 4932 wrote to memory of 3912	4932	msedge.exe	95
PID 4932 wrote to memory of 4508	4932	msedge.exe	94
PID 4932 wrote to memory of 4508	4932	msedge.exe	94
PID 4932 wrote to memory of 3912	4932	msedge.exe	95
PID 4932 wrote to memory of 3912	4932	msedge.exe	95
PID 4932 wrote to memory of 388	4932	msedge.exe	98
PID 4932 wrote to memory of 1128	4932	msedge.exe	99
PID 4932 wrote to memory of 388	4932	msedge.exe	98
PID 4932 wrote to memory of 1128	4932	msedge.exe	99
PID 4932 wrote to memory of 1544	4932	msedge.exe	101
PID 4932 wrote to memory of 872	4932	msedge.exe	111
PID 4932 wrote to memory of 4784	4932	msedge.exe	112
PID 4932 wrote to memory of 1532	4932	msedge.exe	113
PID 4932 wrote to memory of 4336	4932	msedge.exe	115
PID 4932 wrote to memory of 4336	4932	msedge.exe	115
PID 4932 wrote to memory of 3764	4932	msedge.exe	116
PID 4932 wrote to memory of 3504	4932	msedge.exe	117
PID 4932 wrote to memory of 3504	4932	msedge.exe	117
PID 4932 wrote to memory of 1956	4932	msedge.exe	118
PID 4932 wrote to memory of 1956	4932	msedge.exe	118
PID 4932 wrote to memory of 4708	4932	msedge.exe	119
PID 4932 wrote to memory of 4708	4932	msedge.exe	119
PID 4932 wrote to memory of 1196	4932	msedge.exe	122
PID 4932 wrote to memory of 1196	4932	msedge.exe	122
PID 4932 wrote to memory of 4668	4932	msedge.exe	125
PID 4932 wrote to memory of 4668	4932	msedge.exe	125

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Windows (c:)
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff807ddc188,0x7ff807ddc194,0x7ff807ddc1a0
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1968,i,11036903731913570167,9408285106656053930,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,6426179787094960866,17922456359129432302,262144 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,9453818555227485100,3686827374455560968,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=2508 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3496,i,11234480167078757097,4223851432229650836,2097152 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,1180064488488093734,1685324833665918485,2097152 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4272,i,10773420967303068863,4425121961788488931,2097152 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=4336 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,6177929050227147464,15779325364060529761,2097152 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=4688 /prefetch:2
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5188,i,15888348854052771735,12505404659440716036,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,2282815489811358515,16932629375245653755,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,8227135226261020568,8043340189683232942,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,8227135226261020568,8043340189683232942,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4744,i,10321336307144890615,13129092122783658511,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5844,i,13031406892980563282,16202054023230044558,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=4720 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,527072509647822821,17456062222507275012,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5896,i,137186806231330819,12835063853221293725,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5604,i,10537696618126809456,11532682273271550224,262144 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,15544463917121900844,644790219163173866,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1752,i,9334447837976681237,567011245623653937,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:8
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,4160701004462001594,10073789161280841962,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3448,i,17494723127285367695,4659599450872314009,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,10124587379444927521,15402205485081578619,524288 --field-trial-handle=2336,i,12999614389979616699,17990259365133231607,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:4668

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3408

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 2b697eddcb2b07f8539bfb3652953b0a60b5fe79caaa7bafd3e57283f337ae14
MD5 941e2ecafe7396f8e97c401afcc3b3af
SHA1 31446a30ef45517406a817809c058cb4d0f8977b
SHA512 222c47ab976196c3e2f6ff28796c492c670705750f2050ae0b523f8bda0f71b8f87e5338b508def4ce9eccd960b940f81d1f8e67bc05678f8080d5f069521c97
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T1B3B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 39b8627875fea5ac5c5bfb887da12c15116e3fe81f200852c71d5699102c9044
MD5 e3962be2eb3bd350a67bf6309159a1cc
SHA1 c10632202b95ed6f7f4475b6483bf5196e4c5578
SHA512 d12d4acc23b51c071fbc9bf4db2f0575a6b43ec7894b272035e4c01dfce30099cd3ef90a1009dd1e6284cfbcf7a37fd3b79490739946700a2c61ec578374cbe6
TLSH
T173D08C677A0E7815E72F8231A413E360A76B4072A5629702F324C81DA9BC8D85BE63D7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a59087fbda784cffb013f4e2a0bf13a7fca483c48e8a7fc15fa022402eb25d72
MD5 dd54db185d82309b854bfa7657ba4600
SHA1 d01c14e8b4dec85ed2e1671545a868fd7ad4fa95
SHA512 f014ab84dd934b90e006883b74ad349d05f60071e57d2cf0bdf8a9bce118654c92139263e082094b602f6900a71e9a7848754994a2ea88642b2376121b581d07
TLSH
T165D08067354D7815E71F42319413D350576B4072A562D702F314C41D957C4D857D53D7
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 08b30505780cee008f98d0c8655c066fcce357d1018520c42061ed2ff71acf62
MD5 946fe6a10e1ce96659e5262b86a2e349
SHA1 f065735e100dddb06e90d251133e9d361903875c
SHA512 1bfd0ce9a87dd2ac22b0e2250d4351ae3da7c51c42e16173336340c1197f9bd8bd969ad25d0e03e5c3ca4e5d9fd58d67354a8e5be6b093225db1c7e98e179c1c
TLSH
T12EE0269855CDC22E9208E54F537C474DC2E03B0E9BCCBF8A1B08A8897401050A786AF9
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4502b27f9911c2f87a40a4eb4e180eb3e2158af63cab28e6eea770c4e90d25e6
MD5 3c7042e3d568c4695133c406c04f7dfa
SHA1 d6108a9762c4b2a7f50711a83f1bdef09e7a3681
SHA512 b71790cdc6884a55d4d27e631acd526d0662180d31604f1e0b16f3d90cf6621e4ff8fc33ed2378fbc619a4fcb8c472f76119f861e1f4c2262249ead401ffdbf1
TLSH
T1D0E0268625CDC2AFA601A58B4268870CCAC03B0E93CC7A4A270884987002464A3C2EF0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000b6

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
Size 26KB
SHA256 6879a32efe20148294b5dfded941e64d4dc10bb9ec709e3d7f639c256382a775
MD5 99e44632cadbc464125fef5d64b65b4d
SHA1 17898f690057441d9ee6ddbe644659c7d9065e67
SHA512 ef9d7e5f6644fbb28fb37f7080f86d2b858fce82a54a2dd3ecdf0d3c444a5b6f3c1f859540ccd6ef6ea2c34b9e268b8b06bdde4a1cd50413d370275ca1eccb51
SSDEEP 384:vphdEe2iJdIU3iLiRO0fIbQKt0k7sbVYCNpuNj5TKF5Ler1rVqxbCpV:vphJ2wdjnO1s5hbrNsbU5Lu1kxbAV
TLSH
T10DC2E03247E5D4D2F6634436E61B4E4730C5E0B26B943FA958ECAA421B71BE40B836FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 5KB
SHA256 1dc104d540536b48de8fa407354a52ec8be4fcfc5cb3d082ee09b0cdad1e9e1a
MD5 f32ed2e16378a78fbfeaa069e784609c
SHA1 91ea0b8021b42a55fd06fa001b7dfe829d4b96d0
SHA512 8778c16b96451d98972d3b4adcf11a138cf2537a32866d1c56844094d26c1ddc13e31caa29654c674b1301cc12344ba087867adf27fefcdd95ba614d9636cd8e
SSDEEP 48:n4Cfz9cccmoKIM/5eEGYVDwBXyp0jd7Chg6U2xWh3QrWnvbW3M9EmXAlGf11ahwU:xBR4KpxHs2qd78UuINWwdGbxV
TLSH
T13AC19584819250F2FB75563FECF6188F6428878125822FB39F70EB2CFA877895198C44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58c04d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58c04d.TMP
Size 3KB
SHA256 eba406730f6a12cbf198ec4f2065877739a39b996fdbaab134f1b6851e8a42cf
MD5 7453825b142579a49b1d2045e7ffa039
SHA1 8cddc0fe5be611ee174227831d547e1b3d944892
SHA512 e2869dfd931a7cc8dfabd705c3ba472a88c33a458ddb401d2a72ee6d1bbe68fb2fe84e3b1d340ed11af0f298668789f96244c5d183b688b0999ca37e903a829e
TLSH
T148716109829304B2F381993DDCF2551B7878C74A095B1F76CC107F3DFD05B11AA1AC05
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 68dd8f156b8426d052da04556b3ea4bc851da165fcfa0c7578fba83fcb6fdb5a
MD5 a68d4ad51aa33332350c6419d9409084
SHA1 013e68d09c5b5b62133a75f5f4026d820dc14a1c
SHA512 75a2690b009ae1244b8a466a9e0d9d5661677d2827271da1183e0fdde6af49be4641850d55a7ab28f3a401e415c91a6cd506f2b8738d25b81fbd212f60724504
TLSH
T15E4169F683B2426DDA1196F09D14AF1BCF2C005343AC7D5985E46F57A3B24A2E062B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 9769464607d821d1e4c8198204cac62d53a8886850f754ab3836e12cd1aff427
MD5 4e76f60a7ea0d263ebf34faa8cb40606
SHA1 b65a80d537ca0ca56e1b2248e40bcbfdbb327a86
SHA512 8c7d4f36ec950bfe68658741ec6c8a49ae3c3f1c6a871da7875a8306e66c8ed7495778b71ffb417bbaf0af442215fe78dbe095e81edec571b765e95f7c01ef63
TLSH
T16C519DF2C3A6426DDA1195F0AD14AF1BCF1D054243AC3D5985E4AF5BA3F24B1E122B8F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 9b9cd90c64d0331f879ed28251df284f30c2a9d64bcd89b4f7949d3f95422a51
MD5 a0d0db743c423599caf8fbb9726dd4e4
SHA1 8946e6ed0dd394ef9791dbe05840f08a56d6d184
SHA512 99a351a67175f013c5141cdd8197e87598653bc9bf3bbb8b6af89c560770b5961586f540e8e0ef2575fe8bf3414ae77e0237cd5d3a9c867761443c96304518fd
SSDEEP 192:sxZN/yM/jK1Ml8MWO8/fPs1CCS7bjXndpmpHW6+WNBn0/YHAVmDsIgrJ:sxZN7uO8/fPs1pojiHbW/cM9
TLSH
T1516209126A245977CCDBC219F9117B53D6F92473E6904E48AAFCDA1C04E7ADD2213C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 a09de64f8a3a07224874a58db98a4dad50d6117362e1110cf7e4e2cb913c9eb9
MD5 c3e6a5d74dd40649f3fcec4670e714a6
SHA1 d80257badded8786dc5d22c42e32af7954d9e19e
SHA512 cebcba7129a4c372a06b0e3a00e8905c1131687cba4166c648f96310ef6b0c0647932988097f28fce434007376fc91402f443405e313e4a4c7a739ea8be97185
SSDEEP 192:sxZ4QUnv7/yM/jK1Ml8UQpWO8/fPs5CcS7bjXndp4pHW6+WNBn0/YHNoXDsIg5pJ:sxZunD7qgO8/fPs5fojcHbW/zMV
TLSH
T14872F9126A24597BCCDBD219F9127B53D6F82473A6904E48AAFCDA1C04E7BDD2213C1B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 40685b2cf098e8fbef11760a6a8d87048d8f6c5b98c0729e0d1538755630e4e3
MD5 c063ad226e5927a06cfd86fe00f9bded
SHA1 11c08995557018640f40df5be99ac11eccf66bd9
SHA512 18f5fe288792b517233b98f53fa73803a4bc792bdbc994b9e6cb8490962e0e6912d235a142280d69825ee9980c5e97ac7d787a4e71d6b6ed20edf3ddd7216db2
SSDEEP 768:DmUZYTMWvg0Po8F1+UoAYDCx9Tuqh0VfUC9xbog/OVOeLlPZ4RYroVp0VQ:DmUZYTMWvg0Pou1ja7eLZmRjwm
TLSH
T1FCD20B3F284CCB7E4F844E9DEC2A6F963ED801CB5A584D5447EA884C03CB6EB512759B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index
Size 72B
SHA256 737a1e53cf98474389310bb20578a9d0abe0a67f4452968e5a40e77d9059d8cb
MD5 a59160f46e381f0447bf2a73ab1de2b7
SHA1 4650020045a53166ce6416aa0d47dabbe362109f
SHA512 2e71f9bd7c0cad8ccdd165118c04ad121abc9fe1b43f55f49c6a3b08844a78657e91ff23ae9c5908941bc23019f03824c6b23a1ebd969cee308a663949702868
TLSH
T119A002D802C00606E11356B035AA93D97710C8204203537B73A14195CC50F40496108E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe589a28.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\41587525-1d82-4d4b-9c66-0bde8fed8399\index-dir\the-real-index~RFe589a28.TMP
Size 72B
SHA256 6b78015d37f029cd42b7d03507cbaab0fc86eb6918d2f0f216862f682ed3190b
MD5 2faf275bdd25694783d844433dec0cec
SHA1 143cecfb2919d6a4a4bb74f404c69f8618a0b02c
SHA512 d6e4c65f99892c278f0898d58827b4a188d02e7a4a879e0510ae924f1b25dafa97d2d6b3c750b0bdd9a9cf48c83f05c2b0f2f6d60d4ea383a8671d9c7676d1c7
TLSH
T18CA0029013800409D93222B9175202951340CA14155093074192014CCC525D56DD540C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index
Size 3KB
SHA256 30afdbcd240ddec08c7a1c0fc866d42ce7154c938af4385fed8fa4933e37a441
MD5 9d956d83f99796228790f6d79d1138c7
SHA1 6be5cc1accb59cdbfd3173372239e6abc29d358c
SHA512 d0da3d648d54e204529014ec0664ab3d5e62d6e16ac85d08b1e6cba8d8e89ee8bc26e08dad272cda1d924c2795406514ce2f1d64ac3b20af51a1d2bdfc324e22
TLSH
T14651A74F4D530B65CDA8567204B944453B3CE9CC13482907A2FE9234FDC7768AC59679
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58ab7d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\53f0f5bd-7408-47e8-b6a3-5aa7e69ac4b4\index-dir\the-real-index~RFe58ab7d.TMP
Size 2KB
SHA256 6904db3da06be6966fbfcc5adf2fef5e317843d971cce83b336a993bd2995fa6
MD5 e6a049cff19f0ead7c9498af511affc8
SHA1 9ee4cdf3ca849621c5ea88a9b74966244ea857a8
SHA512 8fa0f8e6d847366f6ab08f8d22cefdfee32b7d797ebe8a567645c3925435c593dd8a41a45b1212f54f9aa5ec36b461dd165d621fbd84e35a9aa38066e6882039
TLSH
T13E51A64A8D424639E884417709E3A8B4373919008A19BF5374FC9532AC937AE3D1E2D9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88eafc7f-f20d-4cf6-acbe-f7c5c353128a\index-dir\the-real-index
Size 72B
SHA256 a0824f63d1a62a04a565e00bc4c7de593f08e0e24d0b0088734fe5824851cff4
MD5 66bfdce39d35cfda894e713f7afd3436
SHA1 8f4b15e1a0e2d2d7c5ca8c335bd11ee623c1b498
SHA512 c18f02b25cd65843554e1b84f1f0243cabe122735fd1c00f126fd675bb7b67790d11cd954efc247640091cb3101f50c977147c8ebda4f1f210d078036299a32d
TLSH
T1C1A0021551CD44C9D224CF7032D371952B594ED41157821D97A4F0E4AE947C57953640
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58970b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\88eafc7f-f20d-4cf6-acbe-f7c5c353128a\index-dir\the-real-index~RFe58970b.TMP
Size 48B
SHA256 5b70100e68a0acc9f380536a99ffc48b42937ae2c0c9f440e13c28e3c7544ff2
MD5 210c8d10f6c3c0250f29de2930859954
SHA1 da2747b5dfd251728009a4538ec9e1f37ed9dbeb
SHA512 63b1f00adbe2627020c7f82b144473e73fa68c0c68ff83de1598a0dfd94370a63a03ff3c3436e4ae16aee34765996aaa521355f4150b95885fdb0d037ff3274a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d8b22c76-83d5-4ba5-a263-0cc9da1f9e0e\index-dir\the-real-index
Size 72B
SHA256 0c9caa75f13e3caba4f0d01ba47428fd6787ced0317af1ea40c0e03cea529c1f
MD5 0b352d7bb3b7a5c02e01cd74fec61bc2
SHA1 5a26997c61886c545d2ca6df53a65c2b1a2e025e
SHA512 5207a62c78feb4f47c925f30d695f8f736b4c038664ee6b3470a3c7b293191a458ac84522b885b0d51a149f09e2162b0fed09ffeef1c06881b40fa0fd0d04956
TLSH
T1F4A002F041DC6486C41146F5664201652314DC26310187D741A489BDDC5327C8F53048
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 476B
SHA256 e5d315fe35205027174a7918ac87972e93514e78b6969ecd78b1d5f87e861bc6
MD5 d84fb5b030fb8370f6ee7c9da7e9c7f8
SHA1 f7c46f1a71c3dd5a575d7d841136439b2daf6996
SHA512 00f655f18d95cf13feb8d7d8be579155ea0ec612cc75dba8b73ca14459a32627d7855c7503cb3a6af901ad06d29768afaa6bb518a6d901d4645028ef71ab7cca
TLSH
T148F027F37EFB1810FCBBD3DAA47194A801163868C568AC8E015AB16350B63082449C62
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 481B
SHA256 cab3d9143986ae188441f3e19464eda238f7cbd93713d17eacc22da11fc7ca3a
MD5 ba58f65ad70a01073938bbab065a31be
SHA1 afbabb098a4d4b80df6fc0b21dfbded7fa1cd481
SHA512 26035b1981ada331fd7a42fdaa6cd520b406593f5ed806eb626f4b36650ac1bd0e2b95c0f650f62f9dc96d9a0648608d4a59fde66260db314ef55c0bc6116e4d
TLSH
T1C0F05CF37EFB1C11FDBBD3D7A071A4A405157CA8C559ED4E015AB16350B6305254DC72
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 5e074b27b68d9c602954a2654c0849e1d8e71d943557f9a7e3e8818c30988edc
MD5 6583ef4a22f7fa08506390489281f456
SHA1 2fc2def8189bf6e58e0100167c1d2f86fc5e1ad1
SHA512 fe2a25d7a02867a0a75462678c6a86c8d9d328535f573337b8784a030eee59138dabff043908def586e8d82e0a1f2fe21471d00d0ea5f738769239fbe2c771cf
TLSH
T1D0A002128A558145C56343F490E5328D725189985606362AA4FDD554C9612448693214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58a728.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58a728.TMP
Size 72B
SHA256 2b3367fcd151ad2d5bd8c027e50a116195a1c3054b3de50ba90928b2f241b61c
MD5 305ab881dbaaa34ca53ea239ac8bab38
SHA1 a59e6edeedd0ddd561e7c9a66719879f15c7bae4
SHA512 7a7a93a5a7722435b261d99a88cb87049019ee37b8483a2a8676bd87a52b3d52cb226f796624aa1011482ad3ccf1ce3f6be581893fa983c0d93e392b9eed3b41
TLSH
T1AFA00253828E1408C54009FD227732641345D859C20432674491D4DCECD14D059A1909
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 6KB
SHA256 c838dd366fa511046a248558a4fd237e198630392ce96f2f37a1075e8c43c018
MD5 6292ce6b81f43014e6a26e3528d7eb27
SHA1 553e46306e06f29a9a891f59b0174a51227be9f2
SHA512 28f11a18b006cb5f9ba26d26e0dfe5f771e822e2338085b2a5253b3ece8f1c07ad674ed5a8a691019a5531dcb5b9b743ec0f4763b2d70b8b8c1805759e68b53a
SSDEEP 96:KA1eK2AgHWKIAWSi0KDi0+0KjKWG36K0Io:E0lPUzNx
TLSH
T1C0D1075272BA02117C7E3B0893E4976FCE52B1633018E52B7BAC01B58D26E269CFD5DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

00fbe40e-8bdc-473c-bee5-7e5af070f809.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\00fbe40e-8bdc-473c-bee5-7e5af070f809.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 34ccb9ea33469c937f84d9ca98202f2917191e0877cabea5728b44ea36f74d50
MD5 2e478172f6f0d97db28f8329763b3d74
SHA1 76ac7c76de54296b2af9d6dfcf759055850f45bd
SHA512 bd60a0e58015f0d63b77ce36dac7383da128618ab15456cba9c7817e426fd5b5bad13fbbd91a6e985149fe2c1f0a9169b78a806ac4c5e9fd01592ee835be1505
SSDEEP 192:uheLsNnSTiNsubfAatYrmyjmiU1PPN4zX5Obd+j1jzoryiyR+XjTj4Q4q6LjqCG:GUsNnSTrSfAgZpCzX5od+d8yiXXlEL3G
TLSH
T13F521A36A874AC765DE3A295F44B32039EF86067DBC46F94D6EC6B1C04CB29C131AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 21KB
SHA256 38e4821081529a8fe615533c22c1dc1fe3e97d3d93243f7db90725f2a6d18bbc
MD5 5ba2fef1194bc42b33aa4f0ca81af92c
SHA1 0431bf063290c61931a6cf008ebc569f3b0646a4
SHA512 94dbc57dd779440c656ca082fc699548bbb6f835add101dab08d1d5a3b985906d20175044cbd5112151798d8df6a10c714dd551ff130e619d1842fbe5630cfff
SSDEEP 384:0miFiZcI6sN58TUNTUlIlTTrSfAgZpCzX5od+d8yiXXVELxuvzxV+Mhdp6oO:cFQ6wwgfW2O1VEL4184p69
TLSH
T154A25C736858DCBB9DF6A785F85A32038EF85067DAC4EF90D6DCAF1D0097199130AC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9f77d5971b9f794ef75c9e6df846ad6c764f9be0ce2847b5c2cbf60870746ffe
MD5 7b1978e93fa54fa38753d89d9b94c1fd
SHA1 c363183f037c3e3b8c253d602d468e13c746c001
SHA512 8605e721043792285cace560b4d586e91276a355f7c8d552efd32a6f2831e47f32bdbd505025ef6ec02b256a2d37e7642ebb097b2e5a6f769f0353f9c9005136
SSDEEP 192:yON761VWQmiUys1gGX5Obd+j1jzoryiyR//ac3EQU6:yON76WngGX5od+d8yipnQU6
TLSH
T1DA02B736A8686CBB8EE2AE49B84736135FD5106BEA956F84D6EC1F1C00D765C2306837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 8d1e3b655e55077143e78ea525ae9e251c09842ceeb5ee37012557ca4b33ce60
MD5 ab0a9ba70baa8dcc7dc9cdaccf3bd3c3
SHA1 0c13a457e089bf449e261abc3a805ffd8bc8837f
SHA512 210fd7bc5a5ecd20cc3b16b91a0dc1958007bd1cdd05e4a0e95919fdd5b871f4320b8039ee66735aca7039b41552fddd9d8e9901ce9d5167c50fe74d4aa4092d
SSDEEP 384:89ZcIhsNnTTrSfAgZpCzX5od+d8yiXXlELxuvzxV+Mhdp6oO:uhEW2O1lEL4184p69
TLSH
T152826D716868ACB65CE7B245F84732038EF89067D7C89F90D5EC7F2D049A659131AC2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 0c3e9dd2a2f610f666e120a7e27f94fb306961402f437cd2171307ae0ec89e58
MD5 e3aeff82e0f99a27b2c40d0a52394ecd
SHA1 cd414253e109ebbe60327bf6c0db33ac28ee1763
SHA512 effc953e03f50fac60323a94743eef83ce658c5fbd3db7a0df48d606be4678d21a780c2584e1642abd61ceb1575d023de8a8d8b419f63318bb8df134cd67a434
SSDEEP 192:iON661nWQmiUyW1eGX5Obd+j1jzoryiyR+XjTHjJ4q6LU6:iON66oHeGX5od+d8yiXXtELU6
TLSH
T11D12EA32B468BC6B5DE3B555B48731139EE55127EB89AF80D6EC2F2C00DB59C130AD27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

14208a24-9234-444e-8b6d-4a7fe2e64e2f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\14208a24-9234-444e-8b6d-4a7fe2e64e2f.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 21a73d6c6f05072ca893d5ba82efe6d92ec4fbc361d6484dee5bb401ed56ca70
MD5 7259657c9c43a3c1cc8c13813dd7eea4
SHA1 5eb508eb2313c1872af07734b532871f3d0cef67
SHA512 7fb674ebec3e0458197b445953f9dd716e747a7bff4580717ed7a053f9d4d87cb88369e0e765d52abf5a86c2fca2c8f6632826df3a055a88a02017942feb91fa
TLSH
T1B1412D58B6EA1148B3B76F5A5BF7A86E847ABC772F06C55D10120E4E0623A41C4B1B3B
MD5 SHA1 SHA512 TLSH

Submit Download