hxxps://silentnet[.]st

Analysis

user interaction
yes
max time kernel
308s
max time network
307s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/09/2026, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://silentnet.st
Sample260926-ts4fmaxcmc

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1196	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1696934516-3600988056-1840298893-1000\{6701EC26-AB83-4B5A-8DB7-D1041DDC253B}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-1696934516-3600988056-1840298893-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2656	msedge.exe
2656	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe
5100	msedge.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 1744	5100	msedge.exe	87
PID 5100 wrote to memory of 1196	5100	msedge.exe	88
PID 5100 wrote to memory of 4912	5100	msedge.exe	89
PID 5100 wrote to memory of 4912	5100	msedge.exe	89
PID 5100 wrote to memory of 4912	5100	msedge.exe	89
PID 5100 wrote to memory of 4540	5100	msedge.exe	90
PID 5100 wrote to memory of 4540	5100	msedge.exe	90
PID 5100 wrote to memory of 3832	5100	msedge.exe	91
PID 5100 wrote to memory of 1440	5100	msedge.exe	92
PID 5100 wrote to memory of 3832	5100	msedge.exe	91
PID 5100 wrote to memory of 3832	5100	msedge.exe	91
PID 5100 wrote to memory of 1440	5100	msedge.exe	92
PID 5100 wrote to memory of 1440	5100	msedge.exe	92
PID 5100 wrote to memory of 3788	5100	msedge.exe	94
PID 5100 wrote to memory of 3788	5100	msedge.exe	94
PID 5100 wrote to memory of 3788	5100	msedge.exe	94
PID 5100 wrote to memory of 2376	5100	msedge.exe	95
PID 5100 wrote to memory of 2376	5100	msedge.exe	95
PID 5100 wrote to memory of 2376	5100	msedge.exe	95
PID 5100 wrote to memory of 3392	5100	msedge.exe	99
PID 5100 wrote to memory of 3392	5100	msedge.exe	99
PID 5100 wrote to memory of 1188	5100	msedge.exe	100
PID 5100 wrote to memory of 1188	5100	msedge.exe	100
PID 5100 wrote to memory of 4456	5100	msedge.exe	103
PID 5100 wrote to memory of 1420	5100	msedge.exe	105
PID 5100 wrote to memory of 3336	5100	msedge.exe	106
PID 5100 wrote to memory of 1080	5100	msedge.exe	107
PID 5100 wrote to memory of 4224	5100	msedge.exe	115
PID 5100 wrote to memory of 4224	5100	msedge.exe	115
PID 5100 wrote to memory of 2656	5100	msedge.exe	120
PID 5100 wrote to memory of 2256	5100	msedge.exe	122
PID 5100 wrote to memory of 4704	5100	msedge.exe	121
PID 5100 wrote to memory of 2256	5100	msedge.exe	122
PID 5100 wrote to memory of 4704	5100	msedge.exe	121
PID 5100 wrote to memory of 3192	5100	msedge.exe	123
PID 5100 wrote to memory of 3192	5100	msedge.exe	123
PID 5100 wrote to memory of 2536	5100	msedge.exe	127
PID 5100 wrote to memory of 2536	5100	msedge.exe	127
PID 5100 wrote to memory of 1864	5100	msedge.exe	128
PID 5100 wrote to memory of 1864	5100	msedge.exe	128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://silentnet.st
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x248,0x7ff9bd0cc188,0x7ff9bd0cc194,0x7ff9bd0cc1a0
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2000,i,6091262333958366788,11189059838194650944,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,16149929380189612421,15272692751694842321,262144 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2464,i,2899820458194536795,11791636449662346388,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:8
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,9443722095195933506,10214508499228909827,2097152 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3500,i,12276779712931969747,12992877982401729824,2097152 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,3536625677003544367,3059965441229462719,2097152 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,13994887601435126123,16118529954727230113,2097152 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:2
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,13622691920552391897,14433474140467445864,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:8
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3604,i,2765886695313518193,7514778289189993752,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5176 /prefetch:8
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,8932299297585622219,3146908824467195789,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4540,i,8932299297585622219,3146908824467195789,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4480,i,2455889648388888692,17101759517521181092,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=6152 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3588,i,12169252022299261595,3527970783448023953,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,11570866957988338238,11265641726330491612,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,10736509206958788320,7629552507172854079,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4540,i,17883790062653907684,14629814105324805943,262144 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,12440234276731544639,10965638596405320359,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6324,i,2391466354587483172,5102743119667458305,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,11696318584128861073,5442024622874181476,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,1131973989201459105,16982762901246832954,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=3320 /prefetch:8
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3388,i,6609156740489274321,865462856578078408,524288 --field-trial-handle=2252,i,12872079581311030123,8924293167452306906,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
  2⤵
  PID:1864

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 6fa1b02b96b249c932f11a4c4f1eb52f042c98bf33d02c325fd422f437c15214
MD5 dab629217416704f76a79a88ad8104e7
SHA1 7976f0ba766ba9c277031e8bb5fb53af02fda376
SHA512 08718b5a2794b585eb95d2cba2f1738b354033d24a471097fdf4f83b9cfe6ba984c2b3c4dae177b4e601dc47eb8b72225f8677ed39d32449fb3f874f22b26d8d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7+:fwUQC5VwBIiElEd2K57P7+
TLSH
T1C1B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 3a9e2856f7b8bdcf4e651903050a9f78a4dcadbc91b2bacca38c04067256642f
MD5 8eed843072749c683b08c3e5dbce9bd8
SHA1 87464a0b34e45a134ed6f01b613378b3b1c952ad
SHA512 ce7dc7d95703c8a1e763fcb3eae4091d89a746632583bc1fc73a8c189a11f08c6f50e2ee328053aab1da82c11d6f5f81942259c5654861d13f267c34e76feb7c
TLSH
T199D02B6CBE989EA0E40210340231910431CBC8178442200648B1065708003C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 221e3dccb30d516b1b3c2d51c604a308dfba3aa3dbe8e11c2d09e185e21df465
MD5 7c97d945db36fde78f76660ee3165916
SHA1 fa851b1197f5a5f6ba4d935baba30b0465e8ad12
SHA512 73a256bc0b95a0662925ed2ac0e1668d7a760da5001e2b32fe139724419020254e080420b21ccad1896c60c44ca2663c2a3d2eccb8cb4180b6b0ad628c68d676
TLSH
T14FD02B6C7ED89EA0E80210340230910431CBC8178442210748B1065708013C303448B0
MD5 SHA1 SHA512 TLSH

Submit Download

03a326cc-9e5d-451a-a1df-3e5ce2f3cd6f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\03a326cc-9e5d-451a-a1df-3e5ce2f3cd6f.tmp
Size 9KB
SHA256 74fb4a001bfa51371fc4a4eb056902af10da42d149909116758a64ce86a8b2d0
MD5 3b878c531834fe872fe271cbdacaba02
SHA1 569ba61216eeb4efed9462fc3b4a4790ace20a43
SHA512 4c79f22a52a14a19b75ce1f3035ff13a76794c5e06db619685018abd8b53e35dfd9f6033e2c7002214b874670ddd6f117bc2d9c51859ddb34470e9a4d665d94a
SSDEEP 192:sxZmIRoW3G/fXLsZBFEdp22kHW6+WN5/SJXY3fw0Ig5cJ:sxZjJW/f7sZIpkHb5QXWa
TLSH
T12522C7526E38683B9CCBE219BB15BF13E6F94072A1D51E98E6FC961C04E76DD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 87937ff1ab1e9d2d2c717626327c3368ec0d979a7f18fb0e28ab5fac5489e942
MD5 3cfd90a4958294c7a0ca3dca7f9c4f60
SHA1 39abf365f5f84a317bc01c1a368d681049ed5b70
SHA512 740c595efcba04378b19d0c8f35e0654060a9b35c64d9c07b776e5921f0f32b9676c66f867ceb355876d3c090a6492ea97563ee5e936c3163d7304d7221a45aa
TLSH
T1DDE048DE49CEC26DE51474874368674CC2903B5E9BCC6E6927049454B241944E695A61
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ab31a46812edfa4f8d763b51bfa9128ea86fb0765b570cb69b0c021cbd0118f9
MD5 4b6d2a7138ccd7412f2f43f0786d427a
SHA1 400fd41ad09890f2c2502093a3f6744b0ed98b8e
SHA512 aed86a9121dcdd1bc8c42ec2a814cf5a0c6da34eec4576afa942a95cd1f40a9ac21c624d30942cfd59f5a77adbfe2eeb739d40eb90548267e0c05fb964435202
TLSH
T1156160C164A250BED79803B0BDED2CA7B53C5AB966A37D00C59BE43DBB4A3B512072C4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58cf9f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58cf9f.TMP
Size 3KB
SHA256 c3736e33c26abe9c003d1952ffd688d4268f32d01ed1e74551ba306cf91cdcaf
MD5 5ad46d2d5c171b0cd7ea27690226839a
SHA1 fe7cadb5db47314ed6b0b19a411f4e5f0d52b123
SHA512 07f3be131fa167d3159b7b22fc6063ade44a52841c3fa5375afe4e373a9386ff835ffd30c11fb45939842c63f9fea8889065d6464fa9e17b5f3e02ad21360575
TLSH
T1D26183C1649240BDD79803B0BDED2CEBB53C5AB966A37D10C49BD43DBB4A3B412072C4
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 bd4251abe8e6052a0fda77c08788545e307450f41d4e24fc68ed1d426d5d7921
MD5 05c75ba7089b93d697f38aea39645600
SHA1 5d6a927d142bd23aaa2bbd7615bbffad4b0ebe8d
SHA512 092245156765334dc7a27cb9f28f70bff36fd80d9363badd5a29c97527bc026a1ec619048356a090fcbbde40272a85b40641333d5d11c881de510bf478d04de0
TLSH
T10A41BFF383E4866ECD1156F06A14AE2BCE5D0911432C3C26C9D4BF6793F2470E101A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 0e132db0f83bd7438bdd649631c1e4bb2f5a3c7ef39c84f709cdffff4f1f014f
MD5 36b51de777d06414f375a3b6727eb861
SHA1 4b4620decae8d9b351148e6884bc4b539a1e62d2
SHA512 329a96499beda2b36a230bf3871b39716122b0e7de191e275f9edb531f8e9a3607a65e01af3750062b1c74c4b312fbd2206fedc92acd1ebec4e65ac59c758c0a
SSDEEP 192:sxZmIRBW3G/fXLsGBFEdp22kHW6+WN5/LM/Y3Sw0IgrJ:sxZj2W/f7sGIpkHb5g/L9
TLSH
T11222B7526E38A93B9CC7E219BB25BF13E6F9403291D51E58E6FC961C04E76DD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 186329f105d443eef77c27b801511405a40a4986f9d1a4c6038a8dfda8259fda
MD5 ff5e74bce9a41159a8a596a3fcadd607
SHA1 bea3462f452f57870f0df9d11c56107b08a0dddc
SHA512 06f4a77102f4fe39435ee0776cb128f8bc9980e39a08ca067d6c0e04d27645f10af13a27a1aa80e3ed2b9ad16e97fb6a6a0d901720b8d56c82dc5bce9217c885
SSDEEP 192:sxZmIRoW3G/fXLsoMBFEdp22kHW6+WN5/FmRZZY3FVw0Ig5cJ:sxZjJW/f7soMIpkHb592ZZO5a
TLSH
T1BD22C6526E38683B9CCBE219BB15BF13E6F94072A1951E98E7FC961C04E77CD120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 eaec32bf72683c5d18e2c6c868d99712666a22ea36235833513c570de1e86016
MD5 3fe260728e76ee346b06dc356a18e39a
SHA1 eec84b617f92c5d94fd50cdf01dcd8c541717098
SHA512 85c1d221c6dbee2d37fc39e22fc1dce0cd90bd8b6fec915362c69bc67fcbb17d43b82915405ac7234aecae5fae39d95f37cd542870f518662eee22c257b1ae0b
SSDEEP 192:sxZmIRoW3G/fXLsoMBFEdp02kHW6+WN5/x+FY3ww0Ig56J:sxZjJW/f7soMILkHb54FBw
TLSH
T1DF22C8566E28A93B9CC7E21DBB15BF53E6F9407292911E48EAFC961C04E77CD120780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fa62ec9752da3cb9fe3a5d60d51c24b4f65734c958144c42d1b1d697ce253d1c
MD5 d4ed7e041cfd49a0603b190d10a01686
SHA1 de30ed727ffdf250450fd5f8d01c17cf11e84ef2
SHA512 0287a81643baf87fecae8efbd0dc6907fcff8bbd605d712d0c8c7156cda38e001c15e997adc47832b8ad3b855435c6df19959aa6cdc3b1feda55b39c3e3d1b95
SSDEEP 192:sxZmIRoW3G/fXLsoMBFIdp02kHW6+WN5/1yXY3MR0Ig5QJ:sxZjJW/f7soMULkHb5YXEK
TLSH
T13432E9126E38A97B9CC7E21DBB15BF13E6F9407251911E48E6FC961C04E77CE120780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 8321c65b797bd80a75d629f6927f4b4fce800f0ef972c442a19145555fc6e0f5
MD5 cb6b0aa3218cf494209f93068384cf4c
SHA1 a9b2eef033d3dfba157a2b8e2243268539e64dc8
SHA512 00e5374549e61cdc7cec296f964d12673e638c5cfafe90e8fcd2641550300ff08c44e432fccb0a7ef342a2de3d1887622b137def6a3a923a5899ee15843f2667
SSDEEP 768:3B30AbSWvS2l98F1+UoAYDCx9Tuqh0VfUC9xbog/OVGmLlLJ721rolZMk:3B30AbSWvS2l9u1jaLmLZ12OH
TLSH
T18FC2DA3B640CCA7E4FC05A9DDC6AAF9B6F9C02C796648D4047FA984C02C77EA51274DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
Size 1KB
SHA256 32598f93a9016bc5be1d2044eef5378b31c6db47d456dde8d93ea0bb9589685b
MD5 31a3e6b235cff5330a24f618f1512f5c
SHA1 f7ec605f30226a488f99e8ab7d607058cd2e4734
SHA512 a4676e5c1128417b8aefe0c69b6fa468e378df4f143431116e9f21e7daf0e42cc11d9f88144ee7dd60721d16927040f10ef3925e638bfebb398f3352659e66d1
TLSH
T1E43196878E425DA7ED9451B5203D24457335D1DC13487F0F52FDE136FC93700AD4A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d0840.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index~RFe5d0840.TMP
Size 1KB
SHA256 16eef1ce337019cc083ff1dd0b8391cbc2a1d75bfa0999042c8738cb5ebc8862
MD5 74a9e7057a76a827571490f7d171ccf8
SHA1 58d85fc3760a7f2519bb7f58ade8cf1f421e99a7
SHA512 12cb0a8049ebfe55c086664b035d62f6950cd86d444e5a29baf6f78ae94ecc911b3df26f4631574377ed6089f429cf37f942e1dbeede4e467446754f91fdb4c9
TLSH
T17331755745521F67FC8022B3086D68973336D58813443B0FA3EAE139ECC1B84AD8A9E4
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 3KB
SHA256 d66278e12420231b0eddf9072619ed4351d245279c7f7675d5fbf875130b2162
MD5 2a89691098fa2a90bf6662f0a28b2587
SHA1 8a8e692defa752fca8ca767606837f5b1b8e450c
SHA512 bd59469cda703d88232717b78b88e475fc230dfde72619d10da2ba7ad3681c257a5efd110b6b448c6bf3c7dbfb4f64bd426cb083b4b20263fe79fe164faa2480
TLSH
T12D81031130B7560079BD398C9AA48A6F52813572705AE93BFF7D00B58E2EE194CFE8DD
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 26250e0369aef4f75ab0c3428c4fd8323b3575bc3e3b410efe110b47de11a2f2
MD5 7df9ff330c09c3213cee12b1620808d2
SHA1 1333fdc8b8db4e93c982c3b64d6363a2cdd992b7
SHA512 d97cae11ea5b0fb1ea24b31180048696e4a171e917e01f00a2dd63e66c8118ce5fd4570073f8029d4bfa133cfce678b3dfae7e090d38da547af420ba81746397
SSDEEP 48:K06lI064I5bkjUISs5K9Q1K5xipYb8IKyLWRsQO00tbYvAISotK9M1OtxG9Yn4U3:KwhyKSQSmdiK2oBCIKHKmy
TLSH
T11691151130B7560079BD398886A48B6F52823562705AE93BFF7D10A59E2EE080CFE8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8a1b7cbd-2484-44ce-8db3-d67187cc9aba.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8a1b7cbd-2484-44ce-8db3-d67187cc9aba.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 12438f41e7ad9ca93c9e843f570e21a729182069f304ebbed8d4915de047739d
MD5 a22dc3fe1c052c7ba80d70e22d2f930b
SHA1 dc16bcde7ef4dfc958f70898e2e02441f4ecee06
SHA512 1c54954b3de53b0e4c8da7e4c56155a5a8c9501ac66b5e5de2b6ab6cb64063f72e915439610c1d81332b2c0802412e4e05ed9f8ea87cdec63c278aec6d44870a
SSDEEP 192:HLsNXhQVbmZ8YJmwpuQ5KQmiU1s6gB49iX5FvY+eM1iIRqnsAetw:rsNXhIqNpu5Hgu9iX5FA+eMVuES
TLSH
T122425D36B8789C3B9CE26651F00B36139FB891A7DB882F94D9ED6B1C01DB6994307D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 9a6dfae3f3f3ecfa7933cd5fd180d6834a9e350436211fd27d00e3e208207147
MD5 1ce2070a6d45e2948234a97188baa54f
SHA1 1561e90992119e70e04f76f7495a19a38916e2a4
SHA512 13101606ead9895a4ff3a726cb0b7d893b8ea635843734872351c13ff6df77879cf4835b8905d80a70097d20d6b516881f1c3831b29cf57f4c942f42ed7ef77a
SSDEEP 192:LONe6AmwprQmiUypD6siX5FvY+9JiVXU6:LONe6ipdO6siX5FA+qlU6
TLSH
T1EE020A35AD786C7B8DF3AE15B58B3A239FA9116BD6942F84D9E81B1C01D768C1307832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 e2f373df9961ad0c0ea0dbe8baf85cf924e4638ff2efbe51f778193686b9f0cd
MD5 947c676b928a0c6b1ca975c22b5dba1d
SHA1 7864c86a40169e687a9c4da2e480624efadcfabf
SHA512 f0350221177f5f1509bc0e881ed3203bc26ea2f086e2e49205f71933a671bf2352af7c31eb4e7b54a5ef517d1a1e71a5366ca5946ebddcba62776fbb86451d32
SSDEEP 192:uQALsNXR3QVbmZ8YJmwpuQ5KQmiU1s6gB49iX5FvY+eM1iIRqnsAetw:LWsNXR3IqNpu5Hgu9iX5FA+eMVuES
TLSH
T1AE425D36A8789C3B9CE26651F00B36139FF49197DB882F94D9ED6B1D05CB698430BD13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 20KB
SHA256 7f1d48ab45da3d7cca63b518093b94342044c2a4f219780c9ca6b3802be37ac3
MD5 0976f09abbda6391fe01bf48e5840c95
SHA1 8c769d9d54d82017b29f05a09b03264f18292403
SHA512 f3b3382a6af35bb7812a59f8201059c6340572fd0f28f7c8bb456d3d9fd043ba3d44f01de7232882d5b9f952db5ad1996c76b531be128581fa2e1ee5eaeaf5aa
SSDEEP 384:jMiFiZcIozsNp8TUNTUlIlR3IqNpu5Hgu9iX5FA+eMdutgOIwZOy5toi:rFQUkwgTN4gaaE+duXsiN
TLSH
T10DA27C3398A8897FADFA9B51F54B32038FB581A7C695AB90E6DD5B1D01D71D8030BC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 c146381f30c7194db2f040fa1b3439f295b6f17f9b016d925506eacbf2087da2
MD5 e998dc3ddf7de6040642c2dd83b1a628
SHA1 f6a3c19b9eee22aeff746720d93486b2a95d2255
SHA512 2339df9d6243ead05434bd8762003ff81c04843fa93f2b54bf2b815bdcb67e841a32db8f7720f325f375082ebd15f898c508a3dda6dc099b14b30403ed82457d
SSDEEP 192:LONi6AmwpuQmiUyHDgKsiX5FvY+eMDlRRqnU6:LONi6ipqEgKsiX5FA+eM3uU6
TLSH
T130123C36A878AC3F5DD2A951F04735139FA5426BDB887F94D8DC2B2C06DF698530B823
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f8565954-ef85-41fa-b5c5-b2492a7622df.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f8565954-ef85-41fa-b5c5-b2492a7622df.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 ee5f7dd849b4f19c27ec67ded960fcea40aa9405a66892156fe14c035ccd3a87
MD5 0b4e189c323623c0958c1a7aa2769c5b
SHA1 11411dc93b77acab0377951a3fa37b2bd57447e9
SHA512 63f9e4aa9afafb06cf8a625996e209e3b5e6347bbd0e1bba99a3afaff4a9945b2aabb69dc6ade0042a2a450f4b7c505f3fead1f6f483ba8f3e9003b5b15c1614
TLSH
T11A412758B6F90148B3B76E5AABF6686E487FB9632F06D55E00110E4F0623B41C861B37
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download