hxxps://www[.]giganoob[.]com/

Analysis

user interaction
yes
max time kernel
899s
max time network
903s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 22:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://www.giganoob.com/
Sample261102-2eb38axtdt

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3968	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-747854149-4118156852-591593384-1000\{49710F03-600A-49E2-BB70-7F4ED8492853}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-747854149-4118156852-591593384-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4900	msedge.exe
4900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 60 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 4816	4936	msedge.exe	85
PID 4936 wrote to memory of 3968	4936	msedge.exe	86
PID 4936 wrote to memory of 2320	4936	msedge.exe	87
PID 4936 wrote to memory of 2320	4936	msedge.exe	87
PID 4936 wrote to memory of 2320	4936	msedge.exe	87
PID 4936 wrote to memory of 4212	4936	msedge.exe	88
PID 4936 wrote to memory of 4212	4936	msedge.exe	88
PID 4936 wrote to memory of 1332	4936	msedge.exe	89
PID 4936 wrote to memory of 4540	4936	msedge.exe	90
PID 4936 wrote to memory of 1332	4936	msedge.exe	89
PID 4936 wrote to memory of 1332	4936	msedge.exe	89
PID 4936 wrote to memory of 4540	4936	msedge.exe	90
PID 4936 wrote to memory of 4540	4936	msedge.exe	90
PID 4936 wrote to memory of 2504	4936	msedge.exe	92
PID 4936 wrote to memory of 2504	4936	msedge.exe	92
PID 4936 wrote to memory of 2504	4936	msedge.exe	92
PID 4936 wrote to memory of 2400	4936	msedge.exe	93
PID 4936 wrote to memory of 2400	4936	msedge.exe	93
PID 4936 wrote to memory of 2400	4936	msedge.exe	93
PID 4936 wrote to memory of 2760	4936	msedge.exe	97
PID 4936 wrote to memory of 2760	4936	msedge.exe	97
PID 4936 wrote to memory of 2760	4936	msedge.exe	97
PID 4936 wrote to memory of 4216	4936	msedge.exe	98
PID 4936 wrote to memory of 4216	4936	msedge.exe	98
PID 4936 wrote to memory of 4216	4936	msedge.exe	98
PID 4936 wrote to memory of 3492	4936	msedge.exe	99
PID 4936 wrote to memory of 4320	4936	msedge.exe	100
PID 4936 wrote to memory of 3492	4936	msedge.exe	99
PID 4936 wrote to memory of 4320	4936	msedge.exe	100
PID 4936 wrote to memory of 400	4936	msedge.exe	103
PID 4936 wrote to memory of 2276	4936	msedge.exe	111
PID 4936 wrote to memory of 2276	4936	msedge.exe	111
PID 4936 wrote to memory of 2276	4936	msedge.exe	111
PID 4936 wrote to memory of 2248	4936	msedge.exe	112
PID 4936 wrote to memory of 2248	4936	msedge.exe	112
PID 4936 wrote to memory of 2248	4936	msedge.exe	112
PID 4936 wrote to memory of 3008	4936	msedge.exe	113
PID 4936 wrote to memory of 3008	4936	msedge.exe	113
PID 4936 wrote to memory of 3356	4936	msedge.exe	115
PID 4936 wrote to memory of 2516	4936	msedge.exe	116
PID 4936 wrote to memory of 1664	4936	msedge.exe	117
PID 4936 wrote to memory of 2648	4936	msedge.exe	119
PID 4936 wrote to memory of 2648	4936	msedge.exe	119
PID 4936 wrote to memory of 1664	4936	msedge.exe	120
PID 4936 wrote to memory of 1664	4936	msedge.exe	120
PID 4936 wrote to memory of 1896	4936	msedge.exe	121
PID 4936 wrote to memory of 1896	4936	msedge.exe	121
PID 4936 wrote to memory of 4900	4936	msedge.exe	122
PID 4936 wrote to memory of 1816	4936	msedge.exe	123
PID 4936 wrote to memory of 844	4936	msedge.exe	124
PID 4936 wrote to memory of 844	4936	msedge.exe	124
PID 4936 wrote to memory of 1816	4936	msedge.exe	123
PID 4936 wrote to memory of 64	4936	msedge.exe	125
PID 4936 wrote to memory of 64	4936	msedge.exe	125
PID 4936 wrote to memory of 4380	4936	msedge.exe	128
PID 4936 wrote to memory of 4380	4936	msedge.exe	128
PID 4936 wrote to memory of 1592	4936	msedge.exe	129
PID 4936 wrote to memory of 1592	4936	msedge.exe	129
PID 4936 wrote to memory of 4920	4936	msedge.exe	132
PID 4936 wrote to memory of 4920	4936	msedge.exe	132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.giganoob.com/
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ff932c9c188,0x7ff932c9c194,0x7ff932c9c1a0
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1972,i,14868719671358417326,18309109427161233312,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,14426750314749433611,16850551829535945692,262144 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,12835413251367586766,9240256924433524621,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=2592 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3444,i,7032051018640178823,13404562983922810282,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3452,i,16717332956517904283,388474741892267167,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,17826327622411020699,10219480019789068865,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,10415388941955028719,2629407944515841830,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:2
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5088,i,7164656398909428297,4059055385787294240,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5108,i,4263439777143925893,4083443641056599893,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,16972002099830790009,5135898910405226639,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,14967181764249627466,5113440566487673307,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,2133216538731976352,10736976283063536963,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,2133216538731976352,10736976283063536963,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4268,i,18207373368143514257,16472314320586702060,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=3624,i,11629519754507241904,5926769452054763651,2097152 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4500,i,16319182080333528481,8447057449149299072,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,14157069409140928030,922671547183674838,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,858024578550191660,2632267523590079643,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4516,i,10887174553229477037,12078895251268402882,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4276,i,15925193461615826106,13558406539840637113,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6468,i,732751555853605167,16823434831219358071,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:8
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5752,i,6594488911507050993,17442888591934775441,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6256,i,17637209289637982267,18373472379293196915,262144 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5824,i,13523654517102822712,17542086658044332176,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4964,i,4061789908656954941,13954477067244123763,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:8
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6832,i,4572736471058190998,14159548054720092833,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3752,i,10102013570425683795,2447892422411820604,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,13152404801784228322,8788965695676674457,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:8
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5812,i,12548468356147162693,606223622070307001,524288 --field-trial-handle=2268,i,4695956298829751606,15164809559731062357,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:4920

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:400

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

2f0111b7-0a15-4b76-bf65-a85f3636c8ff.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2f0111b7-0a15-4b76-bf65-a85f3636c8ff.tmp
Size 18KB
SHA256 21e2b410d75da7a8d5de745a83f2aca9f8981a2679fe8160ebee0c18f1b19d34
MD5 e74c9bf245a957baf92c835bb0169de4
SHA1 8bd8a748a16caca7b62102c59e413487531444fa
SHA512 f949ad57859c499987d02d30904ee388effb3a74317670633fbc0ee6914a18da5cfc6566189dd27a4c1c89631a3cbb7b26b2d40c429736ad96cebf2cb500023c
SSDEEP 384:+QkUSv0sNsPwdl05wa9uBGYX5E0S+YpDYbvaTZcqIIl9:u0j7pCGYu0SVp0bvaTZcqLP
TLSH
T1B0827D32987A6C3B4DE3A651F54F39038FB49227DAC42F94D9DD572C01DE28C235B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

38e4d48f-50db-4ecf-b5a3-f10ec0b307dd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\38e4d48f-50db-4ecf-b5a3-f10ec0b307dd.tmp
Size 8KB
SHA256 bf3a7510b8e4b13ba1cc0550cf39595a13fbee9126593111d421d5ebdb7b9287
MD5 b34afd819405834b6ce06557f85f7ec9
SHA1 bcbec5f0a595f75829d4e77d945bf35932b35053
SHA512 c1c1fffca8a1963bf56884543f7edecdf1e29d1237e2f6d0b08ff11b7efb1319fc6c8ee188673cbdd0a83d64553b01c1f5cdc1238bb041d78eddeb8e70c9b5af
SSDEEP 192:LJONc6DphmqQmiUy0Mq8wGYX59ezVCNY+Yjkk7vr/U6:lONc619ARwGYX5E0S+YbjU6
TLSH
T14802E935E879BC7B8DE36E45B58B2B239FD4112BAA942F84D6E81E1C01D768C1307837
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4edc384b-9dd6-49c0-aa05-e99c7213713e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4edc384b-9dd6-49c0-aa05-e99c7213713e.tmp
Size 18KB
SHA256 6f2ffa83f44ff8c371f7a6c34499159d6b7f464af991da3a13a3e20d33421a64
MD5 0f1772eb66143c07fffb3b6a54d1f2a2
SHA1 e059e6bb6d31e28d16005339f9b32bcb9d8cce5b
SHA512 0b20fb6f2c8fee1a1c700748f40e9d4a1aa4a313fbbabff19043ceaca927dc1deabb0ded9f011ee10c9fee4ca3ac1e7c7a1b75a8637bfc9def04b936e7b4e9a5
SSDEEP 384:EQkUSv0sNsQwdl05w99P2BGYX5E0S+YpDqbvaTZcqIIl9:00c7WpwGYu0SVpObvaTZcqLP
TLSH
T162827D72987AAC3B4DE3A651F54F3903CFB49227DAC42F94D9DD572C01DA28C234B91A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

64638ad1-ea33-4241-93c7-b59014299d7e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\64638ad1-ea33-4241-93c7-b59014299d7e.tmp
Size 21KB
SHA256 95e388462ebab37b89d50e6b49a74f1699cf2211d017fecc409edd865d65e90b
MD5 434005eb4fbbf5b582458d6086fcc862
SHA1 29e8f1f1c73d6edbf058b67f39a20562e77eca4c
SHA512 6e128e09cf3e613d060c49710848fe002330f819f0939b08cccb7cf2101f0fc549677ebc1fe82c14c2af3fee73597474332b1b7797927cf101021f9fb4dc27fd
SSDEEP 384:ziFzQkUSv6zsNk8TUNTUlIlQwdl05w99P2BGYX5E0S+YpDybvaTZcqIIl9:eFdSVwgC7WpwGYu0SVpubvaTZcqLP
TLSH
T1CEA26B7388A99C3B9EE69A50F54E3603CFF05167CAC46B94EADC592C01DB1CC234BD16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 a62a1faeaaa56a5f5375b4d4921e6b263c0bc10a5ecc1f991894c66c32a88aef
MD5 64fcd85513a139bcf5844ab49aea8206
SHA1 3c834eccb77da48c4abac17c440971305fd9b653
SHA512 cd1b39ff43d56158fbb01c5408a5bf247d5bd82279b205a914ab4cdccfece77a5399e430bb26db6f7d10e70dc3503c3bf37c5de59e23cb8f62d6337066c4114f
TLSH
T15DD02232EBF00E82C00B0032082282880F08C03C08003222A23C20AE3A80CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d1cc89f8f1c9f75d127814445edc4d6d9314209d3b11e5a2b4cc826747683f30
MD5 3bc9cc32c2de3150dc7916bb61984962
SHA1 d75ba9bc7ad74cb95dcb4ec6de6e6b18f5813a04
SHA512 fd090e624e91a98337689ed57390fc5813fab21acd3af426c9de6566ea4d92a7875c4f92a1b64d547eaf9ce40cad3d8a85472a30cf521aea6198cf74b69805ac
TLSH
T12ED02232ABF00E82C80B0032082082880F08C03C0800B323A23C20AE2A82CEC2E23000
MD5 SHA1 SHA512 TLSH

Submit Download

0e366767-43f2-410c-a2e4-8eb6bfdf288f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0e366767-43f2-410c-a2e4-8eb6bfdf288f.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b125b62-ba3c-4aa0-a397-2476d6a5fd14.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b125b62-ba3c-4aa0-a397-2476d6a5fd14.tmp
Size 11KB
SHA256 aaff261e1c776c9c863a8524a5f8a5faeae13690e0ffdcef22f7eb750d17e059
MD5 ddfc5d3ca6c21ea3714888609167bd42
SHA1 091b17ffe18642bd07bc8f0a9779265a97ba6da2
SHA512 87d13aa5e67b20a0a4ea569b2a4548f391f822ce3c3821a0c611a24fedd6080c7cfca473d6a54b5d94e99e7f1469ce6f661ec84a6972e225c6fa82146aff74f3
SSDEEP 192:sxZ7R6nI/flsqjbXIdpzt/l4zHW6+WNKOlZYg7FPyIg5XJ:sxZ7+I/flsu46HbRZuf
TLSH
T13F32D7626E35697B8CC6E20DBA14BF53E6F5507291D10E58AAFCC61C04F7ADD224780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31f73128-6830-47d2-ba22-83589f781427.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31f73128-6830-47d2-ba22-83589f781427.tmp
Size 27KB
SHA256 d3d342f8d9095596a51d92afcf7ac5348bd00bf33aea4557981b9d42ffb1fcf6
MD5 a5eb9db5a9bc44323cffbd82e7e22635
SHA1 23f2fecbe25c0401e51212ba5d257a3d65706ffb
SHA512 4d1fdaeeeee347bc446aa5c3254db9870487aff229c765cd66bdfe508bd5d205ca1e0a8e8c8c4efc800be9c4098f18ea53dd10290eb7fa44849307fc371c03a7
SSDEEP 768:SXichfPWvPZpl8F1+UoAYDCx9Tuqh0VfUC9xbog/OVu+LlEKXzprojUZ:SXichfPWvPZplu1jan+LKgzC4Z
TLSH
T1B5C2FA3B640CCB7E4FC01E5DDD5A6F9A7E9802C7A6588D4087FA984C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

537649a9-d906-4de4-bdd1-651917484bb9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\537649a9-d906-4de4-bdd1-651917484bb9.tmp
Size 10KB
SHA256 0d729ef618631bdcbe1ca0fe009d56217b4152bac50cd85bbf07af340398a36b
MD5 9ec578133a906401547b8ada1709e23e
SHA1 00b58e5e2be5b516f69dcde8f8300f2a14485607
SHA512 7922e943eb7d608ae0980414fa84a19f5315eeb708d8138449d99ca3e839293b523e98732a3286d8a344a32f86386c4745b971c815a72efb821a79f3657a61fa
SSDEEP 192:sxZ7R6WI/fls3bMIdpzDWHW6+WNKQJ/YgFmPyIgrJ:sxZ7rI/flsLVGHbr/99
TLSH
T19622C7626E35A93B8CC6D20DBB15BF53D6F9507291D40E48AAFC8A1C04E7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7785ed6b-7413-4a02-b4c4-6b06a8dfb372.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7785ed6b-7413-4a02-b4c4-6b06a8dfb372.tmp
Size 25KB
SHA256 e8af3ec97ec3c7afb5e63b9f83c652ab9aace0f625aaaf3a27a9f1d8e010be8f
MD5 6ceba6e409fa08e80017b664fe95dae7
SHA1 970dea92302179483c54cb150ff47e231375003e
SHA512 0ea7dbaae49746902bb5573a0e409dccf0ee3322b837b2e085ac111c8751899dc7f1a6a21194e5bc582ebae1576e482c4b5aa235e089982d86437c45e43a6ebc
SSDEEP 384:sxZ7+I/flsz66s8qMpRiYnazAW8pZS15posJWeT+l46HbRZN8f:sD+I/fA4Mnc7WeT+lnHbnN2
TLSH
T1CAC2E6119924C87B9EC35D18653C7E33DAEC506212C5CEDE1AECCA1C01AD5FDAB47857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

78a80c56-50d7-46fa-b41a-246a96fb3ce1.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\78a80c56-50d7-46fa-b41a-246a96fb3ce1.tmp
Size 10KB
SHA256 1373f6aae054ea2d90d3d7f67f2b5ea450e72f8854560f696364f6af2d63130d
MD5 36613ccc2fbdfd5e976ba73a277d5e50
SHA1 7197f49c25be799ab34dc2254400078d72b84d45
SHA512 1f58ab8b64d49598ac1838479b6b1d67acabb7accd2fec1fed491b4bf143d9f023b7418d6869598fa8e97760602e96aeb78d43f6f03f25ced255c2ec295a5d2c
SSDEEP 192:sxZ7R6WI/flsqBbMIdpzDWHW6+WNKErXYgpmPyIg59J:sxZ7rI/flsUVGHbFXhJ
TLSH
T10022C7626F39A97B8CC6D20DBB54BF53D6F9507291D50E48AAFC861C04F6ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 331B
SHA256 11b802d1ad0330fc4881d3a12f0608f2c9433f959aa185f1ff3ae86442dcedf0
MD5 cccd8417dce531a8b1da24d262c3cb86
SHA1 5e10589cccfe5f7be5a243e8995921fa5f9d6d27
SHA512 ad002e546bc535b1feabac12e964f442b17501a0842919f0f267134c0458e1999abe31b2e7d4e51a954617c8f0cec2315b8eba4e2b865982447ab01f7cbaf1cd
TLSH
T197E0869945EAC33FB248648B12BCA34D82A0361BF7C47D4E2749C4CAB142594A6EB6B4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 4ed473d74fdb383be4498d9fc3d73472abab629f06baa3138bbb6d7276cc1e16
MD5 2f086fd4ac3618625adffd539a84de84
SHA1 9dff68482a6d38faa63193cab95dcad709c214ca
SHA512 304f3af798ed736bbe4d2a8b42d465c514f9973a8a8198eece0347d2b4c294da96b012dec9ea5e01537f68e8b902dd39c7fc01761ff0aeb851388b7869d84ffb
TLSH
T122E0D88A04E8C31DE2C4B44F61A8870CD281361FE7C4798D2700C48A714519563DE570
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 d28526703976e9200b872deeab88a3de5ce464777f30663f81ba48549b165690
MD5 110fbc058b8e94fadc295c2773ee5b65
SHA1 c8ad3404d00641d72e81f1b94d57818ad74dec72
SHA512 9eee9921cac3edb0fcaa0d402e0f12b8f9eaa92ce62ebd8ffa66c0b7a3d30133044ae7fabf4c80b4eeb4e2a3d5520541dd3561b257f4a3d2658f54f823e809da
TLSH
T101E0208948DCC31DF184689B1194830CC2D0361BE3C0B94D1B10C58D7441194E2D7D71
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 6f378d78d66de5dcf40b169217a7c3dedcc8621efeb63bf25fa5137a373be4aa
MD5 1f6344d29132c8ed76df9588a10ef29d
SHA1 65bc77e7001cffe719c8c74fe8416c100b0ae2e5
SHA512 272bfeb44c8f27a01095e724f0873aad999784d49484f0f5f37e164e8228e4ce8857d978c63909791e32dfbf41e6add7fc4ccf3447dfe4c83479bb6c2c7580b5
TLSH
T113E0489915E9C35EA148A58B11E8934CC291361FA7C4AF4D2704C84E71415C46AD9974
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 28c731b374e83c44388d32aa69390999ed73f5b03dede37f8c8eace0eeae22b0
MD5 0a9d1e16d8e732a038992837caf94452
SHA1 e581fe044d4d251951e6a23b6079b09788272cce
SHA512 8b1eaf598052fe96761401f661e6c3de969ea18ce25e7d465a65b50ea30fb4b2895973aa11a7607543b332b846ab8dd9ed712359ca67226081e3f97eb7b0cd59
TLSH
T1F7E026C544EEC36EF708F85B11BC838D83C0371FA3C0698E1722D8887101488A3CA6F1
MD5 SHA1 SHA512 TLSH

Submit Download

f_000077

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
Size 29KB
SHA256 a596c0775b3bf95e77f251cfa30c59f94aab451eb7fa021e1315dbbaf2de2e88
MD5 cbebc21cf241c8f81c87040a05b462af
SHA1 2e225387366fde0e4c8fef55c914fc5f48de29e3
SHA512 27e2835f543c71e0b5ecf5000fd4493391d5b5ef638319d619d2116a0720ce2aebaa049abca9a3a7f307c94c9d6b8c9e5d02e30b7ba1915ca012b42fbb50d184
SSDEEP 384:lc8tUrMQe2QNju6wtXreXOQWFFN9vUwRViwsKeRc3Md0XR3wHeiYzzpC/cBUe+BW:l8oF2ttXDhNtRgCcCSOYzU0RYX
TLSH
T1C6D2F1DAA1C26A656669B9011F5E748C7FA436E80FC360FB8F98281D02F18539DCF871
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 4KB
SHA256 639398f6c2d8285376eeb5757b3be8929b3b3ca259df7fcbe3d5d81cdd32e594
MD5 876ffba819397b39491163cabf83aeba
SHA1 58a520b6ffdfb01951436739be07c26296a98105
SHA512 a8a3a2f8be0a72302e4a03457dc7e7318e6decd2ed7911154346707304290c704025ece6231cd7da2c21a8ea2ca36561fc1024b7ce5134d7c4570fd78244a485
SSDEEP 48:zW8YOYxKtbr7ISY48HtjQaKELTKaydiUxpR/rMhJDex2KcRL4Ma4mm9pTV/tacNR:q8YOEjhn1AiOghZeg555bxwbfq
TLSH
T1808197B8A5A193A9FFD84979D8CA19CF38336941A493BFC30E74E4768C7B74490B8145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 50b1bf803ba7166f432587b7211d3f246fa7c1c2daf21abbcd9bdb8f360c3153
MD5 a40184218542009b89a0e21bde192c81
SHA1 34f81fc536a504f591e88665ddd30e76d2b3f233
SHA512 309bebd220f99c642802f68a46e39d71cc12a80a34c1d7dd67f007a30154bc8b5c81a03de8e747cb6e3ad3ee6bd137220e44fe9f565397866bea0a2adab97cee
TLSH
T1FA618479AA60E2B8FFA84479C4DA14CF39325D95B447BEC30EB8E87ACC7630491B8101
MD5 SHA1 SHA512 TLSH

Submit Download

61337c0b-ac95-4b65-b158-14087f2046e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\61337c0b-ac95-4b65-b158-14087f2046e5.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

04f8dad6-12b0-4ba9-a993-4ab08ab43890.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\04f8dad6-12b0-4ba9-a993-4ab08ab43890.tmp
Size 6KB
SHA256 04efecbc866de9b08e6b2b932784588871214d209899d91232b9b082f51e1079
MD5 c9a9caecdbb5690e4ad12bff3ddf99d8
SHA1 3c15b7fe0862cabc535990425f89dc42abacd08e
SHA512 b3d8d544167cdb44fb5618094f4b8b0dae2b7f4316d2c84914747cf3bb799ae1bebcb8774f2b5f4f428461a048fdbaf48e126e75fa2a6511bff02c06a1e05e95
SSDEEP 192:DWa6SjL2zc1nbZ0cLLLUVI/LrvL7SiQhBcrvksQ2Gj45y:DWa6SjL2zc1nbZ0cLLLUVI/LrvL7SiQR
TLSH
T139E179B287F4D62DDC2196F0AB156E1FCE5D0964832C393AC9D4AE1B93E1571E201A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

17466b15-e3e5-4d2d-868f-9804aedd059f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\17466b15-e3e5-4d2d-868f-9804aedd059f.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

96d2c3f1-f5c6-4542-8e6b-5c09dc37c181.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\96d2c3f1-f5c6-4542-8e6b-5c09dc37c181.tmp
Size 6KB
SHA256 9396a26959a4b37e1273501e5ff27e4e844125b238bd1549da16c954246e70ad
MD5 827d04e01d6066cd7a5a537699aa0419
SHA1 a39f898054bfca3a66d65c6a7f2a91658ef94d83
SHA512 c2cfea42a193cffdb6fc8aaea5cb3dc77be9a4509b2d974bae29423db346187df358cebc5f0cc25b77dfcf31954212edb844e4df3e722619bb3be4aac193e8f9
SSDEEP 192:DWa6jL2zcvbBv90cLLLUVI/LrvL7SiQhBcrvklGj4+tIM:DWa6jL2zcvbBv90cLLLUVI/LrvL7SiQ+
TLSH
T183E169B287E4D62DDC2196F0AB156E1FCE5D0D64832C3D3AC9D4AE1B93E1571E201A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9a005406-d83e-40b9-b4c9-24835550d698.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9a005406-d83e-40b9-b4c9-24835550d698.tmp
Size 7KB
SHA256 97ca983616a575bf6b9c1d42feddd1d2c408f874958d1aff40c83f170107fecd
MD5 7b20415d1a4c5c533bcc93780ed3e6eb
SHA1 751caacba8f40ef71d5d6f14b6aa81eb5b8a1bac
SHA512 bc1388377ef20b273ac3d43a65a0a8347f4e2555015d659a1e664436032c66729a71afb3dfa5a6259dd1fc247fb6aabd29d921a8936c19d1419eba34c68a0147
SSDEEP 192:DDEczfsee7Mfn08LZzLUVI/LrCiLkS9Qh2je3+PGM:DDEczfsee7Mfn08LZzLUVI/LrCiLkS9f
TLSH
T1BDF16DA2C7E4C62DDC2156F4AB252E1FCE1E0D5483183D2BC9D89F5B93E1571D240A4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d0fb83f2-5f75-4e8b-8617-8065e952cfdc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d0fb83f2-5f75-4e8b-8617-8065e952cfdc.tmp
Size 6KB
SHA256 f12985cb56b64fb8bf38d818f9918a893ca6bf69b342265c1246815527ffa55a
MD5 af1f07b26ea70cd435ef33db1ed036e2
SHA1 0f4782b60fdf54878b971bbe2b7c49f7f3596e05
SHA512 fbf767a5575d81a6eb7d342376bdf8cb41e921816c4e7846d7df72b06c2e1017499f6795bac5e396f319085aae6cf79be0302825f5c574033d3cfac391b2083d
SSDEEP 192:DWa6jL2zc1vbBT0cLLLUVI/LrvL7SiQhBcrvklGj4qXje:DWa6jL2zc1vbBT0cLLLUVI/LrvL7SiQH
TLSH
T1B4E179B387E4D62DEC2152F0AB156E1FCE5D0D64832C393AC9D4AE1B93E1571E200A9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e2d26395-af39-409a-9a8a-5fae3f4e687d.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e2d26395-af39-409a-9a8a-5fae3f4e687d.tmp
Size 7KB
SHA256 2b895fc6e33d7eccea30a1c56aea4ba87a289530fef91f43d3bd8da0c2581ea8
MD5 6e7a4d50caee450d77934a0338b04aac
SHA1 0c71ae4c7fdcb84bb88563378dd8ec42bffafeb9
SHA512 9dc5acbc04f54d42945ac61339b71a9230dff0c62c9f73ca8f0767594db86e3812732b5cdbe6eba345c78f8c83a424c48210ba4ec70acd99142b72efffe01810
SSDEEP 192:DDEczfsee7MfPf08LLLUVI/LrfLkS9Qh2jeCzw2fsdWM:DDEczfsee7MfPf08LLLUVI/LrfLkS9QF
TLSH
T100F16CA2C7E4C62DDC2156F4AB253E1FCE1D0D6483183D2AC9D8AF5BA3E1571D241A8F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ea1d9744-7f3c-4d7a-9be1-1c8b0091630a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ea1d9744-7f3c-4d7a-9be1-1c8b0091630a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
Size 768B
SHA256 4953f5e55f871106cf2ef4bc4d5e74f867513b916b66fc27e1f631ae6ab4fb48
MD5 8ddbc207413b043c95760704e11c53b3
SHA1 c603debe30a126419bdbb9b3d3947d79c4dd0459
SHA512 8974e9b7703aea71e6b99768271a5d74508b777873f02232d8a477065adc109a46df2e0a7139a2853f68cf6389bc0f9ae3454a84005a2860b2bb4f41d302c158
TLSH
T1F401E1DB4D124A1BFC550235243CB89966B906CC5241774F62BDC52AAC67344AE415A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e224deac-434e-4633-bdfb-da3a59c15d46\index-dir\the-real-index
Size 768B
SHA256 92b00efdc9120ea9e51704c8cca76bd313925d30901bc6d555a23beea33ebc06
MD5 f37c4cd93ac6b723d1dbffbac1a40067
SHA1 1892d27763f6868ae0438a8e7e637da11a5cc26e
SHA512 8369cabd2e90d161fbbaad554d631405207867b3c9957c4a702091c1d61bda5c45cefdff625fa2778902b617c9e94d8426f3380d36c3b0998437683839ab426f
TLSH
T1A80120D600034B8BFC0403709A3CA416216A91486390774FA3EAA02ACC52780BD83EB4
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 371B
SHA256 94f807db41f868775c4d756db3e12033112ec80816846a75f55cd2ea3ca175ba
MD5 bba60b879c72f235373a53ef5f05540e
SHA1 18718700ee21bcf1c512b150cc303c362defafdf
SHA512 ba4b6ad1feaae3fd9c2c72deb5d8f11d690fb9049043474ed59f8e53d51932aeffe2ec5ba890da9524524719ac401f53cf07d4be786cc097b44a43ed6cd9f434
TLSH
T15CE020B73FD72854ECDF83D21031C8D54105B964C544FD4F246F91C7A2B1759385AC26
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
Size 4KB
SHA256 dad72148a309d7730420b98e63640d13a2d362109240389145c255540df49448
MD5 1c9537314ba760258ee8728cc716688a
SHA1 c399750e14620d194abe45d6576a1276504963ce
SHA512 105c08cebed2fc79d50d03a013dc795b88eccd83ba162ca51e45aca3ec9b7fbfff30f3d38b3460b65dd16eb1ea55ad61a7ecc3271e153d3515cdfe8e897698e4
SSDEEP 48:QBbfk8yBZCuCDPJ1Gk+g/C/rN/CUlJJlo2AUuzc32:2s8yBMJ1Gk+KCjBCUlJDo7UuN
TLSH
T17581D80CE85D9D13E9FC5B7999EA9638333AA8566B83C757441CF1343C8B3F85E402A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 f33cb51c521231e775c344329cc317d6d694becc6422f853b2e0e7eb1e25adfd
MD5 a5afe7e37d45587bf0d6d12132cfe7f1
SHA1 362e0bed5e02f8fc0cd47aec4db1523b2e26c21e
SHA512 34f8884aa1c90962939319cc1aa9066ae7a3a5289c2fed676525d2ee24303255832b591b1a6e9bd1389afd772528cfd1fa3453ff0a1a9e9546793ed345589d4d
SSDEEP 48:K0GDGmGHGjGN8rKWkmKzb6ZCISOzK9q1IzxsjYhyKQy5aIfKTCELy9VIZKGMko:K3idmC3TeK8ouKaAKTC6WVaKGMn
TLSH
T11D91364071BA5244397E354D4079855B138230F37168A9BFBFB9C4A24E6BEA41EFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b472c735-170b-44ce-b02b-106d18ad7e98.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b472c735-170b-44ce-b02b-106d18ad7e98.tmp
Size 10KB
SHA256 dfbdfcd2d22d3468c72c44b7d9a8c174e739dca9338c1db507c19bdef9bfeb42
MD5 efb4f2daa554e258a0511caee2e795da
SHA1 c85832d1b98aced79411df833b92afbaa3419ecc
SHA512 5a644bd461a5da186d645edea84328962f258454ba816212065537929f7c172080c4b3c4d6d8ae37d5c9632db53edf207b63ca74ba2550278ce9d568b9ce3157
SSDEEP 192:sxZ7R6nI/flsqjbXIdpxt/l4zHW6+WNKOlZYg9mPyIg5XJ:sxZ7+I/flsu44HbRZpf
TLSH
T1D832D6626E35697B8CC6E20DBA14BF53E6F5507290D10E58AAFCCA1C04F7ADD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4f39403d-1286-4c85-a4f0-c453bd436933.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4f39403d-1286-4c85-a4f0-c453bd436933.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

7ac42eb1-f19c-499d-948a-a09352468e84.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7ac42eb1-f19c-499d-948a-a09352468e84.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f742d702-0e14-4628-a057-422396fd3a71.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f742d702-0e14-4628-a057-422396fd3a71.tmp
Size 8KB
SHA256 aa9bbdab7ad3ced0f5c6d523aac80518163022bf1c299d3dfd606aef6ce7909e
MD5 88917d8554c8aa88cc90918d43159a15
SHA1 c7095039cc54502ece7ea44eafcd6a7903e01f89
SHA512 6ef8915eb6ee5eee6e3011de88503a3016804cc23ecbbc0c7b37d32145c4ba4ebbed434ac6bceed93ca1dcf5ddd146e5c94e694bc59e42e0e85946d3accb51bd
SSDEEP 192:3ONl6DphYqQmiUybMowGYX59ezVCNY+YpDyelkIIqq5tU6:3ONl61DpowGYX5E0S+YpDYbU6
TLSH
T105122B31A878AC7B5DD3A951B48B39138FA45227EB847F84D5EC1A1C01DF69C130B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fdbdec78a455afadd5a167147b5eabe71d1f183977f0066f47e320f1b7f83fd3
MD5 9437db653fbff13d89980106da36d875
SHA1 c9e4f16bfebf9d4a6042161ff587e80eb0c7cb0f
SHA512 f367d904720f19f0a91e2d8f822dce9f0c5c584c56eb30118f6c7b3fcd01c99bf50d82341333e9ac53a77ed9a3d74751384a23f8f1224c814a9d2655802a73ca
TLSH
T1F841188CA6F91148B3B3AF55ABF6686D487EB8772E06D49D00010D4F0A76B44C971737
MD5 SHA1 SHA512 TLSH

Submit Download