Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/02/2024, 12:40

General

  • Target
    82c4894e3dee46d2afa93d665c1b4aa6.exe
  • Size 897KB
  • Sample240219-pv673sdf66
  • SHA256 883fbeeb3c809289ea68b62dd0c4156fbf8d51d31d543797ce7b73ace5956c93
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 15 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 10 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\82c4894e3dee46d2afa93d665c1b4aa6.exe
    "C:\Users\Admin\AppData\Local\Temp\82c4894e3dee46d2afa93d665c1b4aa6.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1460
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/
      2⤵
      • Enumerates system info in registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4728
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
        3⤵
          PID:4980
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
          3⤵
            PID:3320
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 /prefetch:3
            3⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:3556
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2008 /prefetch:2
            3⤵
              PID:3944
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
              3⤵
                PID:5356
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
                3⤵
                  PID:5524
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
                  3⤵
                    PID:6120
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
                    3⤵
                      PID:6328
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
                      3⤵
                        PID:6296
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4004 /prefetch:1
                        3⤵
                          PID:6180
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
                          3⤵
                            PID:1816
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
                            3⤵
                              PID:6532
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
                              3⤵
                                PID:6912
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
                                3⤵
                                  PID:7000
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
                                  3⤵
                                    PID:6988
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
                                    3⤵
                                      PID:6452
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6964 /prefetch:8
                                      3⤵
                                      • Modifies registry class
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:3400
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6952 /prefetch:8
                                      3⤵
                                        PID:836
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1760 /prefetch:8
                                        3⤵
                                          PID:6100
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,9001560445755259163,3263171562742452195,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4236 /prefetch:2
                                          3⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:7100
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.linkedin.com/login
                                        2⤵
                                        • Suspicious use of WriteProcessMemory
                                        PID:4308
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                          3⤵
                                            PID:368
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,7097858383523953681,16305532307171273823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
                                            3⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:5200
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,7097858383523953681,16305532307171273823,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
                                            3⤵
                                              PID:5180
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.facebook.com/video
                                            2⤵
                                            • Suspicious use of WriteProcessMemory
                                            PID:4492
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                              3⤵
                                                PID:3204
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,14151735505008388332,10303565960307861702,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 /prefetch:3
                                                3⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:5648
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,14151735505008388332,10303565960307861702,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
                                                3⤵
                                                  PID:5516
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://accounts.google.com/
                                                2⤵
                                                • Suspicious use of WriteProcessMemory
                                                PID:4840
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                                  3⤵
                                                    PID:396
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,5854378012248727608,10486601948734565039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1940 /prefetch:3
                                                    3⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:6132
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.youtube.com
                                                  2⤵
                                                  • Suspicious use of WriteProcessMemory
                                                  PID:1556
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                                    3⤵
                                                      PID:832
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,12229610235959418441,1051021183364629251,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 /prefetch:3
                                                      3⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5868
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://www.facebook.com/video
                                                    2⤵
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:1336
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                                      3⤵
                                                        PID:1632
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2044,3922651641643414745,13267020186049333492,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 /prefetch:3
                                                        3⤵
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        PID:6564
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://accounts.google.com
                                                      2⤵
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:1040
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffc9f4446f8,0x7ffc9f444708,0x7ffc9f444718
                                                        3⤵
                                                          PID:1420
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,14101804500639007749,17068188161515236055,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
                                                          3⤵
                                                            PID:6576
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,14101804500639007749,17068188161515236055,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 /prefetch:3
                                                            3⤵
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:6708
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.youtube.com
                                                          2⤵
                                                          • Enumerates system info in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of SendNotifyMessage
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:5016
                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcadde9758,0x7ffcadde9768,0x7ffcadde9778
                                                            3⤵
                                                              PID:3064
                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1812 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:8
                                                              3⤵
                                                                PID:7704
                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2992 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                3⤵
                                                                  PID:7980
                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=3768 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                  3⤵
                                                                    PID:8128
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3720 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                    3⤵
                                                                      PID:8116
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2984 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                      3⤵
                                                                        PID:7968
                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4844 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                        3⤵
                                                                          PID:8480
                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4792 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:1
                                                                          3⤵
                                                                            PID:8472
                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1948 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:8
                                                                            3⤵
                                                                              PID:7696
                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1668 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:2
                                                                              3⤵
                                                                                PID:7688
                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5440 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:8
                                                                                3⤵
                                                                                  PID:4420
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5532 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:8
                                                                                  3⤵
                                                                                    PID:3740
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5496 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:8
                                                                                    3⤵
                                                                                    • Modifies registry class
                                                                                    PID:1148
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4768 --field-trial-handle=2016,i,6706366093317212668,17292514806177713103,131072 /prefetch:2
                                                                                    3⤵
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:7808
                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" https://www.facebook.com/video
                                                                                  2⤵
                                                                                  • Enumerates system info in registry
                                                                                  • Suspicious use of WriteProcessMemory
                                                                                  PID:4716
                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffcadde9758,0x7ffcadde9768,0x7ffcadde9778
                                                                                    3⤵
                                                                                      PID:4412
                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1904 --field-trial-handle=1972,i,12102710101861356088,15273055419563276278,131072 /prefetch:8
                                                                                      3⤵
                                                                                        PID:7680
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1776 --field-trial-handle=1972,i,12102710101861356088,15273055419563276278,131072 /prefetch:2
                                                                                        3⤵
                                                                                          PID:7672
                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" https://accounts.google.com
                                                                                        2⤵
                                                                                        • Enumerates system info in registry
                                                                                        • Suspicious use of WriteProcessMemory
                                                                                        PID:4992
                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcadde9758,0x7ffcadde9768,0x7ffcadde9778
                                                                                          3⤵
                                                                                            PID:1376
                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=1924,i,10497479676047850587,15210463360898790438,131072 /prefetch:8
                                                                                            3⤵
                                                                                              PID:7788
                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 --field-trial-handle=1924,i,10497479676047850587,15210463360898790438,131072 /prefetch:2
                                                                                              3⤵
                                                                                                PID:7768
                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.youtube.com
                                                                                              2⤵
                                                                                                PID:392
                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.youtube.com
                                                                                                  3⤵
                                                                                                  • Checks processor information in registry
                                                                                                  • Modifies registry class
                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                  PID:1072
                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.0.762967049\638450283" -parentBuildID 20221007134813 -prefsHandle 1868 -prefMapHandle 1860 -prefsLen 20749 -prefMapSize 233444 -appDir "C:\Program Files\Mozilla Firefox\browser" - {b09443dd-116e-4d14-9aea-dba8dd2ad0be} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 1968 145984d7a58 gpu
                                                                                                    4⤵
                                                                                                      PID:5812
                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.1.678442463\230865367" -parentBuildID 20221007134813 -prefsHandle 2420 -prefMapHandle 2416 -prefsLen 21565 -prefMapSize 233444 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {1942f073-0015-4a05-9c1c-5cfa0479f6d7} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 2432 14597fe4758 socket
                                                                                                      4⤵
                                                                                                        PID:6608
                                                                                                      • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                        "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.2.1246433135\1336596786" -childID 1 -isForBrowser -prefsHandle 3492 -prefMapHandle 3488 -prefsLen 21603 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9c691dba-5c3e-4e06-ae6b-99368215a697} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 3300 1459bc36858 tab
                                                                                                        4⤵
                                                                                                          PID:6500
                                                                                                        • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                          "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.3.826634035\1627236186" -childID 2 -isForBrowser -prefsHandle 3004 -prefMapHandle 3116 -prefsLen 21709 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {80983fb2-2548-452e-a274-5fcc629c9f0c} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 2992 1458b82f658 tab
                                                                                                          4⤵
                                                                                                            PID:8600
                                                                                                          • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                            "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.5.2000808821\1127412155" -childID 4 -isForBrowser -prefsHandle 4632 -prefMapHandle 4628 -prefsLen 26066 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {7e49bd9d-be5b-48e7-b12d-5dad35a634e3} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 4644 1459a6dad58 tab
                                                                                                            4⤵
                                                                                                              PID:8756
                                                                                                            • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                              "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.4.678216428\105189419" -childID 3 -isForBrowser -prefsHandle 4240 -prefMapHandle 4232 -prefsLen 21766 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {88b1119b-8f3e-4342-ab31-81b45dbd1b79} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 4412 1458b867b58 tab
                                                                                                              4⤵
                                                                                                                PID:8712
                                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.6.157799696\1066718204" -childID 5 -isForBrowser -prefsHandle 5308 -prefMapHandle 5356 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {67e45fc5-5843-4a3e-b0fa-ea2580332b13} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5336 1459f38e958 tab
                                                                                                                4⤵
                                                                                                                  PID:8700
                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.7.172027650\1287955427" -childID 6 -isForBrowser -prefsHandle 5480 -prefMapHandle 5556 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {240825ae-66c0-4951-80c9-f9bd5a64e251} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5564 1459efc1458 tab
                                                                                                                  4⤵
                                                                                                                  • Checks processor information in registry
                                                                                                                  PID:5480
                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc --channel="1072.8.603989763\1812858596" -childID 7 -isForBrowser -prefsHandle 5728 -prefMapHandle 5724 -prefsLen 26206 -prefMapSize 233444 -jsInitHandle 1116 -jsInitLen 246848 -a11yResourceId 64 -parentBuildID 20221007134813 -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - {9ea98432-ce64-4d56-a809-00b8939b8e6b} 1072 "\\.\pipe\gecko-crash-server-pipe.1072" 5736 1459f4fc158 tab
                                                                                                                  4⤵
                                                                                                                    PID:8840
                                                                                                              • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.facebook.com/video
                                                                                                                2⤵
                                                                                                                  PID:4532
                                                                                                                  • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                    "C:\Program Files\Mozilla Firefox\firefox.exe" https://www.facebook.com/video
                                                                                                                    3⤵
                                                                                                                    • Checks processor information in registry
                                                                                                                    PID:3232
                                                                                                                • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                  "C:\Program Files\Mozilla Firefox\firefox.exe" https://accounts.google.com
                                                                                                                  2⤵
                                                                                                                    PID:4444
                                                                                                                    • C:\Program Files\Mozilla Firefox\firefox.exe
                                                                                                                      "C:\Program Files\Mozilla Firefox\firefox.exe" https://accounts.google.com
                                                                                                                      3⤵
                                                                                                                        PID:5480
                                                                                                                  • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                    1⤵
                                                                                                                      PID:5632
                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                      1⤵
                                                                                                                      • Suspicious use of WriteProcessMemory
                                                                                                                      PID:392
                                                                                                                    • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                      1⤵
                                                                                                                        PID:2260
                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                        1⤵
                                                                                                                          PID:6348
                                                                                                                        • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                                                                                                          1⤵
                                                                                                                            PID:7228
                                                                                                                          • C:\Windows\system32\svchost.exe
                                                                                                                            C:\Windows\system32\svchost.exe -k netsvcs -p -s UsoSvc
                                                                                                                            1⤵
                                                                                                                              PID:7788
                                                                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                              1⤵
                                                                                                                                PID:4812

                                                                                                                              Network

                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                    Replay Monitor

                                                                                                                                    Loading Replay Monitor...

                                                                                                                                    Downloads

                                                                                                                                    settings.dat

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                    • Size 40B
                                                                                                                                    • SHA256 6cfb9071b4745b2744e673f57a39aaacc9719825c5f6e83dc5ce9b528c7d88ee
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    f_00000b

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000b
                                                                                                                                    • Size 211KB
                                                                                                                                    • SHA256 58a7c2031d7dbf5bda9614b64123996aa3bfcb5a783f901145baf087066c04a8
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00000c

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000c
                                                                                                                                    • Size 22KB
                                                                                                                                    • SHA256 d9134e3cf60db564c49cc181251c7308bc568acf060444c443a90c0f464ebfeb
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00000e

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000e
                                                                                                                                    • Size 18KB
                                                                                                                                    • SHA256 06b5e5a492bf40fcbf52c71bd4181409df6d8766baf268919a18d8a1c60f09ba
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000011

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                                                    • Size 20KB
                                                                                                                                    • SHA256 bf7344209edb1be5a2886c425cf6334a102d76cbea1471fd50171e2ee92877cd
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000012

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                                                    • Size 34KB
                                                                                                                                    • SHA256 fa158e2b238e5515c36f41e294701218c9b1c9908aba7382469b4a82820c9b35
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000013

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000013
                                                                                                                                    • Size 21KB
                                                                                                                                    • SHA256 6c24799e77b963b00401713a1dbd9cba3a00249b9363e2c194d01b13b8cdb3d7
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000015

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
                                                                                                                                    • Size 20KB
                                                                                                                                    • SHA256 0097fe392f2479647d8c9f3840c7ac49f8296b1908bf0e99722a86f223037ed8
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000016

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000016
                                                                                                                                    • Size 95KB
                                                                                                                                    • SHA256 85cd6bf80a72139a65e56632c333d648f0ebcd9bd8c1fd526557949f93ad7e8b
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000017

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
                                                                                                                                    • Size 24KB
                                                                                                                                    • SHA256 5026526565cff03c7fac8772152e339d2161d8b473c2be9f2bd85937a47aa6d8
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000018

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000018
                                                                                                                                    • Size 18KB
                                                                                                                                    • SHA256 5e930a1c171d4599bb6daaf71ac52b2b50eb0f15e1ac08c0ba651fb27dd06b0d
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001a

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001a
                                                                                                                                    • Size 61KB
                                                                                                                                    • SHA256 c307d54fcee53c212a0521ac00f1d0fa08fb0d0ad8a7e1211add81b2b6cca4be
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001b

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b
                                                                                                                                    • Size 64KB
                                                                                                                                    • SHA256 1501f48d09b189e7f0214954ea507925fcd0ba80cd8ca2ad1bcccdbaad9072e1
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001c

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                                                                                                                    • Size 71KB
                                                                                                                                    • SHA256 f573fe49dd43a383adc31695aee816599d21b366f9fe7a539d916cb96b4fbe89
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001d

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d
                                                                                                                                    • Size 69KB
                                                                                                                                    • SHA256 f1ce9f1e895d734c880328ab669716ab286e3ef107f1cb1fa54cf4a66d35ea2e
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001e

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001e
                                                                                                                                    • Size 54KB
                                                                                                                                    • SHA256 fa54b15b2150d4ba39ae61143f402a518c9468f7da08361d492dd02ffbeed559
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00001f

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
                                                                                                                                    • Size 55KB
                                                                                                                                    • SHA256 0ad7610390db0e850386726817f3755424106fa3eeb3a4a9addf7b0ae101d98e
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000021

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
                                                                                                                                    • Size 90KB
                                                                                                                                    • SHA256 85eb24ed83570c11e6988d1988f8786456f39e7910ed64bb85b48f530462fbcb
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000022

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
                                                                                                                                    • Size 146KB
                                                                                                                                    • SHA256 a790e45c7a6149b4a0289159f413027eb763b78ab9448f7039dd953357460ed4
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 d8c7184b042a2665c26c7ce60c7735f51e85a16d0d65a8acc67a4cb507c0ca0a
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 f79ca09513432a3f93e7ba6c35dd0b88aa650b6a7defddb71758aa1a6700484f
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Network Persistent State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                    • Size 4KB
                                                                                                                                    • SHA256 0f8b695377e4aeaf32ff320b4c36ecb6d32a5874ba3d13c3860e8e1ade62e648
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Network Persistent State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                                                    • Size 3KB
                                                                                                                                    • SHA256 ebe6d095b1f0f9d9cb3c09f944da1b5c6c5e7f3b657f489752332f37813ba4c6
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 f5c94eecba8d9f61279315147cf194fc0586b08653e87283a64c887ce6679217
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 b5352feb8dc3990fcab7f51f47e0d5b5d34e0d97eec068c479618ddc2c7624a5
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 707B
                                                                                                                                    • SHA256 cffa914902762917abcb83e0e6c40bb5086384499fc609a16d0040efecacdfe4
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 9ebd373ccfbe05bd259ab63359cb786f6134f0f2be257f8a9d130d3150118517
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 3eb9ace0bf5f01d664392f75c0794af13873b3f76109c41327bcb90888a3497b
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 2718e89b3aca0c3f581addd0f899b22d0062681c670492e1ae63256c04c28e5d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 84c0d5639d9a92349ceb3a56b6357a40c9f8858b0fe2b034ebe093894518a150
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                                                    • Size 7KB
                                                                                                                                    • SHA256 402e58f77c829df591906eb6485a529425118b06cd99e825f8428ee788a5be92
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 119B
                                                                                                                                    • SHA256 6d22bb107fec9c92541091c65302f11675fe773dd8f5ccb41825c5658a61688e
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 176B
                                                                                                                                    • SHA256 77a69ed356b44a6b262abe56c788091a86368a550d61a421588e58834aa85776
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 112B
                                                                                                                                    • SHA256 d06defd37703c11b90e15e942745d9a5a56f15d19989df2010cd0a31056257e0
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    CURRENT

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\Database\CURRENT
                                                                                                                                    • Size 16B
                                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                    • Size 72B
                                                                                                                                    • SHA256 c6417f484057bc6fe87f763f62dd822467a653890b5c9496eba75089bf57b7ce
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index~RFe5837f3.TMP

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5837f3.TMP
                                                                                                                                    • Size 48B
                                                                                                                                    • SHA256 c2c188de67d771ab2c5718f256186b94978670660f7d11e4b98607bb4deaec2d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                    • Size 240KB
                                                                                                                                    • SHA256 34ef5a32b10bb06ffbdebba810de227a1f00624ac1d5ffb69be0d9410c826302
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                    • Size 114KB
                                                                                                                                    • SHA256 fc599be84eecb9b2941fc31cacee5cfb614f4284894bab5784b5b34e195461b9
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                                                    • Size 114KB
                                                                                                                                    • SHA256 1b6247ac1a8c44bcbd67c5c88da20033dfadc291d033fb499fb1ca8463f6edd3
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Variations

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                                                                                    • Size 85B
                                                                                                                                    • SHA256 40395d9ca4b65d48deac792844a77d4f8051f1cef30df561dacfeeed3c3bae13
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Variations

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Variations
                                                                                                                                    • Size 86B
                                                                                                                                    • SHA256 2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    settings.dat

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                    • Size 152B
                                                                                                                                    • SHA256 54593a44629eeb928d62b35c444faabb5c91cd8d77b2e99c35038afeb8e92c8e
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    settings.dat

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                    • Size 152B
                                                                                                                                    • SHA256 2695ab23c2b43aa257f44b6943b6a56b395ea77dc24e5a9bd16acc2578168a35
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    f_00000b

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
                                                                                                                                    • Size 167KB
                                                                                                                                    • SHA256 90e0411e9beb88af0eed93e63ad65281dd5e2020d444bf04111ee0087a9fdc5d
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00000c

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
                                                                                                                                    • Size 114KB
                                                                                                                                    • SHA256 377c00695a5d2fc56c554f6823521be5d44a0e969c0d5ae2fc854fff7b831654
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000011

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
                                                                                                                                    • Size 257KB
                                                                                                                                    • SHA256 8fe4ca7286a0bca3d62f59e060e6de37466a99e4e2eb293a533d5e470470fe2f
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000013

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
                                                                                                                                    • Size 18KB
                                                                                                                                    • SHA256 5dfeecb28f2faf93c24e4755b3bdd2d1d32bac448f7ec94ea3eab9e934a425f4
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000028

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000028
                                                                                                                                    • Size 17KB
                                                                                                                                    • SHA256 3d568a4aac6779408397cdb5aad0071805fdb1b9fc848058bd757271c3f5c8d9
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00002c

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c
                                                                                                                                    • Size 25KB
                                                                                                                                    • SHA256 e4ec74a14c01eae12976a9159e08816cc8b9e37f8f65c7ad0a823a0e3b5177bd
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00002d

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d
                                                                                                                                    • Size 31KB
                                                                                                                                    • SHA256 b222b23c6ee94816389506d4de8ead66181c8053242e1e1eb784ccac46bc7ee5
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00002e

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e
                                                                                                                                    • Size 47KB
                                                                                                                                    • SHA256 0f2a35c8b824d54b483d0b2ea10964bb7af8eb6b1c86d40efbac4c55e1123a2f
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_00002f

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f
                                                                                                                                    • Size 775KB
                                                                                                                                    • SHA256 d40eeb6f1bcee392df7288d7ebb484b3e8fc769fa52d13a41804d59573799087
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000030

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030
                                                                                                                                    • Size 30KB
                                                                                                                                    • SHA256 2c700f68f9355697fcfb8a1be428158cc2937d2e0d01c0afbaed92cb2cb0c125
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    f_000031

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
                                                                                                                                    • Size 33KB
                                                                                                                                    • SHA256 7202e097880e3d2f06bd216cc9277332b95ff8b7d3a676d3ce89b869eebed990
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 266831cd02d3fefacb22ef0a0ebccdfa40dfd36b8b9fbebeb5a814d55f26dd83
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 b68f0a7f6f49484e16596583b7f5c8d74447701d08315e3021da96252400b3fd
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 f3c177a1b36367ab449187d53c13dee51feb84093102d9c308ecb518062f4037
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 6a51152b018e11e4579ed58a98fb7fe237631076a97fc128aa7fd31fe21e50d4
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 ace29e2f9fb0cc3e913211f8157cdba09efdc40265db21e1561539c12e323c2a
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 2459a0086e4943adae37d5ec67b44da2a14dfcc6eb7a4d0934c49051cc656174
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 5459893c7ba2bbcff126979666d4a82a1a23f6496cbc3ef2b9c2b98aae6ceba3
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 d13d795d57be7e0c8661ea170d18b9c1f58877ad99e6c2ec403ea92fec98e27b
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 6849776fa7a7f87215757a835a806b72cda0903d0d339d324edf745cb434a83b
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 42899713a46e351cbc4fe95cea15d187ab875bdff1898052d79a494837c2520e
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 f35bbc2a76fd9672e170b9c68f175316125150d1cb9364a09625b3cd3eecb62d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 b16d006c36f3c3cd999d09a1db9f95fc676d2508a50b684e528895ddf7f0634c
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 2dfc055a12dc7a29e9c0ceec85acb18249eaa10be5b12c1e5d7ef0558bfd0e90
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 1802b440d3b28cca091975a4606b0a416fe718d8dc5c63afa728e19ffa46b0c9
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 6310901b4ec4ad97bcb293e202b9cc4ec7c17b7b35ebb6f23aec8534189235d1
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 3db33558c65fa4902dfb4935d30e9fd778a6dc1efbd86a3ecf2d1cc4988ff687
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 c4607a3f869dd95c9fe0d3f97598a4a6c82f3b8b9d4b64e110558a0cec887d30
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 21a995b8bb0c47a95db82822ff4fab0ba67d81b015ff94c26025c10ae7bcc7c7
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 85dca67f259f3daf029e25a5493420b0919fb8f9fa7f300d561aa0e9e28f5d9a
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 500f8da67f2e6f6b831c400284e75440995ba0fb1e4abe0febe100c620eb3033
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 2fd4ca94625a5f72e99da041b4ee4100669df5dbc553c21296620d932f1ff046
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 b4cbc3785213be871318da935d6208ca9cb40e895e4634e7b395ef1e88586a30
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 3e0c34a9a11a1fc225c111eeb807e3bc91dbe4a6752cd53ec5069ee5f7ef755a
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 b9889e16499792e4b80aec97eeb01703a585165c4e6d88ed8faa2a2dc97de020
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 6c3970e4cac83c1ad8f9c334bc4056b58091dbe4e33afd2274f6bb88d4ea1d8d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old
                                                                                                                                    • Size 393B
                                                                                                                                    • SHA256 0996792f084bb1907a1bd70b8777ed4b10e22b5fa412276d339c2b735746491f
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LOG.old~RFe5816ee.TMP

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\LOG.old~RFe5816ee.TMP
                                                                                                                                    • Size 353B
                                                                                                                                    • SHA256 bff501866a8a3ae45c8182289b9003c3bdc501a87d1c1e76f1a694966c233e40
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    MANIFEST-000001

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.linkedin.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                    • Size 23B
                                                                                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Network Persistent State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                    • Size 111B
                                                                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Network Persistent State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 c07c5af4489f70dadfdad715ba2e4e30c093181884d60a2a7cb81a51c2d3dee8
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                    • Size 5KB
                                                                                                                                    • SHA256 7f4c30e2b99706ff4e77f79856968b6893d67f909db59c99d6b82d7a26998857
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                    • Size 7KB
                                                                                                                                    • SHA256 63bef9c375344608bec2c4f5bc60466d50fa8c520865ef12272d606d9acc9825
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                    • Size 7KB
                                                                                                                                    • SHA256 ac388cb16ecb842ecbd405180688bee6248c8f7602eb72aca84224e4baac22ac
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                    • Size 7KB
                                                                                                                                    • SHA256 8f977466aeba0c879c1e94639ef9e6015e7d894bdb8502d39bb0b1ad52ff0619
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    Secure Preferences

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                    • Size 24KB
                                                                                                                                    • SHA256 73f853ad74a9ac44bc4edf5a6499d237c940c905d3d62ea617fbb58d5e92a8dd
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\50877d8b-2b5d-4d7c-93db-830b90aeef3c\index
                                                                                                                                    • Size 24B
                                                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 89B
                                                                                                                                    • SHA256 16e3554d029a5d8c835290a6327f6a1001857b5b528a29a901cf94cc40eca065
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 82B
                                                                                                                                    • SHA256 80e4fbddc8142903e3ef2e21e3b8fca52fddcb39a2ceb5147baeee37a17d83ac
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    index.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                    • Size 146B
                                                                                                                                    • SHA256 d43e7ecaea81d502eca406d475bba19c969f8c5b436241fa5ec0a9a8ca947dfd
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    MANIFEST-000001

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001
                                                                                                                                    • Size 41B
                                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                    • Size 72B
                                                                                                                                    • SHA256 6fe4dbef27dba563ad4a0f27b8dac08fee5c545e3629488d36ad5aa803085fd3
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    the-real-index~RFe587923.TMP

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe587923.TMP
                                                                                                                                    • Size 48B
                                                                                                                                    • SHA256 80febf07c8cf791ff4a0b088be0c89417e62b7a6ad9bfff6c498f295b397b0d8
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 ae743b89b6737c728938acc9ede8272eed0f7a301bc19edc2c0901417e951ded
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 ff5683e323ea594cfa385e15b4d197093d7e369684a7570892f8f9c982037889
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 8eddc9e9731862732918df8bc8744dfc95ef3cc961604e43a0bc2775fecd7f13
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 77a66dd8e22eb87ec5eb2730810ff2d276cf56fac8af18392c80ea2ea8da7691
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 bb7236fd1e860129574077b231170e9afd43fbddcfdaa0b627d315bc74bc499c
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 60b4098cde03468ecc08e7e4f9dc37eec84555bf6eeffb4867f94582437eb317
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    TransportSecurity~RFe57e88b.TMP

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e88b.TMP
                                                                                                                                    • Size 875B
                                                                                                                                    • SHA256 f777988cad0f7ee7817f4b0ea9fa68ecfe320e11ce8be5925159ef819b485322
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    a6d582d4-1bdd-46e2-a57b-612eb9c76fdf.tmp

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a6d582d4-1bdd-46e2-a57b-612eb9c76fdf.tmp
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 ce5bccf307bf460b8308e249d40049dd708a2edf68431f3502d1950085c7b3a0
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 7cea32f88ad7b322fa5505a8d14d2d7e2ddfbb230753286d0efc2ab8c46ed5ce
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 e137ffc680ba2d936ad5a9e8ad076a4465b046e992533ca4b39c9119052e6549
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 26904a05640cfec1b69df66401d65112d7afb5fa084d7025e5d4ee00f12543a9
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 b5ad1c536461ad5013cd35809c47755d27a93257f9e808918de7dda80030001d
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 c74ddcf1cb23d38fbe48534c4e215ba0f7f25f97f2a149bb99df51d582d1e3db
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 0e12c7ac04a91c9ae15b4974c91bbf4af7e3d17487f589bb593d00ab71855781
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    Local State

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                    • Size 10KB
                                                                                                                                    • SHA256 8eb6308a6973a3c109a16c5112529ce06da990430491457d538142c447a24593
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    0BF39BCF2EC9BE0DB6BCD2D472A551AC131684C9

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\0BF39BCF2EC9BE0DB6BCD2D472A551AC131684C9
                                                                                                                                    • Size 109KB
                                                                                                                                    • SHA256 3c8cfc72a13b804c1f8a4ce0cbfe2b64dd7e16d809d312892274120dbbc046c8
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    5386253589D09F6437E215B7DD9D35AC8A9667C7

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\5386253589D09F6437E215B7DD9D35AC8A9667C7
                                                                                                                                    • Size 47KB
                                                                                                                                    • SHA256 e89c742bd59d1e623fad18aeda2e87034855a3e04ecb3f37067d89744b41f4f7
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    70F9110B15BE4CA3789C4E686EFE371A84369C0A

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\70F9110B15BE4CA3789C4E686EFE371A84369C0A
                                                                                                                                    • Size 33KB
                                                                                                                                    • SHA256 d3e26b1abc783df854badad8041e0d754cf6127c0d9e672c56c98a733723bb44
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    91327050A5D76DEDF98ADB9E359869511B7AF892

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\91327050A5D76DEDF98ADB9E359869511B7AF892
                                                                                                                                    • Size 28KB
                                                                                                                                    • SHA256 ea71b720481f3307c26cf89a9ce598d55a8fdcbec72c56c8bfa078d1d9cf75da
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    B244729BC80B4AC34542A2CF7ABB28C54E8B5AC9

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\B244729BC80B4AC34542A2CF7ABB28C54E8B5AC9
                                                                                                                                    • Size 29KB
                                                                                                                                    • SHA256 8c2b167634ba6fb74f57deb1d71d83ea15b81328ec8811b699b5be79f325aa4c
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    C496E7D04AE4066E547323445566A7404888E4BE

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\C496E7D04AE4066E547323445566A7404888E4BE
                                                                                                                                    • Size 29KB
                                                                                                                                    • SHA256 10f09454056e9cdd2041bd725e82cc836e9d12e20b313a55368ead5123750402
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    D922D15372A8404F674945B434E588950579928A

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\D922D15372A8404F674945B434E588950579928A
                                                                                                                                    • Size 26KB
                                                                                                                                    • SHA256 70e53ee8e62ade9869764c94030a6b0cf02a82c72ea33edca63138dd38925f38
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    DFF427F3036CB4FD84301A0F4A7459DEC961B2C3

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\eypn1lcs.default-release\cache2\entries\DFF427F3036CB4FD84301A0F4A7459DEC961B2C3
                                                                                                                                    • Size 34KB
                                                                                                                                    • SHA256 e6dbd41b2b66b4c66cf624d21a6c107976d023d18e5bab58d456a9435776da26
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    tmpaddon

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
                                                                                                                                    • Size 442KB
                                                                                                                                    • SHA256 a9f4281f82b3579581c389e8583dc9f477c7fd0e20c9dfc91a2e611e21e3407e
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    tmpaddon-1

                                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\tmpaddon-1
                                                                                                                                    • Size 7.6MB
                                                                                                                                    • SHA256 51f9acc8aa5a7e9b1fe20d813b637749d7bbdc08328f2e25a27d42c90fa3e477
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    data.safe.bin

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\datareporting\glean\db\data.safe.bin
                                                                                                                                    • Size 2KB
                                                                                                                                    • SHA256 3b097ae402fe0e63ef1548d1942fc29122da1ccfa115dda802fdd4fcebbaaeda
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    940dfcd3-6669-4c50-bb18-a97c72ed9045

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\datareporting\glean\pending_pings\940dfcd3-6669-4c50-bb18-a97c72ed9045
                                                                                                                                    • Size 746B
                                                                                                                                    • SHA256 463be836b786a441eed1c5d3695a5bc97931168edcf8d20415bc79db08bd6b2e
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    gmpopenh264.dll

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.dll
                                                                                                                                    • Size 997KB
                                                                                                                                    • SHA256 1ed7877024be63a049da98733fd282c16bd620530a4fb580dacec3a78ace914e
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    gmpopenh264.info

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-gmpopenh264\1.8.1.2\gmpopenh264.info
                                                                                                                                    • Size 116B
                                                                                                                                    • SHA256 f526e9f98841d987606efeaff7f3e017ba9fd516c4be83890c7f9a093ea4c47b
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    LICENSE.txt

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-widevinecdm\4.10.2557.0\LICENSE.txt
                                                                                                                                    • Size 479B
                                                                                                                                    • SHA256 2af127b4e00f7303de8271996c0c681063e4dc7abdc7b2a8c3fe5932b9352539
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    manifest.json

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-widevinecdm\4.10.2557.0\manifest.json
                                                                                                                                    • Size 372B
                                                                                                                                    • SHA256 e92d3394635edfb987a7528e0ccd24360e07a299078df2a6967ca3aae22fa2dd
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    widevinecdm.dll

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll
                                                                                                                                    • Size 7.4MB
                                                                                                                                    • SHA256 191e237d0514c917e722076a61fa81138fb8ddee580899a7685b59fc6292bcd7
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    widevinecdm.dll.lib

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.lib
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 33899a3ebc22cb8ed8de7bd48c1c29486c0279b06d7ef98241c92aef4e3b9237
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    widevinecdm.dll.sig

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\gmp-widevinecdm\4.10.2557.0\widevinecdm.dll.sig
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 68a03f075db104f84afdd8fca45a7e4bff7b55dc1a2a24272b3abe16d8759c81
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    prefs-1.js

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\prefs-1.js
                                                                                                                                    • Size 6KB
                                                                                                                                    • SHA256 061d8ae7bdc77a58e243afcb850c869df4128760a9e3ba0e5cf2bce571794ece
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    prefs-1.js

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\prefs-1.js
                                                                                                                                    • Size 7KB
                                                                                                                                    • SHA256 8daae9a3013819b85f3aeeb3f71a376c3381d71edccdb56419966a52e49a0ee4
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    prefs-1.js

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\prefs-1.js
                                                                                                                                    • Size 6KB
                                                                                                                                    • SHA256 0fe142b2db9eb6a38fadffcbadfd1beedefa2dd9c49118816ef7b380d70c8963
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    prefs.js

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\prefs.js
                                                                                                                                    • Size 6KB
                                                                                                                                    • SHA256 aefdc574abce9444707cbb8bdee10d78d90538598b1d49b9bfb557becf02d25b
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    recovery.jsonlz4

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                                    • Size 6KB
                                                                                                                                    • SHA256 cd1e1ebfcbbbae77f95329f6dd5376d1779a80ce50ce357df9d19d46a5c1332a
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    recovery.jsonlz4

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                                    • Size 1KB
                                                                                                                                    • SHA256 2b5e40dac21a31ac90d4df345f38ed919454e800a9360b35666a629937fa60f2
                                                                                                                                    • MD5 SHA1 SHA512

                                                                                                                                    recovery.jsonlz4

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\sessionstore-backups\recovery.jsonlz4
                                                                                                                                    • Size 6KB
                                                                                                                                    • SHA256 e9ce832d3146f77f22f8d8c19d4baf955cf6fa930c1e22805661b9ad87d775be
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                    3870112724rsegmnoittet-es.sqlite

                                                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\eypn1lcs.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
                                                                                                                                    • Size 184KB
                                                                                                                                    • SHA256 5963a566e0607a71f212fea506afdeb6716bb5b4a2a2329f17c297be628b7fcb
                                                                                                                                    • MD5 SHA1 SHA512 SSDEEP