Resubmissions

17/11/2024, 10:43

241117-mshetsyang10

17/11/2024, 10:42

241117-mrwaassmhp10

Analysis

  • max time kernel
    448s
  • max time network
    446s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/11/2024, 10:43

General

  • Target
    https://tinyurl.com/3kutdf88
  • Sample241117-mshetsyang

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL: [email protected]
  • A potential corporate email address has been identified in the URL: [email protected]
  • Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
  • Detected potential entity reuse from brand STEAM.
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 53 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://tinyurl.com/3kutdf88
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4564
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ea8346f8,0x7ff8ea834708,0x7ff8ea834718
      2⤵
        PID:4280
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
        2⤵
          PID:1752
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3524
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
          2⤵
            PID:1572
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
            2⤵
              PID:3060
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
              2⤵
                PID:4832
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
                2⤵
                  PID:1732
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
                  2⤵
                    PID:3976
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
                    2⤵
                      PID:3120
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
                      2⤵
                        PID:1924
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5708 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:964
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
                        2⤵
                          PID:1500
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
                          2⤵
                            PID:2828
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5088 /prefetch:2
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:4228
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2528 /prefetch:8
                            2⤵
                              PID:1064
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
                              2⤵
                                PID:1704
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
                                2⤵
                                  PID:2632
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:1
                                  2⤵
                                    PID:2692
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
                                    2⤵
                                      PID:1688
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
                                      2⤵
                                        PID:2476
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
                                        2⤵
                                          PID:1552
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
                                          2⤵
                                            PID:3608
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
                                            2⤵
                                              PID:4372
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
                                              2⤵
                                                PID:688
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1
                                                2⤵
                                                  PID:2856
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6480 /prefetch:1
                                                  2⤵
                                                    PID:1096
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
                                                    2⤵
                                                      PID:2008
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7488 /prefetch:1
                                                      2⤵
                                                        PID:4684
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
                                                        2⤵
                                                          PID:876
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7560 /prefetch:1
                                                          2⤵
                                                            PID:4808
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
                                                            2⤵
                                                              PID:4176
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7716 /prefetch:1
                                                              2⤵
                                                                PID:4380
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7352 /prefetch:1
                                                                2⤵
                                                                  PID:3660
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1
                                                                  2⤵
                                                                    PID:3556
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7844 /prefetch:1
                                                                    2⤵
                                                                      PID:1520
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1
                                                                      2⤵
                                                                        PID:3604
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1
                                                                        2⤵
                                                                          PID:980
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7552 /prefetch:1
                                                                          2⤵
                                                                            PID:4784
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8112 /prefetch:1
                                                                            2⤵
                                                                              PID:1020
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1
                                                                              2⤵
                                                                                PID:400
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7364 /prefetch:1
                                                                                2⤵
                                                                                  PID:1548
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6728 /prefetch:1
                                                                                  2⤵
                                                                                    PID:228
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4596
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8348 /prefetch:1
                                                                                      2⤵
                                                                                        PID:2660
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8372 /prefetch:1
                                                                                        2⤵
                                                                                          PID:2464
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8592 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5056
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8600 /prefetch:1
                                                                                            2⤵
                                                                                              PID:1832
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8872 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4020
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9080 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:4956
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9096 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:4752
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9324 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:1108
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9824 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:2192
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9852 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:4764
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7348 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5652
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10208 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5660
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10488 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5668
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10632 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5676
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10756 /prefetch:1
                                                                                                                  2⤵
                                                                                                                    PID:5684
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7340 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:5700
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11028 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5708
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,15911495898570804023,13208892294874199705,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9692 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:6404
                                                                                                                      • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                        1⤵
                                                                                                                          PID:1628
                                                                                                                        • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                          1⤵
                                                                                                                            PID:2568

                                                                                                                          Network

                                                                                                                                MITRE ATT&CK Enterprise v15

                                                                                                                                Replay Monitor

                                                                                                                                Loading Replay Monitor...

                                                                                                                                Downloads

                                                                                                                                77EC63BDA74BD0D0E0426DC8F8008506

                                                                                                                                • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
                                                                                                                                • Size 328B
                                                                                                                                • SHA256 fb6a982d9c3bb367355dc31a94477d25581df4629ff29c110cc2e00fa8490b5d
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                settings.dat

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                • Size 152B
                                                                                                                                • SHA256 23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                settings.dat

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                • Size 152B
                                                                                                                                • SHA256 86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                f_00001d

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d
                                                                                                                                • Size 67KB
                                                                                                                                • SHA256 1b36ed5c122ad5b79b8cc8455e434ce481e2c0faab6a82726910e60807f178a1
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00001e

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
                                                                                                                                • Size 62KB
                                                                                                                                • SHA256 df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00001f

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f
                                                                                                                                • Size 65KB
                                                                                                                                • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000020

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020
                                                                                                                                • Size 19KB
                                                                                                                                • SHA256 af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000022

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000022
                                                                                                                                • Size 19KB
                                                                                                                                • SHA256 8bb39a6f700638d352b26ee0cb86fe5fd1127397dbc18d50a5bf37eb9ef6519a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000023

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023
                                                                                                                                • Size 24KB
                                                                                                                                • SHA256 d6c997210287cecf290cc7c5cc99c13a46d874786d1747cace5f00713069e2a7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00002a

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a
                                                                                                                                • Size 78KB
                                                                                                                                • SHA256 58cf7a378014be774e0348655722edbf63b5470f6a4e84b19bb46e10349189a1
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00003c

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c
                                                                                                                                • Size 121KB
                                                                                                                                • SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00003d

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d
                                                                                                                                • Size 119KB
                                                                                                                                • SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00003e

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e
                                                                                                                                • Size 17KB
                                                                                                                                • SHA256 8d40f05f3d7b0c08cc959534185a4ec52963c06322e7c31dbf90266d9a0c6bfc
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000042

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042
                                                                                                                                • Size 120KB
                                                                                                                                • SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000043

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043
                                                                                                                                • Size 119KB
                                                                                                                                • SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000044

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044
                                                                                                                                • Size 214KB
                                                                                                                                • SHA256 7aaac84059c34ef8411061f5717fdee5aa08d7162c7307b4c5a507390f547c36
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000045

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045
                                                                                                                                • Size 167KB
                                                                                                                                • SHA256 c6d86a30917c54a75fa50f6db39a42c852ec80f5382ce4a454dc2d2b85c24d2a
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000046

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046
                                                                                                                                • Size 66KB
                                                                                                                                • SHA256 46228fc36edb4a2bd5d34f6bfc4506d43ec644d65a68a6aecabeb98b5b9f5144
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000047

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047
                                                                                                                                • Size 22KB
                                                                                                                                • SHA256 20bb9f25fdb4344ac2cae3eb3775ffcbbbfeb767c23ab3546477668a9b6921af
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00004e

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e
                                                                                                                                • Size 115KB
                                                                                                                                • SHA256 0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_00008f

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008f
                                                                                                                                • Size 99KB
                                                                                                                                • SHA256 72994185cb2873448f157cbf8cf0b6230abee6886060fdbf6d814be95e1e92a3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_000090

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000090
                                                                                                                                • Size 301KB
                                                                                                                                • SHA256 354c6c445fcf51eaf0711b2b75da027164476590e4c66807711b2e3094183345
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_0000ac

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ac
                                                                                                                                • Size 67KB
                                                                                                                                • SHA256 07fba84e209fffc2a8eea1a88ec8c77cc92644c9050b7669b212bf1db30663b3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                f_0000b1

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b1
                                                                                                                                • Size 27KB
                                                                                                                                • SHA256 18a3f7ce9590bef7ee3d5704d595491846e8bcfea627ea69e5827fb14b194632
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                06e6f9a7335273e7_0

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06e6f9a7335273e7_0
                                                                                                                                • Size 708KB
                                                                                                                                • SHA256 c74fccf459aa0b9fb5390fbf709a7503f64c6e1e16197a10129e05317a0ba202
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                4c307b02b4dcc58c_0

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c307b02b4dcc58c_0
                                                                                                                                • Size 228B
                                                                                                                                • SHA256 6b8a093d5904543c5518a9f4ca10d3641b2453ada32449d615e9b61279d67394
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                801a2c3f9f38db44_0

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\801a2c3f9f38db44_0
                                                                                                                                • Size 311B
                                                                                                                                • SHA256 1e3f2b76d08ddc5e6f4c17a52dec9a5e71ff018437b1ba912dc585922d942ee3
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                the-real-index

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                • Size 528B
                                                                                                                                • SHA256 547881e4ec8389b66550fa238771dbb644bf798de905e558d16da934117e365e
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                the-real-index

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                • Size 432B
                                                                                                                                • SHA256 a057e7fc26d1652b49da30b2b599075d0d3767b9546ad5b9a0662239e4b54820
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                Network Persistent State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                • Size 871B
                                                                                                                                • SHA256 9ad156348a2fc0fd69faa91867cf652db61cbe707b9fb380bd140e95bc46a00f
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                Network Persistent State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 4c52654b9563ccc02316761907565e79e90cacba049510177d3318045f86d9b0
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                Network Persistent State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                • Size 11KB
                                                                                                                                • SHA256 5145a3bb2c0f10acce46b46e6e01eb134b4ac4db1af52b861f9fb8a23eb923b0
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Network Persistent State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                • Size 14KB
                                                                                                                                • SHA256 f2fce0ae0cb4e4821a9a2623a7fe1165efaac07d6f9d6902fa7a4a047885ecfa
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Network Persistent State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                                • Size 871B
                                                                                                                                • SHA256 1671be7e545bece73738ced992c7ac7d0ea69c7a78b5bc668725967250b8d8cf
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 e880bd34ace22bc974bc499521edaee1726210b076611a3b552d056cd166074d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 8KB
                                                                                                                                • SHA256 4798898abed09abd9a9f3dd4881eb503e888f12a402df450ee822563e65b2ced
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 577be9259cf674a64a2110aee827d2f3b0b04703ce393d7e882f9b9fd1a1643b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 110e621fee3e811f65b647f3ab1fd7f26ad9d6bae5c2a5185eeaf94e5e427b4b
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 9KB
                                                                                                                                • SHA256 018079a4063708fd40947bd37f4f4cb5e21341176d8724e80a4d67d886b8b885
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 5KB
                                                                                                                                • SHA256 93aadd277472d1037eb98d24dfe510107a1fd45cdfcba152c791c63acfee94e9
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 17KB
                                                                                                                                • SHA256 102f6f06b9ae1f1003ac9e4f60d1834f332cfd47efca15e1d951add9829d4e32
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Preferences

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 7a5d656d4c33325a319d2f551f08f75c61dbe19516f3081d10831ec0db3905bf
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 a74161024e1223c147c2cc40bf60015e6f71da2d00fbb5b94b47eca9eda24fbe
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 1e4afb2e83119f185f82710379d4eee01a432429cb66481e1547183261944e1a
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 cc1f7e031574e93c855979f4e24a30b1c321148ee5e9401d8b3da9d25904e0a3
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 509ac3aaca5dac40999f97e42b951ca346b07910648d059e90f623054850ff2c
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 370b02d904bb530a918bc80a423558faf22a90b8b573008256d3d7825f3cdde7
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 9da1880d88ac4d853d91759fda4597a312ecfb2bc37dd8ccfa36bf7eb125eb65
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 377eed72fb56f836849af33ec9031743df26a68eb5474eb620ec19c662228f74
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 cd410f44773fc7756cc925adf7ac62f1956a17c7c2dc5504d9b02590cad77588
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 5KB
                                                                                                                                • SHA256 318e8b705a4dc5a333e1da991e81a6d545d0f18132b23fb7cd88ab533f91e577
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 7515e0051e5749c696740e91c400527810a02e171607fd5a941d8f0be6341b97
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 ea4c51ecef8f0245fa6c9f986cdf4eb300ce9d45dcda522b3f3bb07d61aef6f6
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 67ba598182089f75451d8e421001418d4cac61791bb61c1794730f17a351f541
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 2KB
                                                                                                                                • SHA256 b57813ec0035166ba19d4323c41eafc46004dd8a4f8375878d354bd6f8a17198
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 0d0f8de0e28dcabd5c462a9a39b9c8cf119f3d9a115005cfb3676f7617e8773d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 d904e008d6c266f5ce354666d7428f98deb3d812e5417ae02df47b916a32db52
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 b7722657a919644ef3d7bf936de5a93630f6c595027b15119de0fc7ee075054d
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 6f960c093cca226c6f8bcc9dd7ad527cd197cc1994a3ec524ce9defc2a328fff
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 9aa2f1e25b851b4a9cf3967b9fbebe595086e0b5fc8f00a612e2633be385faef
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                TransportSecurity

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                                • Size 1KB
                                                                                                                                • SHA256 0810e872cce7c93dc08d264cf407e1eb3267b7a126457466a9703477b5f56012
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                TransportSecurity~RFe5a2339.TMP

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5a2339.TMP
                                                                                                                                • Size 874B
                                                                                                                                • SHA256 bb802af7b1fdedef9b497c7691a9583ea08b7a75ca570756c9c4900e14bdee1f
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                CURRENT

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                                • Size 16B
                                                                                                                                • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                                                                                                                • MD5 SHA1 SHA512

                                                                                                                                eaad9584-2ff6-4177-bf28-d809ee52c905.tmp

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eaad9584-2ff6-4177-bf28-d809ee52c905.tmp
                                                                                                                                • Size 6KB
                                                                                                                                • SHA256 449afa967e7c8bdd137c2cf56c559fa2f4cc261956dea3a78d4a80f4e56c3ece
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                Local State

                                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                • Size 10KB
                                                                                                                                • SHA256 b996d691760ab65569005af482a4d46f06db6db6da3b6eb41e3d86d1037e79f7
                                                                                                                                • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                default.dic

                                                                                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                • Size 2B
                                                                                                                                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                • MD5 SHA1 SHA512