Analysis

  • user interaction
    yes
  • max time kernel
    87s
  • max time network
    84s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/04/2026, 07:54

General

  • Target
    http://sessionbuddy.pages.dev
  • Sample260420-jrt6fsct4p
Score
4/10

Malware Config

Signatures

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of FindShellTrayWindow 41 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://sessionbuddy.pages.dev
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3912
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff8e0e3c188,0x7ff8e0e3c194,0x7ff8e0e3c1a0
      2⤵
        PID:4588
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,17628214124285475045,16749808443791932748,262144 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
        2⤵
          PID:3352
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,5328488287190277561,8471298373932662495,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
          2⤵
          • System Time Discovery
          PID:64
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2552,i,13406911832677708957,12381396195681680674,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:8
          2⤵
            PID:3144
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3392,i,4274500641973459404,8218585993459520119,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
            2⤵
              PID:1932
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,17811858304979338567,12523048019790760813,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:6004
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4940,i,16603451693998135328,16679748404559179926,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:1
                2⤵
                  PID:5552
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,12862539078644566444,1117600876270482437,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:8
                  2⤵
                    PID:3460
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3632,i,4137572497837884814,9641980463349448393,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
                    2⤵
                      PID:2896
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3964,i,12156274993019085354,14512013250177142979,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:1
                      2⤵
                        PID:5292
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5516,i,16634301760222248005,14731631020294472455,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:1
                        2⤵
                          PID:3820
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5268,i,2927930081466373527,14176912663840693453,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
                          2⤵
                            PID:2396
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5204,i,1014619732539973372,4116314613151965113,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5292 /prefetch:8
                            2⤵
                              PID:5396
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,8149061308438116466,8375990658433600859,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
                              2⤵
                                PID:2300
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,8149061308438116466,8375990658433600859,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:8
                                2⤵
                                  PID:4976
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6488,i,4295938845355611045,16428508739332474899,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:1
                                  2⤵
                                    PID:788
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6368,i,15700522780746524413,9981171989798327714,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8
                                    2⤵
                                      PID:5696
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5308,i,12578055644361481803,17481520798783599467,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:8
                                      2⤵
                                        PID:1728
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5800,i,7846632182317307509,5743655059981180351,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
                                        2⤵
                                          PID:4868
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,9138201274460511748,448631483052087307,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6872 /prefetch:8
                                          2⤵
                                            PID:1672
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6840,i,15275903330746388342,4755376017006513724,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
                                            2⤵
                                              PID:2312
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6908,i,2836426230620146464,13755964401870892254,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
                                              2⤵
                                                PID:2328
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5292,i,406586932746430519,10187738399420439420,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
                                                2⤵
                                                  PID:2300
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5616,i,12354957756738824229,15303696825207248668,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:8
                                                  2⤵
                                                    PID:1728
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,5249100501076267192,5132053151317340785,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5608 /prefetch:8
                                                    2⤵
                                                      PID:2068
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,9065574345074034650,6945695698425361570,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:8
                                                      2⤵
                                                        PID:4496
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6856,i,2479069393142953560,13266490206955660310,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=4948 /prefetch:8
                                                        2⤵
                                                          PID:3716
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=5604,i,2434819209664220114,8898372761514532447,2097152 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:2
                                                          2⤵
                                                            PID:3600
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,277566873239136471,1885974309911328765,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
                                                            2⤵
                                                              PID:2896
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,12917543296408159007,6256042122922994746,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:8
                                                              2⤵
                                                                PID:1228
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5464,i,12917543296408159007,6256042122922994746,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:8
                                                                2⤵
                                                                  PID:1720
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,16616468716019526118,16806905662319905512,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=7064 /prefetch:8
                                                                  2⤵
                                                                    PID:6084
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,15440666104400562904,5577456388540720909,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:8
                                                                    2⤵
                                                                      PID:4004
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,16956061669116024819,14708770477308789774,524288 --field-trial-handle=2204,i,4991547516720227988,11392442681367460978,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                                                      2⤵
                                                                        PID:4492
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:2304
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                        1⤵
                                                                          PID:2440

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping3912_552771086\manifest.json
                                                                              • Size 79B
                                                                              • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              0a5416db-9415-4d69-96c5-c6cabad47700.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0a5416db-9415-4d69-96c5-c6cabad47700.tmp
                                                                              • Size 17KB
                                                                              • SHA256 41003727daddd3bfc3b7e1377c0dc9aa5b9ef0fa2686bbf84f873bb4d68fd35e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              BookmarkMergedSurfaceOrdering

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                              • Size 6B
                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                              • MD5 SHA1 SHA512

                                                                              BrowsingTopicsState

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                              • Size 414B
                                                                              • SHA256 3b5c6a97d3242e8caa81f3d0fbf0ba6dff5438a087d764c35bf5f8b0ce46a797
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                              • Size 4KB
                                                                              • SHA256 9ed53309946abd0c394b6b9328fe3c163f1ac3b99698106f02424668d34f9cf9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 4KB
                                                                              • SHA256 d5aed2c8516f1f8351a7693c6e713170a2c183b1d48c9e27557490863dd4f447
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index~RFe58b987.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b987.TMP
                                                                              • Size 3KB
                                                                              • SHA256 aa9390caeb7293945a7e3ed80aa538d228b25046c70e0c8b7c873955b53a13ad
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              SiteList-Enterprise.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                              • Size 2B
                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                              • MD5 SHA1 SHA512

                                                                              messages.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\_locales\en\messages.json
                                                                              • Size 4KB
                                                                              • SHA256 9b8df42bb3c03f19667c78e0113a067a03611fd0e8c6fde8f1cfa08bd2033281
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              verified_contents.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\_metadata\verified_contents.json
                                                                              • Size 7KB
                                                                              • SHA256 e16309d96db94876143f03958d78d73ef093ef75231ebf0a716612b1f6f60acc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              logo-128.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-128.png
                                                                              • Size 4KB
                                                                              • SHA256 1cc97bcd60552c49f5cc5b8cd83d7649ef697d9c2aabf2039e10b19f502c3329
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              logo-16.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-16.png
                                                                              • Size 666B
                                                                              • SHA256 95ded9f7a7c156f23e071be9a348b1a76b69456c5ab8ae4c1c891170912f2a30
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo-19-gray.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-19-gray.png
                                                                              • Size 3KB
                                                                              • SHA256 2debd94a2e609abff8f96418af80eb3c074a528f35cc26e0a8321300a65f078d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo-19.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-19.png
                                                                              • Size 808B
                                                                              • SHA256 5460dd3b1e2cb443c583340d51dce27dd2d9c862b5472a8b239813bea82e4fc4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo-32.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-32.png
                                                                              • Size 1KB
                                                                              • SHA256 8c5d734073e3e88ce9fa2eab6e09871126e804ca101c2adc34885cbab00d92bb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo-38-gray.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-38-gray.png
                                                                              • Size 4KB
                                                                              • SHA256 cca7aa28824b320ae9b42682f862f19a8aeb2f4ef2c508dfea36e175b318f1e2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              logo-38.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-38.png
                                                                              • Size 1KB
                                                                              • SHA256 ede3ebefae3de2960ed0049b56695603f9bab3f9af6c46cb9b07fdaaec1b5809
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              logo-48.png

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\assets\logo-48.png
                                                                              • Size 1KB
                                                                              • SHA256 30f11ebb24ddd304171b5ded6b54341b7d7c004f626c40c2a02995d4172f64c2
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              background.bundle.js.LICENSE.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\background.bundle.js.LICENSE.txt
                                                                              • Size 2KB
                                                                              • SHA256 5042e3200c3c80eab1b3250e85c7e6fe22ae9185ce19fd0092936199d8bc22ff
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              experiments.bundle.js

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\experiments.bundle.js
                                                                              • Size 877KB
                                                                              • SHA256 8939de9c51a7041851ec827fb985a0328f2b7d76c3511d6c1e3bb11165828491
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              experiments.bundle.js.LICENSE.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\experiments.bundle.js.LICENSE.txt
                                                                              • Size 2KB
                                                                              • SHA256 9aa38c385feee4179aba4a12b08b0deda60a0a3e08e03e9a9b09f6da8571262a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              experiments.html

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\experiments.html
                                                                              • Size 933B
                                                                              • SHA256 8341e10189317946a158ead8df100512b4915d0b64e139380e61477b17996e34
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              favicon.ico

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\favicon.ico
                                                                              • Size 14KB
                                                                              • SHA256 018a822440ff56c571cb66700d6049b476d14cd154fc9fc437af7c0242954ca4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              fonts.css

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\fonts.css
                                                                              • Size 1KB
                                                                              • SHA256 e3d32686c62956f587fbed82e45efb882a1a16a8ca51099a3db1cad7833d62f5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Roboto-Latin.woff2

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\fonts\Roboto-Latin.woff2
                                                                              • Size 39KB
                                                                              • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              main.bundle.js

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\main.bundle.js
                                                                              • Size 1.6MB
                                                                              • SHA256 6e426ed27cc1ca9ee995ea33b0315cc48845be29011c7901f2d32566f6f1eaf0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              main.bundle.js.LICENSE.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\main.bundle.js.LICENSE.txt
                                                                              • Size 4KB
                                                                              • SHA256 812dcc5ddf19c78c18e8e9321a3a244396b42e79351bfd742c1a8fcecb1cacb9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              main.html

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\main.html
                                                                              • Size 472B
                                                                              • SHA256 e1b915d2eb8a90a0d49b9879ab077fa67345d9fe9981d77bd6ccba1dda5c7b7c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              redirect.js

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\redirect.js
                                                                              • Size 96B
                                                                              • SHA256 3cfdfc2530d7e7356cc94b8066b33ed800d87ba21b6fff6adbfc0e62f110134a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              session-buddy.html

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\session-buddy.html
                                                                              • Size 920B
                                                                              • SHA256 fa074dbfde4d7bca96fae10ef69343ea13b69f08393ec05104f66afb07e50933
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              set-background-color.js

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\set-background-color.js
                                                                              • Size 365B
                                                                              • SHA256 eede390439d3c8bc254228efd50f4c5b58d5d9fc5250aee9c41e62877044788a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              audible.88e86ca0.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\audible.88e86ca0.svg
                                                                              • Size 567B
                                                                              • SHA256 aca7c3d8d2cd689e9a921f122c0eacf4b2a5c833856e8e8e8926d053ff7ce08e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              backup.7cae9415.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\backup.7cae9415.svg
                                                                              • Size 328B
                                                                              • SHA256 1a80c00c8815c8831719302fbe396d37e0c0477d76d5b65cb732e9baf4e12454
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              browser.05a7d92b.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\browser.05a7d92b.svg
                                                                              • Size 852B
                                                                              • SHA256 c8007199547946a28a4759329e2ec2c0a9e9e7f9a916558e7947b939a5d19454
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              camera.47c0f519.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\camera.47c0f519.svg
                                                                              • Size 467B
                                                                              • SHA256 fccec6dc510f0867e4d6b880692d59a6c6b28bb7fc54fb16d6bf2b61e13cba60
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              collection.cef5c22f.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\collection.cef5c22f.svg
                                                                              • Size 337B
                                                                              • SHA256 07994fa34cf57a3b650f4d7e987faa296da6e9a1aeb82f22718e00d16df57022
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              copy.fb8e9e29.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\copy.fb8e9e29.svg
                                                                              • Size 341B
                                                                              • SHA256 67fb6b4e3752cfaffdfdc69a2552958f65a756045decefd1dcca7e62d5e71035
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              defaultFavIcon.fe38ca90.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\defaultFavIcon.fe38ca90.svg
                                                                              • Size 465B
                                                                              • SHA256 970353775ab741ef392e02f697b18393d4fcb46b2955e0be1273562a8580879a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              export.e1ca2ea5.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\export.e1ca2ea5.svg
                                                                              • Size 655B
                                                                              • SHA256 caf170217dc44ddaed537c831f45e95b176de763eb2fb89dfbf0708ab4849bd1
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              file-bad.b6cfda1d.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\file-bad.b6cfda1d.svg
                                                                              • Size 341B
                                                                              • SHA256 ca49119736890288105d33c76dc2de97e02ae322db50dbd7ffc262e1a15bdc63
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              file-good.01633e3f.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\file-good.01633e3f.svg
                                                                              • Size 317B
                                                                              • SHA256 36f43617280032acc07671835c553cbb8ce4f3bb3dd976739dab768ba2e4c1f0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              file.1b29a43b.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\file.1b29a43b.svg
                                                                              • Size 300B
                                                                              • SHA256 47ce6cc60b203a9a82dc6310c75d2dc78b61c3ee493750225f011dc72905fd47
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              flask.556746aa.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\flask.556746aa.svg
                                                                              • Size 360B
                                                                              • SHA256 476476fd59bfc8345b8e670607327f2d82197086b48171d8403d351338eb4f71
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              folder.8e4f19a9.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\folder.8e4f19a9.svg
                                                                              • Size 229B
                                                                              • SHA256 4fdd7183923cc5e9d8727c94f06974e9a3a0830fce0aed4ba568d51c63643939
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              heart.92121ab8.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\heart.92121ab8.svg
                                                                              • Size 260B
                                                                              • SHA256 c0710bcc9e31f93a07bad81bd7f23789e2f6dcb887cf2d0b67c66c9ce9cbccf6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              history.8e2161ee.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\history.8e2161ee.svg
                                                                              • Size 489B
                                                                              • SHA256 5215c0bd7155f693f47f354c5f20099ca5a8021cd16d7fee78b5d1cfe0182047
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              import.bcf00459.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\import.bcf00459.svg
                                                                              • Size 743B
                                                                              • SHA256 281892f848c80d687399277ef0d5b4ba732045c04111fad1ddd2a228bd0321e5
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              incognito.93e05646.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\incognito.93e05646.svg
                                                                              • Size 556B
                                                                              • SHA256 06f0685e9127126d2064bd0eabba02aa9774793d16c1379f0f823466a2d86f3f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              markdown.a44a5214.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\markdown.a44a5214.svg
                                                                              • Size 434B
                                                                              • SHA256 a4a8b23e3a0423553fddb90a1649f708b8fdd7f5a6f14742563d59ec095b7666
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              paste.6b47d7c7.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\paste.6b47d7c7.svg
                                                                              • Size 333B
                                                                              • SHA256 61735cb1d840d6e3daa6802307beacebebc658ebd5dabed2bc451a2b1b485da1
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              pin.c5d766dc.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\pin.c5d766dc.svg
                                                                              • Size 230B
                                                                              • SHA256 ad362dcb33a74281a9926a8020ab78fd0f6cfd6ae1f1c48334fdf054aa039ea4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              search.aded04d4.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\search.aded04d4.svg
                                                                              • Size 419B
                                                                              • SHA256 7a8cfb2b22c4575773a15115326fd673a6f94e00d5db3eda19bb138d35224873
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.d9a609ac.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\settings.d9a609ac.svg
                                                                              • Size 1KB
                                                                              • SHA256 cf2e538da3ed21802016d25b1d729474f8d34526fd63de3a8e60ca145659f631
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              sort-a-z.1a426966.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\sort-a-z.1a426966.svg
                                                                              • Size 513B
                                                                              • SHA256 767481c4ec955a86eddad41c1f914388fcb8d515a44744a6bb52c3ce0521a746
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              sort.040e0bd4.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\sort.040e0bd4.svg
                                                                              • Size 217B
                                                                              • SHA256 4d132f9151bc87b2d38cf5ab063daad9df35fcbed9299fb60064faf13d4f26fc
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              this-window.06beb4e4.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\this-window.06beb4e4.svg
                                                                              • Size 397B
                                                                              • SHA256 2bfe76576da9ea175e093693263340cddd335a3e1baacbe7c63054f634a4b319
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              tip.db7b4400.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\tip.db7b4400.svg
                                                                              • Size 349B
                                                                              • SHA256 d020c05b969043cf569913ab7e0197a8efd921bb25c665941188dfc996bc6651
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              trash.3ac91024.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\trash.3ac91024.svg
                                                                              • Size 395B
                                                                              • SHA256 a6d9bb70cafb48ae1f65f16c8a07478791ca0361a31de370488fe42e18a9d285
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              unify.8b333273.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\unify.8b333273.svg
                                                                              • Size 423B
                                                                              • SHA256 926071d367433f1a6015b8fc161ec2170aff632dc9ad641659d590bed903ab6c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              unpin.ec846b8d.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\unpin.ec846b8d.svg
                                                                              • Size 331B
                                                                              • SHA256 0c8fc5c70496f7236123fb33f27ff4590b19d867cb2a5d39b170e397e6f29730
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              window.6876e8c0.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\window.6876e8c0.svg
                                                                              • Size 229B
                                                                              • SHA256 d6addb23bd9c9f1207e1590d893276807d4fc90e5eb27339e1d93bf44f07594a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              windows.566dfa67.svg

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3912_1636850488\CRX_INSTALL\static\media\windows.566dfa67.svg
                                                                              • Size 339B
                                                                              • SHA256 ed227dd0f04b2e74e7286b004cc97f2870eaa0e763158f816de195c07d8e7f56
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              HubApps

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                              • Size 106KB
                                                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                              • Size 8KB
                                                                              • SHA256 ea3c2b2294844b4fd842e2550b507548ee5d0de863fc70d5181d6dd7407dc91e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              SCT Auditing Pending Reports

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              Sdch Dictionaries

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                              • Size 40B
                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                              • MD5 SHA1 SHA512

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                              • Size 16KB
                                                                              • SHA256 e787b853f2ac55d6635c3beab09ef441cc1856fe3c62aac7746920d184fea3d0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                              • Size 17KB
                                                                              • SHA256 32ff5187a5daca87274f41316ebb21f6f78025c4c8c0002a2169c5fc2b9456e5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                              • Size 15KB
                                                                              • SHA256 f15e5ec2e29469366cddf7bf397b135a7dda6bb0b23c25d40d58b8ad0e2b66c5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                              • Size 35KB
                                                                              • SHA256 f2116d1d9b453935b1a9085048c6a4b185f3de01e90e431401f10c33158a1b20
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                              • Size 35KB
                                                                              • SHA256 cd416db74ccc603182cdc1c0bf2ae692c322f915759edfe7510fd0f988f2614f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 72B
                                                                              • SHA256 8881ef907ce1d857b27765cd160ff5bab96b297ee8ceb7adcde769ad5d95d393
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index~RFe597a37.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe597a37.TMP
                                                                              • Size 72B
                                                                              • SHA256 712cb05f5ceb53929995d07498b2401f7cdd0de5c595b29ea0f39ad8ad41998d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              sync_diagnostic.log

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                              • Size 26KB
                                                                              • SHA256 92299233dc95161f29a76d498a1067ef5164b2dd756cca8231f1a0eb2ac48c7f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              CURRENT

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 26KB
                                                                              • SHA256 dc3c0a60cd87bff87a62403ec6a391b1a5620e9f0a6baf00b381dfd70bd28f60
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 24KB
                                                                              • SHA256 a6bc47404712820055ae69d0e8dc239c137e6072ad75c6a9ba5f4c9f47ac392b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 c12f4ac813023487b5a233268767517332757067fef4279519fc2c2c48ddc38f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 3184257004cfa20dd6afe5f730358d879650b5dfb3689530117f5e5866596ef3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 f7dd7a1d55bdff7512aa4c3fb0d1552c28e2b9e1579e1fed1256875a324cd88a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 5c13e33b5c7d994369bbd126de6e4d8a3e6790fa7a1d1a6fa0aecad2255d377e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              keys.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                              • Size 8KB
                                                                              • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 65f5cbf1be31936b1103e00122a60bb3ba7462d8832ac1f484dd6865116eeb10
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                              • Size 147KB
                                                                              • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                              • Size 132B
                                                                              • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                              • Size 2KB
                                                                              • SHA256 6006ab96a85876b2514c00bc0d0b535c6b229ad1766bc37914c6ce7b97b6fc85
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              db609118-d5a2-4c3e-bfba-ecfbe880146c.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\db609118-d5a2-4c3e-bfba-ecfbe880146c.tmp
                                                                              • Size 1B
                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                              • MD5 SHA1 SHA512

                                                                              background.bundle.js

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3912_322776684\CRX_INSTALL\background.bundle.js
                                                                              • Size 676KB
                                                                              • SHA256 e1c6e9bd1bbd99f1452ad0c765edecf4e5cb732b3bf357d3a47fd3ffc0bbe3c0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              manifest.json

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3912_322776684\CRX_INSTALL\manifest.json
                                                                              • Size 1KB
                                                                              • SHA256 3df8fc9c68ddb2e6b20642bc38dfde6da9f742f3f45a439d17223ed6da9b5ad0
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              edacconmaakjimmfgnblocblbcdcpbko_56853.crx

                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3912_322776684\edacconmaakjimmfgnblocblbcdcpbko_56853.crx
                                                                              • Size 844KB
                                                                              • SHA256 126b09b50d39f20cd22653e05096a7baaf922ae3f1b970f0cc42066df4115b56
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH