Overview

overview

8

Static

static

1

URLScan

urlscan

http://Instagram.com

windows11-21h2-x64

8

Resubmissions

22/04/2026, 04:09

260422-eq9gjacw7x8

22/04/2026, 03:31

260422-d26pcab16v8

Analysis

  • user interaction
    yes
  • max time kernel
    1048s
  • max time network
    1050s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    22/04/2026, 03:31

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://Instagram.com
  • Sample260422-d26pcab16v
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Loads dropped DLL 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 44 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 53 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of AdjustPrivilegeToken 42 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://Instagram.com
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4932
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x280,0x7ffa765cc188,0x7ffa765cc194,0x7ffa765cc1a0
      2⤵
        PID:2604
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1740,i,3301511363323319265,8524000152889635307,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:11
        2⤵
        • System Time Discovery
        PID:1776
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1584,i,2855643141269721912,5873317045413492344,262144 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:2
        2⤵
          PID:1712
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,6290835316541135089,11649340380650688645,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3100 /prefetch:13
          2⤵
            PID:2956
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3500,i,8487842238844023766,7175540695132677098,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
            2⤵
              PID:3856
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3504,i,10722299383659921901,10814777574150223407,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
              2⤵
                PID:1328
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4092,i,18253468001829381203,5796901564276097348,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4080 /prefetch:1
                2⤵
                  PID:2316
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4036,i,9641900385606955477,23638693694870408,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:9
                  2⤵
                    PID:4388
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4112,i,4630356602098815541,12428570593653938086,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4184 /prefetch:1
                    2⤵
                      PID:4552
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4124,i,9902542693420552342,1078577375231436580,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:9
                      2⤵
                        PID:2476
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,9028399926174542827,14864955175870993009,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:14
                        2⤵
                          PID:680
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4080,i,459587676208052884,17058717937960028968,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
                          2⤵
                            PID:648
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,14268734821052379239,15414356019872698818,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:14
                            2⤵
                              PID:2644
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,18108986671249116530,2247341208313740464,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:14
                              2⤵
                                PID:3144
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,7041070425641832645,12856940019322732690,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3800 /prefetch:14
                                2⤵
                                  PID:1696
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6108,i,13704331443397868037,13696786536433771400,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
                                  2⤵
                                  • Suspicious use of WriteProcessMemory
                                  PID:896
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                    cookie_exporter.exe --cookie-json=1140
                                    3⤵
                                      PID:4480
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,10127486571723312271,13776643318494767777,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
                                    2⤵
                                      PID:3248
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,10127486571723312271,13776643318494767777,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:14
                                      2⤵
                                        PID:4272
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,9006131490420978760,5362409930121485565,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:14
                                        2⤵
                                          PID:1740
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,14777207887597782240,2444922150858049964,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:14
                                          2⤵
                                            PID:4404
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,3445268722250941201,8867455958821203393,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
                                            2⤵
                                              PID:2532
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6392,i,3750321875588354085,3928694480385318301,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:14
                                              2⤵
                                                PID:784
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6892,i,6957309970210815432,12335580200979708779,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
                                                2⤵
                                                  PID:3584
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4584,i,2018353704669854097,1710369815626353770,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4544 /prefetch:1
                                                  2⤵
                                                    PID:3156
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6976,i,13160076269663143708,4034366146700443008,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
                                                    2⤵
                                                      PID:3844
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4520,i,9931012214254839825,8773315162680734393,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:1
                                                      2⤵
                                                        PID:2532
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6872,i,14022160274345177403,17836159092700692912,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:14
                                                        2⤵
                                                          PID:2644
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6800,i,15919911137435566758,4008306799523415147,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:14
                                                          2⤵
                                                            PID:2920
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,14796955958386071115,7902148042696221409,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:14
                                                            2⤵
                                                              PID:2368
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6892,i,7637460496495210548,14328507888383681400,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
                                                              2⤵
                                                                PID:4676
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=4568,i,3348920878000850140,5098576335351248076,2097152 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:1
                                                                2⤵
                                                                  PID:4440
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5492,i,11815041641274014064,629433988166954095,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3788 /prefetch:14
                                                                  2⤵
                                                                    PID:868
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6292,i,7311147904194016394,15083353667045739335,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4088 /prefetch:14
                                                                    2⤵
                                                                      PID:2012
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,13775856607289262143,16659034909620231377,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5728 /prefetch:14
                                                                      2⤵
                                                                        PID:2484
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5404,i,2316018725084333718,9607945863314006011,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:14
                                                                        2⤵
                                                                          PID:4812
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6864,i,12572801159161188236,4719839023582255522,262144 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:10
                                                                          2⤵
                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                          PID:2860
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,1697488583223722524,16264618746120370735,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:14
                                                                          2⤵
                                                                            PID:4500
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,16794926556763390985,8603795993991799598,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
                                                                            2⤵
                                                                              PID:1696
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,18181164447026455557,2387601314408499817,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:14
                                                                              2⤵
                                                                                PID:3876
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5636,i,17068201551067263735,6644830293017092555,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
                                                                                2⤵
                                                                                  PID:236
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,10854721867108096237,13018381032540196806,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:14
                                                                                  2⤵
                                                                                    PID:3944
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,12289868588900397761,6357174687361806346,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=7116 /prefetch:14
                                                                                    2⤵
                                                                                      PID:3804
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7068,i,9882096946286013973,16591343481870863705,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
                                                                                      2⤵
                                                                                        PID:4872
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,1472393541656210006,2656424145064961705,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:12
                                                                                        2⤵
                                                                                          PID:4016
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5628,i,10163484580237418925,7011540941433422852,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:14
                                                                                          2⤵
                                                                                            PID:1616
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,2277578655127762223,2486563151634431646,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:14
                                                                                            2⤵
                                                                                              PID:1400
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5552,i,14253753753097870607,11491319711329081380,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:14
                                                                                              2⤵
                                                                                                PID:1412
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4548,i,9629881853721007185,18407837665913213669,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:3576
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5588,i,15260735156508333305,6772269236156652674,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:5404
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7048,i,952801318236992566,14663552874166189731,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:5796
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5620,i,12217315322733834246,16762117532045634215,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=3476 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:4272
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4408,i,12657582517547966661,16779944183908432306,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:5164
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,1530444252228153780,17252962971246221006,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
                                                                                                          2⤵
                                                                                                            PID:4540
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4604,i,7522711391921160895,9318267980016457107,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
                                                                                                            2⤵
                                                                                                              PID:3948
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2784,i,8827633286494329247,14166532920249388895,524288 --field-trial-handle=2384,i,8009321013214891682,9424396965400554742,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:5988
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                              1⤵
                                                                                                                PID:1872
                                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                                sihost.exe
                                                                                                                1⤵
                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                PID:484
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe /LOADSAVEDWINDOWS
                                                                                                                  2⤵
                                                                                                                  • Boot or Logon Autostart Execution: Active Setup
                                                                                                                  • Enumerates connected drives
                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                  • Modifies registry class
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                  PID:1760
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                • Modifies registry class
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:2628
                                                                                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                1⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                • Modifies registry class
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:3256

                                                                                                              Network

                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                    Replay Monitor

                                                                                                                    Loading Replay Monitor...

                                                                                                                    Downloads

                                                                                                                    blocklist
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                    • Size 105KB
                                                                                                                    • SHA256 538c1a0bded49157881b1c0e111a58732912def07977f599efb60ebb986ecbbb
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    protocols.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    autofill_bypass_cache_forms.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                    • Size 161B
                                                                                                                    • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    edge_autofill_global_block_list.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                    • Size 6KB
                                                                                                                    • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    v1FieldTypes.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                    • Size 509KB
                                                                                                                    • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    crl-set
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                    • Size 22KB
                                                                                                                    • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    settings.dat
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                    • Size 280B
                                                                                                                    • SHA256 72b205beb453f50e17a365601deeef9544c1fb0a6c7471fff4fe6b93111db2cf
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    settings.dat
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                    • Size 280B
                                                                                                                    • SHA256 717eb4940c7fbe87ab8f0b600d1104c8a67cd4b09b0beada521544a45bbe175d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    242ec9aa-1445-47ee-b29f-3c4de001ec7d.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\242ec9aa-1445-47ee-b29f-3c4de001ec7d.tmp
                                                                                                                    • Size 15KB
                                                                                                                    • SHA256 5eb6a532842b5d84e5cdd91e71b37346c87fde10d30a07f608bb8789484e0b08
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    LOG.old
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                    • Size 352B
                                                                                                                    • SHA256 003968078e9c0de3844e2127742b0e3e1338da67d474ba8a88812c33c20bd5d1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LOG.old
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                    • Size 331B
                                                                                                                    • SHA256 d5e8cfd9bcfb95813ba6f0f8e8713d202851668cead6b131dbff656821aa63de
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    BookmarkMergedSurfaceOrdering
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                    • Size 6B
                                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    f_000086
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                                                                    • Size 72KB
                                                                                                                    • SHA256 30bfb6fc645279012c8c3e89d61d65e6357cd4a7510ae7271950b83c398fab0f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_00009a
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                                                    • Size 31KB
                                                                                                                    • SHA256 618c8a41218292972e8f58363ea98f5a99e25da4dddb652138b2460517e50a2b
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_0000ba
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                                                                                                    • Size 18KB
                                                                                                                    • SHA256 76c85ef9f896fd6ce0bf7d6e85d6b0f3c4940bc67d0e5acf15f486e8c5108fc0
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    f_0000c9
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 e2763831e45216ac9486ef3d4218d11982971f9d601b5fb7ae208cead8ab1aa2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 01212771619d8573222aeacecccb7b31c94a497b632515cd9a6e1dec89e77901
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 0c4ec4d23917cda1ac665148ca8d8c2fde0fd413ae25efeb2615d38caef92fc5
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 3b8d27ec87ff43893141969c11db48302796e94e5faab7c97e8ffb645bf7ca4e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 2dfcf1355beffb711771e68b5cf253662ab76bab6a20c356a57bc2342034db9e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 7KB
                                                                                                                    • SHA256 bc03a3907f940b2c5843ac9630f0c76868af5a3e06c2c0fd3c786df523424a9b
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe594126.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594126.TMP
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 9f1b3027303ef9d8e967276696c52542f01cf2e6cbb0dfce3ea20fd31cf3fffa
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                    • Size 96B
                                                                                                                    • SHA256 14527aa46d5085525eb65d301ab2b0b84447f03c0367f4551a4768f8d7406218
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    SiteList-Enterprise.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Edge Profile.ico
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                    • Size 70KB
                                                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    HubApps
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                    • Size 106KB
                                                                                                                    • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    000003.log
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.instagram.com_0.indexeddb.leveldb\000003.log
                                                                                                                    • Size 266KB
                                                                                                                    • SHA256 7fc779a4571a68bf3b047d0eb26aa8f341346f61ff9f5d5abd0d7009d1d62e77
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    LOG
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.instagram.com_0.indexeddb.leveldb\LOG
                                                                                                                    • Size 518B
                                                                                                                    • SHA256 3b2274d935c5c96c1ab8545290376baf07d91fa5b224d4034dcfcaf507c538b1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    MANIFEST-000001
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.instagram.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                    • Size 23B
                                                                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 9KB
                                                                                                                    • SHA256 058f15bd63a293c5b6fa40c5062cf4e2951b25ca11a4fc77fa7758cd86dc2f56
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 6f1faa09f52439cdebb24373ae4c1fd55357dfae95328876047f193e15c780f6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 0633521d5666624b63fc533533fb4e1878c1807e854e910e910302e5418d1054
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 111B
                                                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 11KB
                                                                                                                    • SHA256 a22ab3d836e7ba53d939fb85e3558f91742d419ac1e95c1a6e0ec65e376bac7d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 9KB
                                                                                                                    • SHA256 337855e8328a0aae198b9193765090d09e0aa6cb0d71267d09a0214e8a854d4a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    SCT Auditing Pending Reports
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 14KB
                                                                                                                    • SHA256 b319e07892b2ab1e2001ae06e87ae274acf41675854b5365e42a3939878f4c7f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 0405288340f996cbf061c55947ea2690358481d6bf2ee8db79e8792ca5fbb804
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 31KB
                                                                                                                    • SHA256 7993ae1261304e63f1fe668e7af5647371bf3208ea2103a79afb632e1c8cdd1f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Secure Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                    • Size 36KB
                                                                                                                    • SHA256 04c279e79c354dd913ca9411abad3e53f5c264f1c43a18b0f4983e45c7e46300
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\683fb332-ea1e-45a7-94fc-74d437d1cbb2\index-dir\the-real-index
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 e1a1800d9d87c557bca86bd818336c2c36c0f473eb23d32ba64dabbb204da9f2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe58c649.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\683fb332-ea1e-45a7-94fc-74d437d1cbb2\index-dir\the-real-index~RFe58c649.TMP
                                                                                                                    • Size 48B
                                                                                                                    • SHA256 ebeed1bc3a1d6530a704487614363fd8a1aefab0e55008b8a0cb070e3dda5d55
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\e098e9bd-a6a2-4d80-b1ea-57f22408fcfd\index-dir\the-real-index
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 2c8b1020e6cd12c6d44a3c6a982b50ec270c21c41a7ff20c53060467675f107e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe58c629.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\e098e9bd-a6a2-4d80-b1ea-57f22408fcfd\index-dir\the-real-index~RFe58c629.TMP
                                                                                                                    • Size 48B
                                                                                                                    • SHA256 6b7fd432e6cb9aa69bbb79e1fa908e22020b7367747ef4780ed7fe973f7b502d
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    index.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt
                                                                                                                    • Size 254B
                                                                                                                    • SHA256 2cae8a89072a29262bd6e9607cb529f33858134cd9531e605cd5d2410491e926
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    index.txt.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt.tmp
                                                                                                                    • Size 249B
                                                                                                                    • SHA256 83c300c61966ec74192a705eb597e90b974978a923292724ca8e2e826049bf7d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    index.txt~RFe5877ac.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt~RFe5877ac.TMP
                                                                                                                    • Size 153B
                                                                                                                    • SHA256 34ea432bbcc7706ab38ba41c052a6d7ca966bb2c765531d0cb25ac065c540936
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    index.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                    • Size 474B
                                                                                                                    • SHA256 67359f4333b9d0f40d7a2833f23ce16e4adce962cd88800a78932b2a68fbb267
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                    • Size 96B
                                                                                                                    • SHA256 f1191e4499b9e2c6a657bd8542ec3cd6fae213a487927d3ff40d1d1d22a2c3b1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    sync_diagnostic.log
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                    • Size 6KB
                                                                                                                    • SHA256 cd97aa425873c9e9ad1233a65a234a41db6733bc72954718fa89101470e571d2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    CURRENT
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                    • Size 16B
                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    MANIFEST-000001
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                    • Size 41B
                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    domain_actions.dll
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                    • Size 83KB
                                                                                                                    • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    data.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
                                                                                                                    • Size 145KB
                                                                                                                    • SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    OperationConfig
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    OperationConfig
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                    • Size 22KB
                                                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    office_endpoints_list.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 18KB
                                                                                                                    • SHA256 94a0211d2b992e2047484fb3b43ec539159dff560b35444f18354a36fd73e08c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 18KB
                                                                                                                    • SHA256 f4bb294461a7e0134d5ad1ad33013428271fe6a62aa9598c9d2e3fadc89a0396
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 28KB
                                                                                                                    • SHA256 f669168792382ba03b4ef4a0fde757178452d77de823e600cadb7776156769e3
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 073693cac5a512dae3f431c49405c217d57e6dea0de16f6b127393ac850015aa
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 02a2a46dbb64b3e7eb2e04d9797df61248fb875c3114c42a069766377dec12b5
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 fd49aecfd2fb4d7b1ee0693d79b6f0c7ffe4450adb3f7effc22e95f857102a7d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 e1329a78b596e26963569a278c642bb034dfd73634e0b70a6760eb7fd1cc4574
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 9903bcb0ff0dc26bf3845726856d0f8e63be211acf460b0021b33921fb5f85f8
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 5e7fda785dc83117f6fd30c61b8d0b6897d2603247a6a49e0adaa50af65a5cd5
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 01cb38185047dc39cdc92e45fca58a5a5193a700709253361ac9640c5bacf555
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 17054300b484d26af34ebcc0dc1166e7d50f2b09ec15af6c0a0d627c91951832
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    RevisitationBloomfilter~RFe58e28b.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58e28b.TMP
                                                                                                                    • Size 392B
                                                                                                                    • SHA256 64f6670e62ec4ba47f8e92049144f9efdea54ab88689f87aac7a469ff46d921a
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    safety_tips.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                    • Size 163KB
                                                                                                                    • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    typosquatting_list.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    keys.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    nav_config.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 372B
                                                                                                                    • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 852B
                                                                                                                    • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 612B
                                                                                                                    • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 132B
                                                                                                                    • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 492B
                                                                                                                    • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 252B
                                                                                                                    • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 732B
                                                                                                                    • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 972B
                                                                                                                    • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 a028a4f0ccd890d7c5d55fa1477205c9861a4bddd3551fc7dcd89e5e34443b10
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 45a6b06e48cb3eedac93a0d53aa71f535bd43cbf956b7e1b9214bb14d119b498
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 af8a896a0570cfdb76b95dc0d9557854a2bcb27820aaf705994211713455175b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                    • Size 13B
                                                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    53c8b800-73b0-4e74-8606-e8c644b4b111.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\53c8b800-73b0-4e74-8606-e8c644b4b111.tmp
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    88c06998-c5ef-43d4-b0fd-acc21b5a4ebd.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\88c06998-c5ef-43d4-b0fd-acc21b5a4ebd.tmp
                                                                                                                    • Size 1B
                                                                                                                    • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    content_new.js
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4932_1978838999\CRX_INSTALL\content_new.js
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    5aaad0fc-c61b-4be4-b34b-2b7cd254ef5d.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4932_2077572548\5aaad0fc-c61b-4be4-b34b-2b7cd254ef5d.tmp
                                                                                                                    • Size 147KB
                                                                                                                    • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1312104468\manifest.json
                                                                                                                    • Size 165B
                                                                                                                    • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_133674328\manifest.json
                                                                                                                    • Size 160B
                                                                                                                    • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1488314948\manifest.json
                                                                                                                    • Size 177B
                                                                                                                    • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1499174729\manifest.json
                                                                                                                    • Size 135B
                                                                                                                    • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1504277706\manifest.json
                                                                                                                    • Size 119B
                                                                                                                    • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1812814814\manifest.json
                                                                                                                    • Size 113B
                                                                                                                    • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LICENSE
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1835108910\LICENSE
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_1835108910\manifest.json
                                                                                                                    • Size 79B
                                                                                                                    • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_2003272803\manifest.json
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_362922332\manifest.json
                                                                                                                    • Size 238B
                                                                                                                    • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_393826423\manifest.json
                                                                                                                    • Size 85B
                                                                                                                    • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_476436813\manifest.json
                                                                                                                    • Size 43B
                                                                                                                    • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_561920381\manifest.json
                                                                                                                    • Size 160B
                                                                                                                    • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_877594090\manifest.json
                                                                                                                    • Size 52B
                                                                                                                    • SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4932_963631869\manifest.json
                                                                                                                    • Size 135B
                                                                                                                    • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    memory/484-2209-0x0000024E17000000-0x0000024E1719A000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/484-2044-0x0000024E17000000-0x0000024E1719A000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1760-2045-0x00000000024A0000-0x000000000263A000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1760-2118-0x00000000024A0000-0x000000000263A000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2628-2106-0x000001DA36E60000-0x000001DA36FFA000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/2628-2054-0x000001DA36E60000-0x000001DA36FFA000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1861-0x000002217B820000-0x000002217B840000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1774-0x0000022046D90000-0x0000022046E90000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1860-0x000002217C0A0000-0x000002217C1A0000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1775-0x0000022046D90000-0x0000022046E90000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1838-0x000002206A300000-0x000002206A320000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1780-0x0000022046C00000-0x0000022046D00000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-2055-0x000002183FA50000-0x000002183FBEA000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/3256-1836-0x000002217AE00000-0x000002217AE20000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/4272-593-0x00000181742D0000-0x000001817446A000-memory.dmp
                                                                                                                    Download