Analysis

  • user interaction
    yes
  • max time kernel
    329s
  • max time network
    323s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/04/2026, 15:00

General

  • Target
    https://grimzeal.shop/#main
  • Sample260429-sdg4eac15z
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://grimzeal.shop/#main
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4204
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7fffa659c188,0x7fffa659c194,0x7fffa659c1a0
      2⤵
        PID:4472
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,5715444206637861550,3316769569910928174,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
        2⤵
        • System Time Discovery
        PID:5844
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1660,i,7351998504119233336,16290593936138587594,262144 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=2240 /prefetch:2
        2⤵
          PID:4420
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2536,i,7628690279743068469,13010211870744126331,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=2680 /prefetch:8
          2⤵
            PID:4536
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,16944028500619054492,7051600513207764793,2097152 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
            2⤵
              PID:2668
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,5102326721495821564,15211039352073006435,2097152 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
              2⤵
                PID:2060
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,17151715743865180641,13282299405320754109,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                2⤵
                  PID:2112
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5312,i,14514494847752634914,5502567772735318263,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
                  2⤵
                    PID:4304
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,129181040500229578,18182306413580039312,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
                    2⤵
                      PID:5404
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15310343617883086470,8721412012057905611,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
                      2⤵
                        PID:3016
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,15310343617883086470,8721412012057905611,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:8
                        2⤵
                          PID:4948
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5224,i,5676945644642087390,6217903069167170811,2097152 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
                          2⤵
                            PID:5300
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,14753185364158295454,18316881903812428519,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
                            2⤵
                              PID:3316
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6140,i,14753185364158295454,18316881903812428519,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
                              2⤵
                                PID:1376
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6580,i,12883596330321633870,5633081365884518360,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
                                2⤵
                                  PID:5388
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6120,i,11423065237023480831,11168171968090105895,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:8
                                  2⤵
                                    PID:3800
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,17255637970379218178,295146500936092594,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
                                    2⤵
                                      PID:5860
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,10748497246631537565,9238438019905510136,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:8
                                      2⤵
                                        PID:1616
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3572,i,16113528185935436394,11765441054912368858,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:8
                                        2⤵
                                          PID:3160
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6464,i,17629107827816470388,3115897357159501204,2097152 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=2028 /prefetch:1
                                          2⤵
                                            PID:2028
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,9846221529207639470,6467776545532630825,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                            2⤵
                                              PID:5640
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=3584,i,7006030431118624440,14675247380571010934,2097152 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:1
                                              2⤵
                                                PID:2568
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3404,i,6749335955486344788,11187106976220959167,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:8
                                                2⤵
                                                  PID:5504
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5416,i,8616472128786039959,5857996004219228771,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
                                                  2⤵
                                                    PID:5456
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5596,i,13862507203119566876,988119424367559778,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=756 /prefetch:8
                                                    2⤵
                                                      PID:4412
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6248,i,16455278204343103209,14026016690904234451,262144 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                                                      2⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:3152
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6476,i,2095981390980096231,10310548396782537411,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5544 /prefetch:8
                                                      2⤵
                                                        PID:5728
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3736,i,6586519921674416588,115867979030215053,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
                                                        2⤵
                                                          PID:3956
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3740,i,8165368078011986302,10331898650726738470,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=1036 /prefetch:8
                                                          2⤵
                                                            PID:5144
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5356,i,2307442065717089638,46062150176738642,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
                                                            2⤵
                                                              PID:6068
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,7625448794311644958,12423521655057504770,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
                                                              2⤵
                                                                PID:4704
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6896,i,13601816178670703634,14532557507345106820,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:8
                                                                2⤵
                                                                  PID:3400
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,3186375559439952997,669177983922791406,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
                                                                  2⤵
                                                                    PID:4268
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,3463573317876384525,15768662929808513590,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:8
                                                                    2⤵
                                                                      PID:3896
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,14022435550348911354,4563932697221889432,524288 --field-trial-handle=2244,i,13325931266199302252,17786910893500315361,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:8
                                                                      2⤵
                                                                        PID:112
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:4392
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                        1⤵
                                                                          PID:5428

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_1105084840\manifest.json
                                                                              • Size 165B
                                                                              • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_1119561821\manifest.json
                                                                              • Size 119B
                                                                              • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_1699071971\manifest.json
                                                                              • Size 52B
                                                                              • SHA256 eb3cf0abd2ad7de40910be5f35246574a6de00ce226c6e9cef465ce6691bb937
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_1733259607\manifest.json
                                                                              • Size 118B
                                                                              • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_1852495266\manifest.json
                                                                              • Size 102B
                                                                              • SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_2052775814\manifest.json
                                                                              • Size 177B
                                                                              • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_401292596\manifest.json
                                                                              • Size 69B
                                                                              • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              keys.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_531076571\keys.json
                                                                              • Size 8KB
                                                                              • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              manifest.json

                                                                              • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4204_531076571\manifest.json
                                                                              • Size 79B
                                                                              • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              autofill_bypass_cache_forms.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                              • Size 161B
                                                                              • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              edge_autofill_global_block_list.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                              • Size 6KB
                                                                              • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              v1FieldTypes.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                              • Size 509KB
                                                                              • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 030978901609c12837a9b1afdcd1ee9f12ef19339fd94725f17a7cdb1e945f36
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 827caedd6ba67a465e2378da508ebf9f7e5dc38b9ff3d1086fe8a0b10ad23634
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG.old

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                              • Size 352B
                                                                              • SHA256 fc231bf2b6271c58c00a803dd948f3b0c57d779ecbe659ae378ed5f20cc6a31b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              LOG.old

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                              • Size 357B
                                                                              • SHA256 4fb768e7bbf3d64eb5a0bc8d803d836feff0b552bd5641c8aebe3b6c8d452511
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              BookmarkMergedSurfaceOrdering

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                              • Size 6B
                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                              • MD5 SHA1 SHA512

                                                                              BrowsingTopicsState

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                              • Size 414B
                                                                              • SHA256 bbef540c0f907e5d1a6d3cade6b29bbeab6987f698a7149759aac5debc733edb
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              f_000081

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                              • Size 34KB
                                                                              • SHA256 d6307ec5eaab716dc864c965d0dcc488395ee81a1f68b9dd438005ce149ba533
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000082

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                              • Size 31KB
                                                                              • SHA256 4003d0e92bff10a3f6612637dbb060794715789fe9aa39c77e9456b84f7395c5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000083

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                              • Size 30KB
                                                                              • SHA256 61248cde30505968b445f009c61e0a46c86b3b972aac06868fe1a2f6da2e965e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000084

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                              • Size 84KB
                                                                              • SHA256 704d63d0ab8384517825c7f17ee96a9b4656a8d0b00e32969a9d90b57d670571
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000085

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                              • Size 59KB
                                                                              • SHA256 8bc619284deb64078387fb42ef1082e4cba790dc945eae2a755424ef83fba68a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000087

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                              • Size 25KB
                                                                              • SHA256 a2c34eed311fd36c84029ceaee634f2d170175833430ae63cfe8842d93660ca3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000088

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                              • Size 16KB
                                                                              • SHA256 3abe13ba24f20a85dab5849d93b95ece669e49a5bf4ace958e52cab55c6ff52b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000089

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                              • Size 174KB
                                                                              • SHA256 243959be9cead1568c3dde46c6fbc8ba63e560490db1aeaeb5151d7d56be8e74
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008b

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                              • Size 27KB
                                                                              • SHA256 19182790024336545ceb80e720fb5a767a192fdbb554c42d20dc1012896273cd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008c

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                              • Size 40KB
                                                                              • SHA256 f71f3a380970a852638b4da0bb9713a3473e0b36d0c8115d5b3639be423ef1fd
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008d

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                              • Size 52KB
                                                                              • SHA256 2842c7b50839697547212f6f67f17888311b2f6ae6d4a5bc5f91e1c28cc2e0bf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008e

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                              • Size 20KB
                                                                              • SHA256 03da156693e6a17c0e78f9fc273a1968729863871acee8ccd8b4088ae63a77c5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008f

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                              • Size 49KB
                                                                              • SHA256 ce0ac9acb3276f30d7a76c026da1014ce8c81700bb5580d856572b43372f85ec
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000090

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                              • Size 42KB
                                                                              • SHA256 60eb16c8990ab4a52ea8de1d1383c6ec2d400a536f000f0d61938bc8c5baf0dc
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000091

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                              • Size 72KB
                                                                              • SHA256 f06b6ba8d4b8a8b49da015a0adf7ff501946fd61dfb591331dd397b3ebb46e8a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000092

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                              • Size 135KB
                                                                              • SHA256 60a1036fed1c3fd66a31ae15ba3be81876595556ed0c9ff13e26103946887c29
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000093

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                              • Size 46KB
                                                                              • SHA256 55b77ab185b9297183902277e39aa4f511793869b7a0a8de6cd968b7bb47eae5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000094

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                              • Size 75KB
                                                                              • SHA256 2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000095

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                              • Size 47KB
                                                                              • SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000096

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                              • Size 52KB
                                                                              • SHA256 6e2af83776e8bc78f05211b563c44bd6aff515841beffc7f8b0cbbba79dbd635
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000097

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                              • Size 79KB
                                                                              • SHA256 2a5584bc71483658c7d133110365db5654aa407861ea1850596b086d9431562c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000098

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                              • Size 61KB
                                                                              • SHA256 32df76b82c1b94f598672811d72d402cfb355ac50c96cc9871201da0f2778334
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000099

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                              • Size 145KB
                                                                              • SHA256 16d1510d966567d97b87bfc4b6541b7c35b0689b6ce7bb58c25fe7a4b559c4cf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00009a

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                              • Size 27KB
                                                                              • SHA256 b43cdddf1836f84ff2873a9716fc541205e42ab4ee6163495fc5d9fa11a475ea
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00009b

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                              • Size 26KB
                                                                              • SHA256 577db921a554af3596942d3c48b5c91feaac8c767e183d518a8de8de86e5c7d8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00009c

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                              • Size 213KB
                                                                              • SHA256 0df2f70fcd525c6a345b691a06806505101953f9e5edbbe8c48db6d906ec2a33
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00009d

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                              • Size 71KB
                                                                              • SHA256 7cfebba3d553c9b143bbc3544fff388f4d1fe122604d51470fd46a4babc74970
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00009e

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                              • Size 384KB
                                                                              • SHA256 c0429e0aa1ed5a47a0fef21fb312a80d39bbd06389b8f56b08c3f84eeab3b6bf
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_0000b1

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                              • Size 54KB
                                                                              • SHA256 5d4166754de7988fa986ce9504e6c5f21a7cdd6f4ec7e36f0c704b7e1a3a72a9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_0000b2

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                              • Size 60KB
                                                                              • SHA256 0c71428d31d86e27fc8ca4f77c8865da7784664ae49b5ce771dbbacd2bd155b3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_0000bb

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                                                              • Size 93KB
                                                                              • SHA256 251ddfbf0cac4a136e91526ac83316d897988f8047ceac25c317b1312a93d710
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_0000bc

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                                                              • Size 116KB
                                                                              • SHA256 be8ae4aaa014f1ea3914a262251ce1894dc7fb6082594f96070d22d6e0bd18ae
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000167

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000167
                                                                              • Size 205KB
                                                                              • SHA256 32f077c4271660328bd3f856bc118f9df90658b1e7d462d74ae38a7ba1b935e9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000170

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000170
                                                                              • Size 26KB
                                                                              • SHA256 71951a8290995e07b83a481a86398f25dcf207ea30335753683f5122fb607229
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000189

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000189
                                                                              • Size 43KB
                                                                              • SHA256 68e0ca9e28d8da650cd6d84813b7074119158b658f8f47dd50baa51948a1af85
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00018a

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00018a
                                                                              • Size 35KB
                                                                              • SHA256 4f47b8283a55b6487bcff24c82a841f1d2a5b9ecece22448c0fdd0de84caa212
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00018d

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00018d
                                                                              • Size 65KB
                                                                              • SHA256 aa553912d1cdfd08c1ab6c4ed336b3aea2c70842806d55e126eab1740123255d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 4KB
                                                                              • SHA256 732b93845eb98771487fadf9cc832fb40751cb13e64bd848cbf05321abfc041e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index~RFe592793.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592793.TMP
                                                                              • Size 3KB
                                                                              • SHA256 3266ce1d3740478fdd1ab8ebadedf5d3c8b11c301b00cb22686149d53da98831
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              SiteList-Enterprise.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                              • Size 2B
                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                              • MD5 SHA1 SHA512

                                                                              HubApps

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                              • Size 106KB
                                                                              • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                              • Size 1KB
                                                                              • SHA256 5fa286923ab6f4647ac73365b36a1d9adae5b6a76c86ba91522b0b7c70da68ee
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Network Persistent State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                              • Size 6KB
                                                                              • SHA256 17ce225b868062a54c90b8e19103582356af93125043ef8e72e5c8d127288f48
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              SCT Auditing Pending Reports

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              Sdch Dictionaries

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                              • Size 40B
                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                              • MD5 SHA1 SHA512

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                              • Size 16KB
                                                                              • SHA256 3405d87e615b13ce98e210c344782ec0e88f7f3133410ec2beb05512f9ae5e15
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                              • Size 16KB
                                                                              • SHA256 bd0caa33f08f880440c5d07148049d56d3e5a2ea4b8a0b842d628623dd9f9d0a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                              • Size 35KB
                                                                              • SHA256 bf28508bb8d163b90cbb5ec09a5e963ec5b1d8806059d7c055a1a26adcd7a9f9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Secure Preferences

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                              • Size 35KB
                                                                              • SHA256 0c4497e8a9162b0ddfe81de341e5aa9cd2bf3f94ac82ef4423dd1edb4c6cddc1
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c525634b-d4e3-42ee-ba7f-48d143c62b85\index-dir\the-real-index
                                                                              • Size 2KB
                                                                              • SHA256 f955bae6f8a914bd63b25a8208fd111034e6b3505175f47ca0ccc67b58a57b16
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index~RFe5ccb56.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c525634b-d4e3-42ee-ba7f-48d143c62b85\index-dir\the-real-index~RFe5ccb56.TMP
                                                                              • Size 2KB
                                                                              • SHA256 0df200c2c571924ec5d6f850437e494501cdb951fd5ee2408608d0a2ad3b961a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                              • Size 474B
                                                                              • SHA256 fcf70f3170d0f640c8b7f590255e847a9a164478d7e70c315fe35820c22e6c1a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              sync_diagnostic.log

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                              • Size 23KB
                                                                              • SHA256 0d19a3c3409b513a55e87a9cc95c57c0f4048a4b0f1ec4137a81bd8fcc633012
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              CURRENT

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512

                                                                              domain_actions.dll

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                              • Size 83KB
                                                                              • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              data.txt

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.5\data.txt
                                                                              • Size 145KB
                                                                              • SHA256 8a4065abfc1647d1c28b75bf085aa56548564259e7397c4c69ac8897fe32dfe8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 26KB
                                                                              • SHA256 08e306af367e049b11386a38193b509dceb19949e00208c96f6ef471d754a631
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 badbd9642bcb2ff04787f71e4c6b4688bfcd23e384d83f4501b63d78f35a4912
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 f9d5e29062e021c9f907cdc231c41e37c955d32b302bed4f3dff5c0633505948
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 27KB
                                                                              • SHA256 12de8bdf53ba331d1bc4c7defe371cdb3324caea0130fa747b8a843fe5e9e8ed
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              crs.pb

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
                                                                              • Size 233KB
                                                                              • SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              ct_config.pb

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
                                                                              • Size 16KB
                                                                              • SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              kp_pinslist.pb

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
                                                                              • Size 10KB
                                                                              • SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              RevisitationBloomfilter

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                              • Size 392B
                                                                              • SHA256 de3dcca79ae1c05c361567c9ff1c1e2623bae8a4a92cf31e9afa892d15913ce4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              RevisitationBloomfilter

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                              • Size 392B
                                                                              • SHA256 f8a2d77064e577af85cf616cdc01da978d251625dc7d5263b13ed2e46dfc849e
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              RevisitationBloomfilter

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                              • Size 392B
                                                                              • SHA256 64f89b0379bbc7cc53bfc4baab6c5238fefc3fe60fc82aeb3a38b2c47e3f53de
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              RevisitationBloomfilter~RFe58a1c9.TMP

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe58a1c9.TMP
                                                                              • Size 392B
                                                                              • SHA256 29e5ac557af3f93edae8446e3521cc069736cf69ca6dc9ebc2f84d4f470da6b7
                                                                              • MD5 SHA1 SHA512

                                                                              typosquatting_list.pb

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                              • Size 1.6MB
                                                                              • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              ranked_dicts

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
                                                                              • Size 865KB
                                                                              • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              b7210818-0862-4f1b-998a-5e2c62219e65.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b7210818-0862-4f1b-998a-5e2c62219e65.tmp
                                                                              • Size 27KB
                                                                              • SHA256 7dc4c2caff002501d4e786610b65da531995e65e7e84db00002276f4c26a35f9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 991b9f93117701e57e14915af3d800c21ab5c8b22bca75c0cf6c3657bc746cad
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 d4d3d367dbed92af02a9e922ff69c96f99ab9e97faf22c0c87626cbed108aa29
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 2KB
                                                                              • SHA256 1af19eeece5d3cc7ab1fcc31686d4916e8070f08f7544af40a5a6464e4750a6b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 98242a5c4245ee952f87a1ff9f24b59deff6cbce8450912e8c393e0075381a56
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 2KB
                                                                              • SHA256 61d185de43146ab737cf4664895d486a4b661d81bf687276c314649f730144d3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 9ec143e385732eeabd73b1f5abd3fc833e028b10e2c7c729ee8547ae25b385f3
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 a9fe80091a31bea1d5685c9b9f79dd3a452cd09e36e47872155e3f8ebb7e7b6b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                              • Size 1KB
                                                                              • SHA256 551b5d45674e685ce42bfad9fff59c2b88013f6b55f022edbc16b0f3c5331515
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                              • Size 147KB
                                                                              • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              metadata.json

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                              • Size 132B
                                                                              • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                              • Size 2KB
                                                                              • SHA256 76ee003c953d8ba144f8e77dba4a5bf876c8365e6bba3eb4253cbd2022733eb9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              ccba5a5986c77e43.customDestinations-ms

                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                              • Size 8KB
                                                                              • SHA256 418b6abc05217ca056f24f9a92a6aeb4a4cefd3d8065c56d1b172485aa1a2b78
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              ccba5a5986c77e43.customDestinations-ms

                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                              • Size 10KB
                                                                              • SHA256 779cd77f377853e3ced3cd2400f5edaa6f27c9c333834213434adc2d916ecdd9
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH