Resubmissions

11/05/2026, 00:42

260511-a2jyssb15n7

10/05/2026, 23:58

260510-3z9qnagv217

09/05/2026, 14:03

260509-rcwpqsht5s

09/05/2026, 14:03

260509-rcwpqsht41

09/05/2026, 14:03

260509-rcwpqsht4z

09/05/2026, 14:03

260509-rcwdzaht4y7

09/05/2026, 14:03

260509-rcwdzaht4x

09/05/2026, 14:03

260509-rcwdzaht4w

09/05/2026, 14:03

260509-rcwdzaht4v

09/05/2026, 14:03

260509-rcwdzaht4t

Analysis

  • user interaction
    yes
  • max time kernel
    1050s
  • max time network
    734s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/05/2026, 23:58

General

  • Target
    .html
  • Size 55B
  • Sample260510-3z9qnagv21
  • SHA256 f9a368b5e83ed5bbe0b02e86841db81b561bb21382d4139460e44e94858a9dfc
  • MD5 SHA1 SHA512 TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 60 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4888
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffd38e7c188,0x7ffd38e7c194,0x7ffd38e7c1a0
      2⤵
        PID:4160
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,11143297414921928675,6906329773665421955,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4520
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1700,i,18115385071886461328,10221699524487696105,262144 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:2
        2⤵
          PID:1048
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2496,i,7862547950988206695,13278419166687495032,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=2540 /prefetch:8
          2⤵
            PID:1944
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,13407471235071486780,16008063098821359354,2097152 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
            2⤵
              PID:2780
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3464,i,2682005858170398097,14022034286063806713,2097152 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              2⤵
                PID:1584
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4876,i,12217436802443469573,9921265151249305097,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                2⤵
                  PID:1792
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4872,i,3022485679524215686,15761178480942869795,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
                  2⤵
                    PID:2116
                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,3262153985804333285,15397976402749127575,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
                    2⤵
                      PID:1748
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,3262153985804333285,15397976402749127575,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5848 /prefetch:8
                      2⤵
                        PID:5176
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,4862963466519466967,10752737732041713678,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5852 /prefetch:8
                        2⤵
                          PID:4496
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,3975102172484097656,5258430162367845471,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
                          2⤵
                            PID:2112
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,11333896685173145742,17519273385488442730,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                            2⤵
                              PID:4968
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5768,i,6589227003603649533,2427051486880202029,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=6256 /prefetch:8
                              2⤵
                                PID:5992
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,5579600171657519549,6748514419055120429,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                                2⤵
                                  PID:5696
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2108,i,8807865997292374133,12736562571779349399,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
                                  2⤵
                                    PID:972
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,162894415189652099,15028622004161323206,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
                                    2⤵
                                      PID:4968
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5564,i,2346644768033450241,5435583585195417472,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
                                      2⤵
                                        PID:4660
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,18426675377451564306,3855888030224181845,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=744 /prefetch:8
                                        2⤵
                                          PID:544
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5876,i,17891584159673714277,2188048682458725234,262144 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:8
                                          2⤵
                                          • Suspicious behavior: EnumeratesProcesses
                                          PID:5028
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3316,i,7320680031317348081,16482772868743312518,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
                                          2⤵
                                            PID:756
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5808,i,16871610618882594554,16831668822778738787,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
                                            2⤵
                                              PID:4316
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3356,i,17974917855943431583,5865596618113665355,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3812 /prefetch:8
                                              2⤵
                                                PID:4156
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5860,i,10581877209308434531,10254889884977456163,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=1308 /prefetch:8
                                                2⤵
                                                  PID:5600
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,15791121773603765240,16458438511213491500,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=1512 /prefetch:8
                                                  2⤵
                                                    PID:2820
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,5709606925894661714,14900282253846443642,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:8
                                                    2⤵
                                                      PID:5060
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5060,i,4890578693430828356,12460202643330269962,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
                                                      2⤵
                                                        PID:5304
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,4166329147399549572,14853444123166371487,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
                                                        2⤵
                                                          PID:4408
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5976,i,8546604789833877367,2178182489639904367,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3356 /prefetch:8
                                                          2⤵
                                                            PID:5548
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,9398849039281954129,15679514871846113830,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:8
                                                            2⤵
                                                              PID:6104
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5352,i,6904280540754408020,16343212843581917527,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:8
                                                              2⤵
                                                                PID:2036
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6252,i,1319679239873303947,16885515387391728815,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:8
                                                                2⤵
                                                                  PID:5820
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3324,i,5443017852824334804,7751027422560521144,524288 --field-trial-handle=2364,i,15743311850907992535,5347007429408647626,262144 --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:8
                                                                  2⤵
                                                                    PID:5928
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                  1⤵
                                                                    PID:5272
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                    1⤵
                                                                      PID:5240

                                                                    Network

                                                                          MITRE ATT&CK Enterprise v16

                                                                          Replay Monitor

                                                                          Loading Replay Monitor...

                                                                          Downloads

                                                                          keys.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_1118361254\keys.json
                                                                          • Size 8KB
                                                                          • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_1118361254\manifest.json
                                                                          • Size 79B
                                                                          • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_1291530615\manifest.json
                                                                          • Size 102B
                                                                          • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_1841721034\manifest.json
                                                                          • Size 76B
                                                                          • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_185806798\manifest.json
                                                                          • Size 165B
                                                                          • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_1923467097\manifest.json
                                                                          • Size 116B
                                                                          • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_2074587870\manifest.json
                                                                          • Size 118B
                                                                          • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          notification_fast.bundle.js.LICENSE.txt

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_2101567613\Notification\notification_fast.bundle.js.LICENSE.txt
                                                                          • Size 551B
                                                                          • SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          tokenized-card.bundle.js.LICENSE.txt

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_2101567613\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
                                                                          • Size 1KB
                                                                          • SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          strings.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_2101567613\json\i18n-tokenized-card\fr-CA\strings.json
                                                                          • Size 2KB
                                                                          • SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_2101567613\manifest.json
                                                                          • Size 121B
                                                                          • SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          edge_checkout_page_validator.js

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_341244546\edge_checkout_page_validator.js
                                                                          • Size 1009KB
                                                                          • SHA256 9960614ae3d67b2a2b2b1bb1fdd6a427f4d103835e50e45f2e2cf3b1c540fa44
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_341244546\manifest.json
                                                                          • Size 146B
                                                                          • SHA256 1d4f529025d274699f815657573b828ae880ae0d44ee0b0ce66a6a273f2bddff
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_391473702\manifest.json
                                                                          • Size 52B
                                                                          • SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_577434317\manifest.json
                                                                          • Size 1001B
                                                                          • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_74112105\manifest.json
                                                                          • Size 177B
                                                                          • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_782326564\manifest.json
                                                                          • Size 119B
                                                                          • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          hyph-as.hyb

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_963442116\hyph-as.hyb
                                                                          • Size 703B
                                                                          • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          hyph-hi.hyb

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_963442116\hyph-hi.hyb
                                                                          • Size 687B
                                                                          • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          hyph-nb.hyb

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_963442116\hyph-nb.hyb
                                                                          • Size 141KB
                                                                          • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          manifest.json

                                                                          • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4888_963442116\manifest.json
                                                                          • Size 82B
                                                                          • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          autofill_bypass_cache_forms.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                          • Size 161B
                                                                          • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          edge_autofill_global_block_list.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                          • Size 6KB
                                                                          • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          v1FieldTypes.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                          • Size 509KB
                                                                          • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          settings.dat

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 c7296caf0e9cce556825f28f3642cb5ac31e31a0ff760d227744d879c3a93dee
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          settings.dat

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 cd04dec9a65c9ebbd9698b7d59631c916e6b6a0a7afdb22ef48d8a4a82d902d0
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          LOG.old

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                          • Size 357B
                                                                          • SHA256 092c2ad3e63b51a6ae36de53e2246a6554355655dd00c00ed972652da49d3b42
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          LOG.old

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                          • Size 7KB
                                                                          • SHA256 61e6ea10f1eb664e6b8a8995cd0ce5a0dc7c731037d94a518f9ce26107f862b8
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          MANIFEST-000001

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                          • Size 384B
                                                                          • SHA256 f21c98626be11908e6ef2a13dcee9d40896db054c5c0737dbd2498a299d23842
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          BookmarkMergedSurfaceOrdering

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                          • Size 6B
                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                          • MD5 SHA1 SHA512

                                                                          BrowsingTopicsState

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                          • Size 414B
                                                                          • SHA256 07aa4a5fba63c523c206e84ef80da1fd1f152ff38e77f485c609fa43a6cabc66
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          SiteList-Enterprise.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                          • Size 2B
                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                          • MD5 SHA1 SHA512

                                                                          HubApps

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                          • Size 106KB
                                                                          • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Network Persistent State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                          • Size 2KB
                                                                          • SHA256 1a009e60cbac980e8969bc12f5b59853ecc2c88cf71b07c71eeddc00ee01797b
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          Network Persistent State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                          • Size 2KB
                                                                          • SHA256 fbc3eb3d35556b10ea77f782dcfbfab4a684c6ab6388c8a70e1c970357b147bf
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          SCT Auditing Pending Reports

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                          • Size 2B
                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                          • MD5 SHA1 SHA512

                                                                          Sdch Dictionaries

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                          • Size 40B
                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                          • MD5 SHA1 SHA512

                                                                          Preferences

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                          • Size 16KB
                                                                          • SHA256 26ce501097b1fc2747cab1d58ef1b159fcede104c3683c17cb53367ef6abfe0a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Preferences

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                          • Size 15KB
                                                                          • SHA256 10d4a1ef27fcb5fcb10492e19fc4ea2648223dd47d86d213fc64cb6b4185b5da
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Secure Preferences

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                          • Size 35KB
                                                                          • SHA256 245a8cf5668697186541355e9b81eb4a439a82a0cc13aac3a9aa2e75bf797358
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d864f7e2-3df7-400a-972a-26ff447d73c6\index-dir\temp-index
                                                                          • Size 2KB
                                                                          • SHA256 6410931cb4ed64ea0b8968c9fa494ef2d403433ef8164d3664e817c80376efce
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          index.txt

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                          • Size 474B
                                                                          • SHA256 76fbdd1262fb4020976dd5930c411928e4b2032f4f5acb160d174b6d9b9691df
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          sync_diagnostic.log

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                          • Size 23KB
                                                                          • SHA256 388c2f3441a352e38afcc06a8314e7e81bfb3cd74468275026b65adba2626ad0
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          CURRENT

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                          • Size 16B
                                                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                          • MD5 SHA1 SHA512

                                                                          MANIFEST-000001

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                          • Size 41B
                                                                          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                          • MD5 SHA1 SHA512

                                                                          domain_actions.dll

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                          • Size 83KB
                                                                          • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          data.txt

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
                                                                          • Size 145KB
                                                                          • SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          wallet-checkout-eligible-sites.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
                                                                          • Size 23KB
                                                                          • SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          wallet-notification-config.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
                                                                          • Size 804B
                                                                          • SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          wallet-stable.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
                                                                          • Size 81KB
                                                                          • SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          wallet-tokenization-config.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
                                                                          • Size 34KB
                                                                          • SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Local State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 26KB
                                                                          • SHA256 ed0894e22b51aa94977f2d5c23ede8a3a559b6d3ed6c90601f2caeb2141610e1
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Local State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 27KB
                                                                          • SHA256 602a5f085852088ffe9321ad4936cc76262ed5ee459c9dea3e7a40b193b11c20
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Local State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 27KB
                                                                          • SHA256 6b8ed9dbb6086198931015b34c865eac62471197c66323b4d0c992cf2eb0040c
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Local State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 27KB
                                                                          • SHA256 b41295d4fe34f8934fc501c71111865cea5c91b1bc01d2b9b824decb43e5336b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Local State

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                          • Size 27KB
                                                                          • SHA256 186626e1d8b23659739de1678753c25b23bf99fd27d8fae20da9ffd09423a6fb
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          crs.pb

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                          • Size 233KB
                                                                          • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          ct_config.pb

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                          • Size 16KB
                                                                          • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          kp_pinslist.pb

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                          • Size 10KB
                                                                          • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          Filtering Rules

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                          • Size 2.1MB
                                                                          • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          LICENSE

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                          • Size 24KB
                                                                          • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          typosquatting_list.pb

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                          • Size 1.6MB
                                                                          • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 b93c3edcf15a7a4d6e8aeeb4e0421bf9cb8fb114b3385fee5c7f9d96126557cd
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 963f9203ed759a6c09866b140c772b076256b0953e9245d17791bc26287ba7c0
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 527fc2db7f6ed30788bdfd3b849bf397a376ad78284c92ac3a85544d6bbdcafc
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 3ba42e57dd0cb05403c94224757e144a0ae72237c8b047b9b988367f319892a3
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 c58cd649ee95c481a176b1797b02e49a6610318ef5c873551fae7e301fd8e4c2
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 cbc2535e9e5133da03829a7ea42fd41503515bdb381bd6e7e109b15b98ba37d4
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 c8a15adc78d1278ea2deb6fdcbe25d2a4111d791ce3cb0f6979e0e071b2e2a10
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 577c2b87beb32225c063468b0583ae77577f37b670f0f3abd12efa46f86ee47e
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 4a564c8fac26c1c848ae0f5b55feede3d719c1d74c31f2409130703be038bb4f
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 037a5f84a7492f3c10c4519130849d6106a9c46cf6f12c4c4a8921b69129d129
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 6aebed3e26d9490f22933fc7961727f96503eae50370e8242bde76992544453e
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 afbf82fdee9c45426bad6632b940bdf68562965deea835b4e293731317ed03bc
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                          • Size 2KB
                                                                          • SHA256 56a7a82f31a822c49b0ecbb69f3961dc59d28238d64ff67ad98e34dab672ac76
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                          • Size 147KB
                                                                          • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          metadata.json

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                          • Size 132B
                                                                          • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                          • Size 2KB
                                                                          • SHA256 82a775e1394cba007f6a05c8f8bfccc9ef8ec83f46314bb4e0976c074f3a02d6
                                                                          • MD5 SHA1 SHA512 TLSH