Overview

overview

8

Static

static

3

Velocity.exe

windows10-2004-x64

8

Velocity.exe

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    901s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/06/2026, 23:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Velocity.exe
  • Size 32.9MB
  • Sample260608-3dryqagt7w
  • SHA256 873fd333cd8e687b874af8dca2f043c50ea1f4bc64d496015ca038da383b91f0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 50 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 34 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\Velocity.exe
    "C:\Users\Admin\AppData\Local\Temp\Velocity.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2796
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x86&rid=win-x86&os=win10&apphost_version=10.0.0&gui=true
      2⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • System Time Discovery
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2008
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e4,0x2e8,0x2ec,0x2e0,0x36c,0x7ffd7224c188,0x7ffd7224c194,0x7ffd7224c1a0
        3⤵
          PID:2064
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1808,i,9466262789494042297,14665255595897550737,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:11
          3⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:3948
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,1769004511122057008,3320023783755757705,262144 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=2076 /prefetch:2
          3⤵
            PID:4032
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2456,i,13129525623335756766,7329492113754238498,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:13
            3⤵
              PID:900
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,10620527045737678133,2978919015478611108,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
              3⤵
                PID:4556
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,14366100558843123978,10719903887081359700,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
                3⤵
                  PID:4992
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4208,i,7989205506050390491,2752205871630471960,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4684 /prefetch:1
                  3⤵
                    PID:2956
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,4840539727188483066,5403468237126988581,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:9
                    3⤵
                      PID:2568
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4236,i,10676281060962700171,7908761074013001125,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4736 /prefetch:1
                      3⤵
                        PID:1832
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4248,i,17112482469658102625,14663068952104880171,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:9
                        3⤵
                          PID:2368
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4212,i,3137192791332905849,13776218825313653158,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:14
                          3⤵
                            PID:1720
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3532,i,2784200765249492564,2685857851373677371,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:14
                            3⤵
                              PID:1880
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5592,i,11352387151872200480,8110514219709276442,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
                              3⤵
                                PID:2376
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,5867365170322439810,9419335566498196879,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
                                3⤵
                                  PID:2688
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5484,i,1568662247819036453,4479812453363207200,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:14
                                  3⤵
                                    PID:2656
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,14966186821848782137,2105120895207603223,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6172 /prefetch:14
                                    3⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:2340
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                      cookie_exporter.exe --cookie-json=1128
                                      4⤵
                                        PID:2872
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,14885589419682873604,15382827428663379829,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:14
                                      3⤵
                                        PID:2292
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,14885589419682873604,15382827428663379829,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6324 /prefetch:14
                                        3⤵
                                          PID:1456
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6496,i,5973723381506252248,3796936545624688446,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:14
                                          3⤵
                                            PID:2724
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,13307436236818980933,9550168348078274281,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
                                            3⤵
                                              PID:4408
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,3533546877240905140,5593777125278329180,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
                                              3⤵
                                                PID:5044
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6784,i,12759868788435119698,17867639252117124236,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
                                                3⤵
                                                  PID:2892
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6756,i,13309839603464893562,4800699215098733451,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
                                                  3⤵
                                                    PID:2352
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4612,i,16109490399896984841,2759383958938677313,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4980 /prefetch:14
                                                    3⤵
                                                      PID:3196
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3544,i,5783460861263933171,6138992820007900425,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4676 /prefetch:14
                                                      3⤵
                                                        PID:3864
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,9637674039204654177,869885972498213754,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
                                                        3⤵
                                                          PID:3684
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=6788,i,9405028553144679990,5573632720230405854,2097152 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:1
                                                          3⤵
                                                            PID:1440
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,863929752185220871,13363455272957478762,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6656 /prefetch:14
                                                            3⤵
                                                              PID:2016
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3724,i,2911867236828988039,17473258732027729025,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
                                                              3⤵
                                                              • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                              • NTFS ADS
                                                              PID:4344
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3660,i,8088526043723262175,9226322662706673615,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3756 /prefetch:14
                                                              3⤵
                                                                PID:3816
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,4299380682138268317,8209781287437998155,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:14
                                                                3⤵
                                                                  PID:2348
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=868,i,9881992488788665050,17131576706493402222,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6652 /prefetch:14
                                                                  3⤵
                                                                    PID:2912
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6940,i,2347179036619749075,12038529572257976922,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:14
                                                                    3⤵
                                                                      PID:3380
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=2436,i,7708883609546928691,8407008723377832774,262144 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=872 /prefetch:10
                                                                      3⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:4816
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,12517468657693429888,11483916353490156825,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6760 /prefetch:14
                                                                      3⤵
                                                                        PID:4016
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,7674841934118407998,8914350801600797748,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
                                                                        3⤵
                                                                          PID:1564
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6824,i,12256657304290395041,10028345574781944923,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
                                                                          3⤵
                                                                            PID:1800
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6648,i,3352439624674480941,17006736946799573119,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:14
                                                                            3⤵
                                                                              PID:2268
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2376,i,8737243437493371649,4400000316275259658,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=4864 /prefetch:14
                                                                              3⤵
                                                                                PID:352
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,16924470960758404463,15368705265055143361,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=1156 /prefetch:14
                                                                                3⤵
                                                                                  PID:1844
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3260,i,15101125900204842240,9279266592555085520,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:14
                                                                                  3⤵
                                                                                    PID:4016
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,7051977758722374289,15831097780447096394,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6732 /prefetch:14
                                                                                    3⤵
                                                                                      PID:3120
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6556,i,4769056828627590028,14460800351432888610,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6960 /prefetch:14
                                                                                      3⤵
                                                                                        PID:1420
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2744,i,10384127209665058824,12841363709634624426,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7148 /prefetch:14
                                                                                        3⤵
                                                                                          PID:4220
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,6382871842970793152,8528805140665856544,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:14
                                                                                          3⤵
                                                                                            PID:2352
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7044,i,4808856885637533829,5948040060836390050,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7132 /prefetch:14
                                                                                            3⤵
                                                                                              PID:1084
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2332,i,4057357055701501751,13952322551388719316,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=3796 /prefetch:14
                                                                                              3⤵
                                                                                                PID:4820
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7144,i,7465091018790773667,9734954853474770721,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:14
                                                                                                3⤵
                                                                                                  PID:2216
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2432,i,9186398444910977355,12433905694506656540,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:14
                                                                                                  3⤵
                                                                                                    PID:5052
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7060,i,9588991686354288564,10890786319707004604,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:14
                                                                                                    3⤵
                                                                                                      PID:4380
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3804,i,11694824236954751858,16598852209596707915,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
                                                                                                      3⤵
                                                                                                        PID:3508
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6972,i,5554870434353727254,11761681353847515193,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:14
                                                                                                        3⤵
                                                                                                          PID:1168
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7212,i,17516473089615292332,6671208859295848187,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:14
                                                                                                          3⤵
                                                                                                            PID:4072
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7124,i,12630970646112256854,12785885357911780217,524288 --field-trial-handle=2192,i,347928094285763435,8816303467235639156,262144 --variations-seed-version --mojo-platform-channel-handle=7060 /prefetch:14
                                                                                                            3⤵
                                                                                                              PID:2368
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                          1⤵
                                                                                                            PID:916
                                                                                                          • C:\Windows\system32\sihost.exe
                                                                                                            sihost.exe
                                                                                                            1⤵
                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                            PID:872
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe /LOADSAVEDWINDOWS
                                                                                                              2⤵
                                                                                                              • Boot or Logon Autostart Execution: Active Setup
                                                                                                              • Enumerates connected drives
                                                                                                              • Checks SCSI registry key(s)
                                                                                                              • Modifies registry class
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:1380
                                                                                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                            1⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:768
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:3120

                                                                                                          Network

                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                Replay Monitor

                                                                                                                Loading Replay Monitor...

                                                                                                                Downloads

                                                                                                                blocklist
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                • Size 105KB
                                                                                                                • SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                protocols.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                • Size 3KB
                                                                                                                • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                autofill_bypass_cache_forms.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                • Size 161B
                                                                                                                • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                edge_autofill_global_block_list.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                • Size 6KB
                                                                                                                • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                v1FieldTypes.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                • Size 509KB
                                                                                                                • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                crl-set
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                • Size 22KB
                                                                                                                • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                settings.dat
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                • Size 280B
                                                                                                                • SHA256 7da5fd99a0ab66e77a1c7d418475484f3755ec6c2945de3295f2577e789df01a
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                settings.dat
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                • Size 280B
                                                                                                                • SHA256 23823794b3b6267e9c083ddaf520ee01fa32d4516798865f1445a1abc4b04bbd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LOG.old
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                • Size 331B
                                                                                                                • SHA256 55687ab0d0c00599fa0162455997f4a38c6ab6980286b19ed6d731f77998de4f
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LOG.old
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                • Size 557B
                                                                                                                • SHA256 d647bec27428d1c3ee9dd8024175b61acd4955bbb82cc4d2d5cb2c793d60d8fa
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                MANIFEST-000001
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                • Size 275B
                                                                                                                • SHA256 4cbb8d10697e84290fa40f7935adc3e2f884bb2a702c5cac5fa855b0a1fc9452
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                MANIFEST-000001
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                • Size 158B
                                                                                                                • SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                • Size 6B
                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                the-real-index
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                • Size 3KB
                                                                                                                • SHA256 7d34499ee2986368a9c7851fc31601d4ae89ca07da0a40827db0cd2862b82039
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                the-real-index
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                • Size 3KB
                                                                                                                • SHA256 31c768a9d6046cb5ec5e8515cd77af7fe8ed0b2c2959f49c134c1b29557b48cc
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                the-real-index~RFe58dc32.TMP
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58dc32.TMP
                                                                                                                • Size 3KB
                                                                                                                • SHA256 f410b0b922bff55112aee9f727734fbf5f7148dffd3e20a742d6fcf47e328ebf
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                SiteList-Enterprise.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                • Size 2B
                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Edge Profile.ico
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                • Size 70KB
                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                HubApps
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                • Size 106KB
                                                                                                                • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 2KB
                                                                                                                • SHA256 38ab30d72f031708cfd804d3d113cd2881bb05261890f56b989fe8f762b1752e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 111B
                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 2KB
                                                                                                                • SHA256 0595e9ac9ae789ac1172e7c84e7de0992ad381da4eb92d86ce7a54d21c8bd1ad
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                SCT Auditing Pending Reports
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                • Size 2B
                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 13KB
                                                                                                                • SHA256 26417fd98a74c93de1d66e57232db454dcf59c0d6e5fc03856730d7500136fe5
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 14KB
                                                                                                                • SHA256 06b6de751f36519d35df915c8e910e9de73b34c0a880e6bf94924366a413a63f
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 15KB
                                                                                                                • SHA256 4044226b3105f7ead917b0faa8af240f578fb48852e0bcf1e896c1accd06d108
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 14KB
                                                                                                                • SHA256 effab9da818bbbd6fcca1e630a6922753fed5cfad28da8464d1dcf141245ba0f
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Secure Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                • Size 36KB
                                                                                                                • SHA256 47711210c0acad8307add384a7841881aa3daa8b55875e99e82599862c1f66b0
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                the-real-index
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83facec9-0843-46c0-8caf-89ceb43fda9f\index-dir\the-real-index
                                                                                                                • Size 1KB
                                                                                                                • SHA256 09900a0a19b59efb6588b08ee19aa72987b408ef73933afed4f808ea7d4897de
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                the-real-index~RFe5d2434.TMP
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\83facec9-0843-46c0-8caf-89ceb43fda9f\index-dir\the-real-index~RFe5d2434.TMP
                                                                                                                • Size 1KB
                                                                                                                • SHA256 4dcad63e8c792e318615ea530171e37ff3f01d1282d24c592540f3cdd3479cb2
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                index.txt
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                • Size 371B
                                                                                                                • SHA256 1ba94e4a1183505f78feff8bd072ede73af835e4fb1a868e7dfa6c8e3d4e9895
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                sync_diagnostic.log
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                • Size 4KB
                                                                                                                • SHA256 22c130531418c6c33ce4c49daace3511a38b0d5988582a5f91f8370232fdaf5c
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                domain_actions.dll
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                • Size 83KB
                                                                                                                • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                data.txt
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.10\data.txt
                                                                                                                • Size 146KB
                                                                                                                • SHA256 ca6b9158b966a4245500d5ba10ea6e123b65f82a4cac4e207cdc21a96406114b
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                OperationConfig
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                • Size 22KB
                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                OperationConfig~RFe5978ef.TMP
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5978ef.TMP
                                                                                                                • Size 3KB
                                                                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                office_endpoints_list.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                • Size 3KB
                                                                                                                • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 19KB
                                                                                                                • SHA256 7fe3df7d3900b0cc61fae0840f83f0196063a7295141fd6be65ce5cca3818938
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 30KB
                                                                                                                • SHA256 9d1dd28ea945d6601fba29afd16d98faa9fd609f57dc6d7f64341900ab40cb88
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 19KB
                                                                                                                • SHA256 3d2155e6c840456d4a9aad98edb3aed419e85fd9c869c7d46cb9bfb1fe43f41b
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 8KB
                                                                                                                • SHA256 d2bad19db458bf82e27530ad3f8596dd43e3420948fd950ee1499c7d85cf405b
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 30KB
                                                                                                                • SHA256 67f5cd4efa68f606f8d41968502de51b8dea0e0d5bdcbbba29108f61261012f9
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 8KB
                                                                                                                • SHA256 fa788eb5bd0a4e259b932fcf35121ceb8e1eff94ae622546b188efe65eee49f5
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                crs.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                • Size 233KB
                                                                                                                • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                ct_config.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                • Size 16KB
                                                                                                                • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                kp_pinslist.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                • Size 10KB
                                                                                                                • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                safety_tips.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                • Size 163KB
                                                                                                                • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                typosquatting_list.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                • Size 3KB
                                                                                                                • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Advertising
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                • Size 19KB
                                                                                                                • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Analytics
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                • Size 4KB
                                                                                                                • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                CompatExceptions
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                • Size 689B
                                                                                                                • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Content
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                • Size 4KB
                                                                                                                • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Cryptomining
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                • Size 668B
                                                                                                                • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Entities
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                • Size 68KB
                                                                                                                • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Fingerprinting
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                • Size 1KB
                                                                                                                • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                • Size 34KB
                                                                                                                • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Other
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                • Size 34B
                                                                                                                • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Social
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                • Size 754B
                                                                                                                • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                TransparentAdvertisers
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                • Size 105B
                                                                                                                • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Advertising
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                • Size 20KB
                                                                                                                • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Analytics
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                • Size 3KB
                                                                                                                • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Content
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                • Size 5KB
                                                                                                                • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Cryptomining
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                • Size 32B
                                                                                                                • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Entities
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                • Size 106KB
                                                                                                                • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Fingerprinting
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                • Size 2KB
                                                                                                                • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                • Size 66B
                                                                                                                • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Other
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                • Size 198B
                                                                                                                • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Social
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                • Size 3KB
                                                                                                                • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                keys.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                • Size 8KB
                                                                                                                • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                typosquatting_list.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.6.6.1\typosquatting_list.pb
                                                                                                                • Size 555KB
                                                                                                                • SHA256 b95639cf9dc46683acccb9ead8440ae9d6a852a37407cc7cd9c0b309acf7af1a
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                nav_config.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                • Size 2KB
                                                                                                                • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 132B
                                                                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 492B
                                                                                                                • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 732B
                                                                                                                • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 372B
                                                                                                                • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 852B
                                                                                                                • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 45a6b06e48cb3eedac93a0d53aa71f535bd43cbf956b7e1b9214bb14d119b498
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 d06ee63cf14c15bbf76574453fd32c1612782df89c8ff41ff990d1745b65948d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 c61c158a6a89f70010a906715e59a8a6dcb90d0d1cd1784f0be9e79dcb0352e0
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 612B
                                                                                                                • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 972B
                                                                                                                • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 2KB
                                                                                                                • SHA256 14af92899542b11161cc5a0be9a2b92a4aca8c485635681f83b0f3adbaafeff4
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 24a5dd9052ac8317b7eb8f94512306cb8c29c48116f4ffddbb8e253d305a77e0
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 252B
                                                                                                                • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                105113db-ffc9-45ac-abc3-af773310e5b2.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\105113db-ffc9-45ac-abc3-af773310e5b2.tmp
                                                                                                                • Size 13B
                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                6795e9a0-cd51-456e-bdd0-e2f3dd5654ce.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\6795e9a0-cd51-456e-bdd0-e2f3dd5654ce.tmp
                                                                                                                • Size 1B
                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                a0aa418f-2fbf-497b-995d-d26e989f3ff3.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\a0aa418f-2fbf-497b-995d-d26e989f3ff3.tmp
                                                                                                                • Size 10KB
                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                39dbd4b3-7c87-4926-b933-9114bc945d61.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2008_1418651895\39dbd4b3-7c87-4926-b933-9114bc945d61.tmp
                                                                                                                • Size 147KB
                                                                                                                • SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                content_new.js
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2008_1751125518\CRX_INSTALL\content_new.js
                                                                                                                • Size 10KB
                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                windowsdesktop-runtime-10.0.8-win-x86.exe:Zone.Identifier
                                                                                                                • Path C:\Users\Admin\Downloads\windowsdesktop-runtime-10.0.8-win-x86.exe:Zone.Identifier
                                                                                                                • Size 185B
                                                                                                                • SHA256 d06aa85e3075889a6ed0e8b6fc14686a81cd7be7275bdd69509766e52b547672
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1036768492\manifest.json
                                                                                                                • Size 119B
                                                                                                                • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1375138267\LICENSE
                                                                                                                • Size 1KB
                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1375138267\manifest.json
                                                                                                                • Size 79B
                                                                                                                • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_139513326\manifest.json
                                                                                                                • Size 72B
                                                                                                                • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1490955328\manifest.json
                                                                                                                • Size 160B
                                                                                                                • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1732384648\manifest.json
                                                                                                                • Size 135B
                                                                                                                • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Staging
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1761900023\Sigma\Staging
                                                                                                                • Size 36B
                                                                                                                • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1761900023\manifest.json
                                                                                                                • Size 132B
                                                                                                                • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_1989179307\manifest.json
                                                                                                                • Size 53B
                                                                                                                • SHA256 76daf0ebbaf97179fc4ab99dd6cace2b80ede8e39dd50c153e97e6649f6f5773
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_2011046038\manifest.json
                                                                                                                • Size 43B
                                                                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_2011052028\manifest.json
                                                                                                                • Size 135B
                                                                                                                • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_517490349\manifest.json
                                                                                                                • Size 238B
                                                                                                                • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_570037622\manifest.json
                                                                                                                • Size 177B
                                                                                                                • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_602599368\manifest.json
                                                                                                                • Size 113B
                                                                                                                • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_716062835\manifest.json
                                                                                                                • Size 160B
                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_789936648\manifest.json
                                                                                                                • Size 102B
                                                                                                                • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_810237874\manifest.json
                                                                                                                • Size 165B
                                                                                                                • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_892850450\manifest.json
                                                                                                                • Size 85B
                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping2008_97037620\manifest.json
                                                                                                                • Size 117B
                                                                                                                • SHA256 0f38d58679ba75ccf1b80144c998549e09e08e8fce7e1c6ecf35142ef004131f
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                memory/768-1000-0x0000023F00200000-0x0000023F00220000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-1003-0x0000023F00220000-0x0000023F00240000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-1002-0x0000024000500000-0x0000024000520000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-1079-0x00000240025A0000-0x00000240026A0000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-944-0x0000023EECB10000-0x0000023EECC10000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-953-0x0000023EEC950000-0x0000023EECA50000-memory.dmp
                                                                                                                Download

                                                                                                                memory/768-1017-0x0000024001400000-0x0000024001420000-memory.dmp
                                                                                                                Download