Analysis

  • user interaction
    yes
  • max time kernel
    1049s
  • max time network
    1041s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 12:30

General

  • Target
    http://google.com
  • Sample260825-ppxrfsscqa
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4848
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9b409c188,0x7ff9b409c194,0x7ff9b409c1a0
      2⤵
        PID:4464
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1848,i,14923403053050415192,15951596695182416498,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3284
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1920,i,3178241291547831301,15182640296943457852,262144 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=2860 /prefetch:2
        2⤵
          PID:1160
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2304,i,13775925006665165797,1352853997733105627,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=3124 /prefetch:8
          2⤵
            PID:2172
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,1197656198561528489,13965879137760572213,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
            2⤵
              PID:4592
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,3408158672075397900,6023394211470392042,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
              2⤵
                PID:2532
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4220,i,6953701964058513227,13910385267350404645,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
                2⤵
                  PID:3684
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4188,i,5277858771334810986,1530566346271290799,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:2
                  2⤵
                    PID:3952
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3488,i,436113354091513469,7386666905202576838,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
                    2⤵
                      PID:4988
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,1457732759795535577,8423746333396011708,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
                      2⤵
                        PID:1904
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5872,i,8907694242326688921,18126682012352075875,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:1
                        2⤵
                          PID:1536
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,7712066983416548193,6364525382727520481,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
                          2⤵
                            PID:3768
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,7712066983416548193,6364525382727520481,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:8
                            2⤵
                              PID:4756
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4996,i,2380219665560208104,17800781045876334404,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
                              2⤵
                                PID:4324
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4032,i,12392664416294072645,5357450159652782847,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:1
                                2⤵
                                  PID:4516
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,15429759478166425950,17246394283522716388,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                                  2⤵
                                  • Modifies registry class
                                  PID:4468
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,1551838429909159499,14344518468273206681,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=4028 /prefetch:8
                                  2⤵
                                    PID:2160
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,8552527938852967629,3047471060669662594,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                    2⤵
                                      PID:1736
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,11856032839001660899,5466302125285675628,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6744 /prefetch:8
                                      2⤵
                                        PID:5052
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,16822709456029493258,17333961034540622476,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6788 /prefetch:8
                                        2⤵
                                          PID:4428
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,9465290774328384645,12863309801963189646,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6728 /prefetch:8
                                          2⤵
                                            PID:2236
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5404,i,3248803992740974659,507636230067767016,262144 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:3176
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3264,i,5559128948098638452,7495038143230829010,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
                                            2⤵
                                              PID:4832
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3284,i,11413157149407292767,12929354550772777967,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
                                              2⤵
                                                PID:2532
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5264,i,628387647009937382,10079173900992195873,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=1344 /prefetch:8
                                                2⤵
                                                  PID:2272
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5224,i,13390546296763561590,931796351707331072,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
                                                  2⤵
                                                    PID:3840
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=4996,i,4785329553734887173,6937260285395750151,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                                    2⤵
                                                      PID:2860
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7176,i,4223519742975698247,15769513197054609638,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
                                                      2⤵
                                                        PID:2120
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7312,i,1378324367748932268,16336137528600077502,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
                                                        2⤵
                                                          PID:4944
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7220,i,9011585484383882395,11313748665248957539,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:1
                                                          2⤵
                                                            PID:3416
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7152,i,5032444610451690144,244597965007334497,2097152 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=7360 /prefetch:1
                                                            2⤵
                                                              PID:5020
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5276,i,9284191332159088039,10773960022200722645,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:8
                                                              2⤵
                                                                PID:1588
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7440,i,13115479348371470160,9368812798154460668,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=7428 /prefetch:8
                                                                2⤵
                                                                  PID:2876
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7036,i,18381195964193160720,7969550382775026720,524288 --field-trial-handle=2832,i,2980695650901949496,13696727592525755697,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:8
                                                                  2⤵
                                                                    PID:1064
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                  1⤵
                                                                    PID:4756

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        CrashpadMetrics-active.pma

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
                                                                        • Size 16KB
                                                                        • SHA256 814d47aad78c212b52568b9c7b58d242899d490d3afebce66181cae50c880df5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 81240d13af4ca099e1358c75991e3fa5640dbb3aac72c2d98006f6159bf74aa0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 4bf0783d55eb083b4adaa03ed8b76a2bd35b0819c8ad2530a78e1b8d6856010b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        000003.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000003.log
                                                                        • Size 33B
                                                                        • SHA256 68c7ad234755b9edb06832a084d092660970c89a7305e0c47d327b6ac50dd898
                                                                        • MD5 SHA1 SHA512

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 293B
                                                                        • SHA256 1296a846989d9ac482f38a04b27e7dddce957141cf3043ff0c24fde91f923444
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                        • Size 331B
                                                                        • SHA256 a1b24b10df06c9210a5011a2f66d68bfc76015a5667648484762640f652bcf62
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                        • Size 41B
                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                        • MD5 SHA1 SHA512

                                                                        f_0000ad

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                        • Size 53KB
                                                                        • SHA256 351ba345250baf98ce325b4017ac9b96c9498f6644937ef558dc5993af676f2a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b1

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                        • Size 312KB
                                                                        • SHA256 0b6251fd38152a7a7319d54a8e993417dfe359650a9581c135c3950fe5704861
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                                                        • Size 39KB
                                                                        • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000eb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000eb
                                                                        • Size 29KB
                                                                        • SHA256 380802e4398bc5c2f5d5e62dffbe960b6380e88dcfa6d0d708be8d5c21cac145
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ec

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ec
                                                                        • Size 163KB
                                                                        • SHA256 f095e7c76f047f40a4fcaf7a4299c67af9f04d6559538405f5eafd25bb82bc8d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ed

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ed
                                                                        • Size 196KB
                                                                        • SHA256 450cfac07a02bd8561e8cb00b69a8efbe2092749a9f86643800965b44b962c85
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ee

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
                                                                        • Size 16KB
                                                                        • SHA256 a161934ac4d3512f9405598e9710e06046cbf7dfc6af31cd810201e55184aefc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ef

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ef
                                                                        • Size 320KB
                                                                        • SHA256 6a752d3fdf26c0dd07673090819f9f11eb102aa51b467b8dd079d048f84fe5d0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f0

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f0
                                                                        • Size 61KB
                                                                        • SHA256 50bb48ebb6befbda811abeebd5909fcd736bcd74077dc9495ab79f9fa048305a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f1

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f1
                                                                        • Size 109KB
                                                                        • SHA256 c5bbb76c2327b7a9ab74fc347e341c5cb3decbff73f0fffa360442ffbf2fc668
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f2

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f2
                                                                        • Size 1.8MB
                                                                        • SHA256 6a9d4cc383496c6ca5998349caf513c2bdd31eb4710f811b95f2e86aa7b44f17
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f3
                                                                        • Size 405KB
                                                                        • SHA256 2d93c8738c026a7159922b35e7be5210ea075b87b4c4c9c2930cf53387c20609
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f4

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
                                                                        • Size 438KB
                                                                        • SHA256 c6c6b53d0316281455f6e79030272b51ebb8caa865a3101297197120fcdb1632
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f5

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
                                                                        • Size 42KB
                                                                        • SHA256 537b4a4524181b8c416b61096d164215aee7bca6e370e70506f4d05273586f70
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f6

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
                                                                        • Size 19KB
                                                                        • SHA256 bc79103b14d9341776a962a07c5e0cb34e5198998fd7afa7109203a7e403ece3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f7

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                        • Size 125KB
                                                                        • SHA256 b9f2fb6b113df52e6053540132e53779bbe45dd05d12fc3e9347bdce1e0a1e84
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f8

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
                                                                        • Size 281KB
                                                                        • SHA256 c227087276fdffab4942c50716b471412adf57190904465405e75e58a6a3bf27
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f9

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
                                                                        • Size 20KB
                                                                        • SHA256 ee20aa2a76543566433cdd54c3b095a52bc525b7cfa881b69b32dc7aab24a3be
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fa

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fa
                                                                        • Size 37KB
                                                                        • SHA256 8e401b056dc1eb48d44a01407ceb54372bbc44797d3259069ce96a96dfd8c104
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fb
                                                                        • Size 156KB
                                                                        • SHA256 313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fc

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fc
                                                                        • Size 38KB
                                                                        • SHA256 ae99aaede2f373187a4fe442a2cb0ab9c2945efbab01cf33e01be517c0c4f813
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fd

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fd
                                                                        • Size 38KB
                                                                        • SHA256 440ad8b1449985479bc37265e9912bbf2bf56fe9ffd14709358a8e9c2d5f8e5b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 15KB
                                                                        • SHA256 74f702ef29726f22bb1d65fbc08b01d802d92564aee33418b18ea96512750a90
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 4KB
                                                                        • SHA256 a6272db88308f1678fcf86355c85c5dcbfe6df0889e0ac4a1ada3cd3933a9861
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 4KB
                                                                        • SHA256 9a58a31e86b9836c8b5724af9934eec43cb887d8f00ae3d333078db2c60f2539
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 4KB
                                                                        • SHA256 56a22a1f246bb647855ff2b3f385226124bc42971a5c9519d0dd6abaafdd2fd5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index~RFe5950c6.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5950c6.TMP
                                                                        • Size 3KB
                                                                        • SHA256 9b3a169cd67f2ba5ee90facbd9c922d5c36dc43f96bed28cb949709202ad9cfb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Edge Profile.ico

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                        • Size 70KB
                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EntityExtraction\EntityExtractionAssetStore.db\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mail.google.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                        • Size 23B
                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                        • MD5 SHA1 SHA512

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 13KB
                                                                        • SHA256 5a2b0c46cd1a84160620c4223d83b231412e36b5fb684eaaaf829e7a0ae0c070
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 10KB
                                                                        • SHA256 9fc93fcd999d8e0725ba98800221b4981411482ddb8eb3813118e886f13766fe
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 111B
                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 7KB
                                                                        • SHA256 e9c8c8868296899e286be0c877a21ef3521833658da0111e597ce6fc64875793
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 14KB
                                                                        • SHA256 ed97467a3cde3b6b92272115a84793b0519e9439990cc8e9b291fa7eec6b0f44
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 10KB
                                                                        • SHA256 ed49c14011f0c89aa425e4f2a2e9f14aad90eaa0c27ee0b866e6bffc28d85b94
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 10KB
                                                                        • SHA256 bb4fe46b3321c82e2f1ae83999744ef2a7b7809dd9d03f507f1d08d6093b5be9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 13KB
                                                                        • SHA256 b2905568c9f741f73e5c858d2d4e26e64648dbd2ef8cccc3ce8c44190fd77c55
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 10KB
                                                                        • SHA256 6a7413777c645c2ffca7bdf37cde0c9f55f2f8417cbd0f566bc352c5ff3a0ac8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 11KB
                                                                        • SHA256 b7a9ea9c7876198b9c5fe233e763c18951822cf41c79336add55525c78617bad
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 12KB
                                                                        • SHA256 dacfc697c2866e9e02a06f9deb5b5bdb22f38dc08c7ae3cfbc1e4effebad14d0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 11KB
                                                                        • SHA256 a5995968708036162c1906516a165b874ae4cdf70bb026f1e20f630bafb85a39
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 13KB
                                                                        • SHA256 1358562b4ba63bc5f503bd37f1e047c377879caec191bccbd1f6360c58d275c0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 13KB
                                                                        • SHA256 aceb78bbdbc90af424a316ac5856c6578fd2e41b5ba2b6dfa50eb9ef05975860
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 11KB
                                                                        • SHA256 d17989521f38ca61fe3ad3ed89ec5c676681d2a960198442cc1457062c7eb8c2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 27KB
                                                                        • SHA256 a694e26ca0d9c1d2859bdc4d9870736b7f121180ba562548f81df4f83e00c369
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                        • Size 27KB
                                                                        • SHA256 768165d7c373ea72aa8aeb3431cfd2ac4c8023c1361869550cd7676991aa0bb1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index
                                                                        • Size 456B
                                                                        • SHA256 b0b63a2947c3c943c0cc828fdbf1fa49a8cc9aa568e622b3628da40cda03ef02
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5d3599.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\dfa4cd3b-6396-44b1-9341-22ecfa35924f\index-dir\the-real-index~RFe5d3599.TMP
                                                                        • Size 456B
                                                                        • SHA256 a48a4cdea3434b06901f58b593e74e33793758183129b4791935a7c9c67c0d5d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                        • Size 371B
                                                                        • SHA256 638183aac57b47cacb1b93cebfe58c542d390670ac49cc0e022bc5ae105c1114
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\91c5d4e3-1878-4e97-870f-3ebb9e5ecdc5\index-dir\the-real-index
                                                                        • Size 144B
                                                                        • SHA256 70ec13446d172a0a4328205fa66b1a7272df7322a6f09f3cf2b18ec3f33f8fbf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5bf5f5.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\91c5d4e3-1878-4e97-870f-3ebb9e5ecdc5\index-dir\the-real-index~RFe5bf5f5.TMP
                                                                        • Size 48B
                                                                        • SHA256 ae79e10b1a3c2926c508301f885cae74714b67789d32e5d5dec9bb1a006266ba
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\996b304f-ea37-4380-906d-d5a09c635800\index-dir\the-real-index
                                                                        • Size 120B
                                                                        • SHA256 934876b8f441381410b8cd60a394758fc820bffeaf73a887de009926e39d813c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5bf79b.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\996b304f-ea37-4380-906d-d5a09c635800\index-dir\the-real-index~RFe5bf79b.TMP
                                                                        • Size 48B
                                                                        • SHA256 3d3ee13799477c5c66f5cb2995d5eae17769428e7df2fb2d950e0dcf86ed20ec
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ee7c68f0-de64-42f7-83e0-f3f9e90d5c0f\index-dir\the-real-index
                                                                        • Size 11KB
                                                                        • SHA256 27370acbeaceeab515a957f0e50cd90c1481fbcf9418996560003fe4dad8fa88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index~RFe5c86ac.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\ee7c68f0-de64-42f7-83e0-f3f9e90d5c0f\index-dir\the-real-index~RFe5c86ac.TMP
                                                                        • Size 48B
                                                                        • SHA256 ee2826d2429afb44850252d6d3569574b1cd4bbc5f94039072e2c34ed2ad63f6
                                                                        • MD5 SHA1 SHA512

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\f0b79869-8773-4f0d-96e0-9ca66b014997\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 fa4e863ec7840737248a43a7fd5c15f43f51f0715c117534bdcff9eb76a0e70c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5bf7ab.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\f0b79869-8773-4f0d-96e0-9ca66b014997\index-dir\the-real-index~RFe5bf7ab.TMP
                                                                        • Size 48B
                                                                        • SHA256 741eb9afb7157532f1e8d58644bafcca282572135eb8f9605e3d69de531a7118
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
                                                                        • Size 450B
                                                                        • SHA256 d264980cba3e6e049ed9a5dc1e9c359e3f0788097716dc3643cf44908455e083
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
                                                                        • Size 542B
                                                                        • SHA256 fa0ce825a4e1d0842bb87930d0829900349725a93e427122a6d596e962226d27
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
                                                                        • Size 651B
                                                                        • SHA256 34299d3e147bb9f670bfb37d574c37abeca7cfcf3d5eb3cbc5c21f0d1177b692
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
                                                                        • Size 646B
                                                                        • SHA256 75720e33ce1927b2f636791abac677a1c9d0f173db8f264a0dfc860bfe864890
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt~RFe5ba823.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt~RFe5ba823.TMP
                                                                        • Size 261B
                                                                        • SHA256 010780e763832fbb34c3257734e224b807629fb95ffe5ace2532bf4c5268ff15
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\fc18fb75-f422-46cd-a071-42032ca085d8\index
                                                                        • Size 24B
                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                        • Size 233B
                                                                        • SHA256 93d6df4f05b3dad8922102ae1e25cc3d4036794d4f5f1a9fb552e5cdf8477a85
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                        • Size 226B
                                                                        • SHA256 124156bbbeb815c114103fdc93b5141fe820b44301716c1e755abc7e5d28bb32
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt~RFe5bd8b9.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe5bd8b9.TMP
                                                                        • Size 138B
                                                                        • SHA256 da0ec1cdbf438339539de26425c249611ff3bae5f8da149bade2066755d51e3d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 7c5b9aaee6eb19091a65b754cb2013d94d900cd7f0adfab60045fec0e3d6cb3d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index~RFe5bf3b3.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5bf3b3.TMP
                                                                        • Size 48B
                                                                        • SHA256 f4d42ea6779847dbf85b57c9076e2f1f96da2efd2ccc003a0639434e059a13e7
                                                                        • MD5 SHA1 SHA512

                                                                        dfb01900d4c6dca3_0

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\dfb01900d4c6dca3_0
                                                                        • Size 191KB
                                                                        • SHA256 46c262cbacd91aa24c8a67842e989215350558c8c68f5c2f1cf7742ea23fc588
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 29bc6ec9e7ee19e931ccf45aa5f131b6c2f0d12117248759b289fda57dcd1f36
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        0f3518b8-4ec7-457b-8104-17b539428086.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\0f3518b8-4ec7-457b-8104-17b539428086.tmp
                                                                        • Size 22KB
                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 f9d5df88c93796bc63e2177c7ac4693393bd465c3bf5a31bf4df5f45b79cfeb6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 8KB
                                                                        • SHA256 dcb3b4a7cfacdb0eb7093ca8dd8b165775c346c212159e7c0d2e48087aa228fe
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 41e07c7a4370275043129737dc65056914feb340a08613a710d36c8d6921744c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 18KB
                                                                        • SHA256 8572f5024e9513c8088a5f6eef4b51e6ba6a9a430439e32e9f44a8aab573b41e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 8KB
                                                                        • SHA256 6e01c84fa38d05073dc5c03aafa69c583b647c5b7a7f6750e39b418982483550
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 12KB
                                                                        • SHA256 17c530ab0498ce3cfbb2195dbd7fe59b57398a8fe7ef173ac4615ba15de54051
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 a3b0e456883dc4b32084c6a7847fcbac7ebe0b29b5b8d3af2f2296f51a0945c2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 a8d4003fabb5419ea6b3e0bc71412a5dbe0245a2df495a4a13802ff1d448bd43
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 a76d523e6c6fa38f5effa3ea7e5c24341c3ff95de2e4cba495b8aabff2316476
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 c90ed909fd36dbffcaf5d58566a5c7083365be9e66dd225159ce4bf310edf8cb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 66cd89a9433b5e954961d9837ac6319785001a47143879cc6e53a445534c20c9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 5aeb73dde60287283ef99ba6b4b56ee4276db514b8710caffc38805c95dd424c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 803dbc2b91e079556a649924d33a96105d2f095fcbe11391db39fd2800a86664
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 e709a90e5b61f28aebe847ae4b8e3db11d20f2964874e70b6acac4fa53802e72
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 342798cde3b372569f6ccaac298a7a8e027785d733ad53d84ca118051a22588b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        RevisitationBloomfilter~RFe59139e.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe59139e.TMP
                                                                        • Size 392B
                                                                        • SHA256 08f9dbbed34e81d22be66bdb0f70f4bdd7daea7de1322b85c7f1301c5d8be495
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        197d9092-2ed7-485c-b671-9831b681d165.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\197d9092-2ed7-485c-b671-9831b681d165.tmp
                                                                        • Size 13B
                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                        • MD5 SHA1 SHA512

                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                        • Size 2KB
                                                                        • SHA256 6fc111a93427e828dd9f45137fc3e337f6891681adae705ec13eeb6b48b198a8
                                                                        • MD5 SHA1 SHA512 TLSH