Overview

overview

9

Static

static

3

$PLUGINSDI...em.dll

windows11-21h2-x64

9

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$TEMP/devcon.exe

windows11-21h2-x64

1

$TEMP/devgen.exe

windows11-21h2-x64

AdbWinApi.dll

windows11-21h2-x64

3

AdbWinUsbApi.dll

windows11-21h2-x64

3

IriunWebcam.exe

windows11-21h2-x64

8

adb.exe

windows11-21h2-x64

3

avcodec-62.dll

windows11-21h2-x64

6

avutil-60.dll

windows11-21h2-x64

3

devcon.exe

windows11-21h2-x64

engine.dll

windows11-21h2-x64

3

netcorecheck.exe

windows11-21h2-x64

3

swscale-9.dll

windows11-21h2-x64

3

Analysis

  • max time kernel
    898s
  • max time network
    893s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    28/08/2026, 18:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    IriunWebcam.exe
  • Size 503KB
  • Sample260828-xmkccasdnc
  • SHA256 a321ce1ab7516afaf6de60097f5967cb0d899d781b3eadbd10dd8942c421b292
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Downloads MZ/PE file 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

    defense_evasion
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 56 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of AdjustPrivilegeToken 30 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\IriunWebcam.exe
    "C:\Users\Admin\AppData\Local\Temp\IriunWebcam.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4928
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://aka.ms/dotnet-core-applaunch?missing_runtime=true&arch=x86&rid=win-x86&os=win10&apphost_version=10.0.10&gui=true
      2⤵
      • Loads dropped DLL
      • Drops file in Windows directory
      • System Time Discovery
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3768
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ffa7d08c188,0x7ffa7d08c194,0x7ffa7d08c1a0
        3⤵
          PID:3920
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,6517653007813732115,17281589510513481006,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=2688 /prefetch:11
          3⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:4644
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,4348063304006303662,1666431072314352981,262144 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=2632 /prefetch:2
          3⤵
            PID:768
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2164,i,8142662276295268970,1593004425456714774,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:13
            3⤵
              PID:2392
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,13265075041465441175,12785136847905761575,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
              3⤵
                PID:2984
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,9905066365391738435,13448623829138811157,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
                3⤵
                  PID:3168
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4160,i,11693954760027978187,4754681712475143467,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4252 /prefetch:1
                  3⤵
                    PID:2076
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4180,i,4033895901597554429,15525239364625845962,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4268 /prefetch:1
                    3⤵
                      PID:2332
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,15896440600087179332,5328410891569503846,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:9
                      3⤵
                        PID:1880
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4192,i,5456729985723607902,1821561600157200969,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:9
                        3⤵
                          PID:1476
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,8306285064363922448,8129881351589136537,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:14
                          3⤵
                            PID:2928
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5432,i,6675817962488148795,3680278744423431748,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:14
                            3⤵
                              PID:3596
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5200,i,14978526494588270722,16562639659679979174,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                              3⤵
                                PID:856
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3992,i,3338708403903521780,1321479991631631491,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:14
                                3⤵
                                  PID:1544
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3980,i,16590277084799313129,3190929349491385752,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:14
                                  3⤵
                                    PID:2496
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,8789997933232914050,496402704499513285,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:14
                                    3⤵
                                    • Suspicious use of WriteProcessMemory
                                    PID:4968
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                      cookie_exporter.exe --cookie-json=1144
                                      4⤵
                                        PID:4216
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,17611554057470642710,12132840032754552715,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
                                      3⤵
                                        PID:4600
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,17611554057470642710,12132840032754552715,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:14
                                        3⤵
                                          PID:4988
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,2835922147672457138,13255352752612297080,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:14
                                          3⤵
                                            PID:3432
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6688,i,13798231376531249137,10576113893960599510,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
                                            3⤵
                                              PID:2772
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6548,i,3874003276167154294,10445173842855060959,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6420 /prefetch:14
                                              3⤵
                                                PID:4088
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,10387161424094610680,18443441662525491946,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
                                                3⤵
                                                  PID:2276
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,3801650025682456613,15512987178605867879,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6460 /prefetch:14
                                                  3⤵
                                                    PID:4648
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,4211501422152339332,1357183683180422404,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:14
                                                    3⤵
                                                      PID:4804
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7004,i,7678717481772280123,2239394234495206156,2097152 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
                                                      3⤵
                                                        PID:2600
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,2212436908444328707,18240724613413593971,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
                                                        3⤵
                                                        • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                        • NTFS ADS
                                                        PID:2948
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6956,i,1543442089564018526,15955137174828730375,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=728 /prefetch:14
                                                        3⤵
                                                          PID:3132
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,3485461390094312210,8838280344561258282,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:14
                                                          3⤵
                                                            PID:2876
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6176,i,788285326249662995,6316789901011434836,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:14
                                                            3⤵
                                                              PID:5112
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7232,i,9833065684580711721,12661441973144379630,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=1932 /prefetch:14
                                                              3⤵
                                                                PID:4616
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4640,i,17559520462814600132,175743081977189348,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
                                                                3⤵
                                                                  PID:2720
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7228,i,5154265052920146464,8418004882644295073,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=7256 /prefetch:14
                                                                  3⤵
                                                                    PID:2584
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,11174164586720743166,16242011093156926434,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:14
                                                                    3⤵
                                                                      PID:4280
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4652,i,13727928041350844571,10605698735520337840,262144 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:10
                                                                      3⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:4864
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3292,i,18332184663087637554,12709067723525533395,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
                                                                      3⤵
                                                                        PID:4040
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6092,i,2341886628837942994,14511964080402723526,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:14
                                                                        3⤵
                                                                          PID:2148
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,4724168667264136418,3244931196672418588,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:14
                                                                          3⤵
                                                                            PID:4068
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6088,i,12530230598799751509,13395872608082036103,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3972 /prefetch:14
                                                                            3⤵
                                                                              PID:4596
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3296,i,3716612705752823970,10649097372704040685,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:14
                                                                              3⤵
                                                                                PID:592
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,12297619576844811966,3217042431404654951,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:14
                                                                                3⤵
                                                                                  PID:2692
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,11272391872412968521,12056168254959495950,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3428 /prefetch:14
                                                                                  3⤵
                                                                                    PID:1920
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6740,i,9039525446980924387,16281476688687592290,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:14
                                                                                    3⤵
                                                                                      PID:4900
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7432,i,5577047075937853865,18219677684283368437,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:14
                                                                                      3⤵
                                                                                        PID:3124
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7312,i,14811287474206448450,17175854968796877401,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=2624 /prefetch:14
                                                                                        3⤵
                                                                                          PID:4240
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,5566084697259991964,17503700980085094868,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
                                                                                          3⤵
                                                                                            PID:3268
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6052,i,3152910506547537033,9216676720385041595,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5156 /prefetch:14
                                                                                            3⤵
                                                                                              PID:3204
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6212,i,617534122279586743,9388824814014298168,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
                                                                                              3⤵
                                                                                                PID:3512
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6032,i,7551936599822683868,16051727512986011240,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:14
                                                                                                3⤵
                                                                                                  PID:928
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,8846507972269106200,8505056374341034296,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:14
                                                                                                  3⤵
                                                                                                    PID:796
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,3951208078346128613,16417040659410490176,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:14
                                                                                                    3⤵
                                                                                                      PID:5112
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5196,i,300630014681354170,8076145221214034487,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:14
                                                                                                      3⤵
                                                                                                        PID:2052
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5876,i,10358283339994112864,3899797960685611022,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=7456 /prefetch:14
                                                                                                        3⤵
                                                                                                          PID:572
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,8681597037954377646,1232662691625275970,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5072 /prefetch:14
                                                                                                          3⤵
                                                                                                            PID:2040
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5012,i,10010563898710121508,16366993626799967890,524288 --field-trial-handle=2636,i,3773335502288443351,8265746886613260628,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
                                                                                                            3⤵
                                                                                                              PID:8
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                          1⤵
                                                                                                            PID:4152
                                                                                                          • C:\Windows\system32\sihost.exe
                                                                                                            sihost.exe
                                                                                                            1⤵
                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                            PID:244
                                                                                                            • C:\Windows\explorer.exe
                                                                                                              explorer.exe /LOADSAVEDWINDOWS
                                                                                                              2⤵
                                                                                                              • Boot or Logon Autostart Execution: Active Setup
                                                                                                              • Enumerates connected drives
                                                                                                              • Checks SCSI registry key(s)
                                                                                                              • Modifies registry class
                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                              • Suspicious use of FindShellTrayWindow
                                                                                                              • Suspicious use of SendNotifyMessage
                                                                                                              • Suspicious use of SetWindowsHookEx
                                                                                                              PID:5016
                                                                                                          • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                            "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                            1⤵
                                                                                                            • Enumerates system info in registry
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:3964
                                                                                                          • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                            "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                            1⤵
                                                                                                            • Modifies registry class
                                                                                                            • Suspicious use of SetWindowsHookEx
                                                                                                            PID:2320

                                                                                                          Network

                                                                                                                MITRE ATT&CK Enterprise v16

                                                                                                                Replay Monitor

                                                                                                                Loading Replay Monitor...

                                                                                                                Downloads

                                                                                                                protocols.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                                                                • Size 3KB
                                                                                                                • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                autofill_bypass_cache_forms.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                • Size 161B
                                                                                                                • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                edge_autofill_global_block_list.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                • Size 6KB
                                                                                                                • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                v1FieldTypes.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                • Size 509KB
                                                                                                                • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                crl-set
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                • Size 22KB
                                                                                                                • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                settings.dat
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                • Size 280B
                                                                                                                • SHA256 9268c81dd8afa6fbdc34d051a638b4dce94ab92618da951ddb0bc7dc51433fef
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                settings.dat
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                • Size 280B
                                                                                                                • SHA256 adf1ac7ef6ad2f467814611b23b5905d27bfbc301c113cc0f42faa887b0cf867
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LOG.old
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                • Size 334B
                                                                                                                • SHA256 0f218f45d88e4885ba539c41f8fceec8d270fe5d9c8e30196ad3987287fc30e4
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LOG.old
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                • Size 770B
                                                                                                                • SHA256 36b930505c88e8d773519c128b9a0237f9e7dc0fbebae57d5b9f4d25daf63906
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                MANIFEST-000001
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                • Size 158B
                                                                                                                • SHA256 3162af488c283bbdb6565f4200727821b4e60ce0c47948b8d5b3655271a2625a
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                BookmarkMergedSurfaceOrdering
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                • Size 6B
                                                                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                the-real-index
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                • Size 3KB
                                                                                                                • SHA256 c1c22680cdc06dc8e78a7f07264831d94f3885b14838de9db0cb012d68443613
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                the-real-index~RFe58fa97.TMP
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58fa97.TMP
                                                                                                                • Size 3KB
                                                                                                                • SHA256 e9fb20437c23af174f5cba7f1b11948da89c2d5cabfd4fde6841ee65f857f51b
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                SiteList-Enterprise.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                • Size 2B
                                                                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Edge Profile.ico
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                • Size 70KB
                                                                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 3KB
                                                                                                                • SHA256 ca05628cb5b229e656eb2e92c08fb38a24fc121ba7ab5fb4a1859366d91d8a76
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 3KB
                                                                                                                • SHA256 7c298585031dc68e8be209cbec762d62fe52be17ead281550d58f964db4e9a70
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Network Persistent State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                • Size 111B
                                                                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                SCT Auditing Pending Reports
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                • Size 2B
                                                                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 14KB
                                                                                                                • SHA256 9d804f32b3f370409f34ebfe112147d7f8791ad240583227351d298f3c63ddc4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                • Size 14KB
                                                                                                                • SHA256 0a31a6ac99f9017a961c531032e7d2afed988f88b6433c8057fdd2b97ddb4a72
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Secure Preferences
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                • Size 36KB
                                                                                                                • SHA256 46aded3f72f7e0aa6bb46a56c7581b696e7587036812ee2e462b98af218f3ff0
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                index.txt
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                • Size 371B
                                                                                                                • SHA256 50cb643d1a22cf193361f98e16154eda2db9565bc369ae83423b1928b2fb86ed
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                sync_diagnostic.log
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                • Size 5KB
                                                                                                                • SHA256 60d48951edea106eeea36b95094a4444b9d6ee350d4cb72baa5408aa0b00989f
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                domain_actions.dll
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.20\domain_actions.dll
                                                                                                                • Size 82KB
                                                                                                                • SHA256 e5c9378b540360fb4ab0b16bf40ed18bd99cf4a8a5a6923f4f240d373fb441cb
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                data.txt
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.22\data.txt
                                                                                                                • Size 151KB
                                                                                                                • SHA256 2c027ecf97af4f6aca54bd9288250459ecfc55623b40100ca34c096d82812d4c
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                5a5ef984-62f0-4c9a-bdb8-5fed1f65ab03.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5a5ef984-62f0-4c9a-bdb8-5fed1f65ab03.tmp
                                                                                                                • Size 22KB
                                                                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                OperationConfig~RFe5967d8.TMP
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5967d8.TMP
                                                                                                                • Size 3KB
                                                                                                                • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                office_endpoints_list.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2026.6.5.1\office_endpoints_list.json
                                                                                                                • Size 9KB
                                                                                                                • SHA256 f0c77aaacfc571e0bc3f51387febe134d991bf3c7f1941af303ed901f288dcd6
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 18KB
                                                                                                                • SHA256 6c431f424a7a84b2fc23a7a0cbf6ad416f7add280f4e2f2ae94011603a21d3c4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 8KB
                                                                                                                • SHA256 95cda9ac3337d958c44b7ffcd2dd9d4a7212528f62a5b2f8aaa8d41b817f35e5
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 18KB
                                                                                                                • SHA256 df0c7aa5b43e3ab98db3d1292e6e215cc4e13bc835560786f84a4bc7be6a5630
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 29KB
                                                                                                                • SHA256 5a557f249599cb6f1ec08ba2addc3195543a5a85b81f63e1b0f70b7f0271a4ba
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 8KB
                                                                                                                • SHA256 35ae14b0aab2691c688d6c987a36f7c780e5f7d3ba71bf4f776392ecf0d04f1d
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Local State
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                • Size 29KB
                                                                                                                • SHA256 ad1318635dc25b6930f7e4ffa1af4a3a13d6e2d4dd71f02978fb27333f350609
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                crs.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                                                • Size 233KB
                                                                                                                • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                ct_config.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                                                • Size 16KB
                                                                                                                • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                kp_pinslist.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                                                • Size 10KB
                                                                                                                • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                safety_tips.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                • Size 163KB
                                                                                                                • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                typosquatting_list.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                • Size 3KB
                                                                                                                • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Advertising
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Advertising
                                                                                                                • Size 19KB
                                                                                                                • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Analytics
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Analytics
                                                                                                                • Size 3KB
                                                                                                                • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                CompatExceptions
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\CompatExceptions
                                                                                                                • Size 689B
                                                                                                                • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Content
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Content
                                                                                                                • Size 4KB
                                                                                                                • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Cryptomining
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Cryptomining
                                                                                                                • Size 552B
                                                                                                                • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Entities
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Entities
                                                                                                                • Size 68KB
                                                                                                                • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Fingerprinting
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Fingerprinting
                                                                                                                • Size 1KB
                                                                                                                • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\LICENSE
                                                                                                                • Size 34KB
                                                                                                                • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Social
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Social
                                                                                                                • Size 754B
                                                                                                                • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Staging
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\Staging
                                                                                                                • Size 36B
                                                                                                                • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                TransparentAdvertisers
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Mu\TransparentAdvertisers
                                                                                                                • Size 105B
                                                                                                                • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Advertising
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Advertising
                                                                                                                • Size 21KB
                                                                                                                • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Analytics
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Analytics
                                                                                                                • Size 3KB
                                                                                                                • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Content
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Content
                                                                                                                • Size 5KB
                                                                                                                • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Cryptomining
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Cryptomining
                                                                                                                • Size 32B
                                                                                                                • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                Entities
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Entities
                                                                                                                • Size 128KB
                                                                                                                • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                Fingerprinting
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Fingerprinting
                                                                                                                • Size 2KB
                                                                                                                • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\LICENSE
                                                                                                                • Size 66B
                                                                                                                • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Social
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Social
                                                                                                                • Size 3KB
                                                                                                                • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Staging
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.38\Sigma\Staging
                                                                                                                • Size 1KB
                                                                                                                • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                keys.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.8.3.1\keys.json
                                                                                                                • Size 8KB
                                                                                                                • SHA256 3d6c659801f1686ff3ac64bc3b24b1d0ae76ffdd5f0e9c399ba37d1354a15ab4
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                typosquatting_list.pb
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.8.28.1\typosquatting_list.pb
                                                                                                                • Size 829KB
                                                                                                                • SHA256 252170316dea3c1ccf95a17f22bd852cf0a62eb442993a2e1989e908a76de4e2
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                nav_config.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                • Size 2KB
                                                                                                                • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 68dd4a6a0b1711003690c2995fd0b77ba3c9ae6c27dd853ff492b52bd7701bc5
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 732B
                                                                                                                • SHA256 cf5e5467ab3de71fcb419acbbb754c3effd5e787864ffa7c767f24ff9bbe5ae3
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 0e2427c94f170f6dda5a9a85ddaaa0dc0088899c19efbb73c05e3598cb541423
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 824de99fb2d26a9652ce4d147d41b5f42d8eb58933629e98754b359ef813de81
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 252B
                                                                                                                • SHA256 aa807e4f1b970e487ba89b4ed9f5455dfb3acaffb192b8736b7bd0ccf63b8cf5
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 ebfcef679bae978f992c072279b9af13502ca903c4d4b13f2462698c29598f9f
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 e6539d1afffa8e9cf78bc23e3388151f20f7d1648f122e1e53c1f7c6a854b86c
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 85d69cd0c6dc414d6f9dff7c65f5f2117d20bb859e811bf14b1015e952ea19ed
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 eacf1adcab56ea7707951a59a1d5415c83ac02e038089cf23fd24d14c5a52cf2
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 2KB
                                                                                                                • SHA256 7fbbefc81eb7ed7e5d8d94f7a41f040b8c5502f63e0d8a6a5996dab11bd4a0f0
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 132B
                                                                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 1KB
                                                                                                                • SHA256 0dcbd641392011e3042d4affe27de6b54e3bfe1fed2f238c1326586e38dbfb80
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 492B
                                                                                                                • SHA256 55aa4ab756834699189543863036551542c61249184224f927d1681ef15164dd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 372B
                                                                                                                • SHA256 dc86dff8fbd3b224794d65e8c0974ffa3b17c53a934c92f82e938e524fe823dd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 612B
                                                                                                                • SHA256 918167fab0fb4435546513252415c1a2e44b6e8e60caf6f31d07587ba0a71ab0
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 852B
                                                                                                                • SHA256 cc631188ae4a22c0621e596be3d4335218373ee3aafe98bb7b213069a0dc3b70
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                metadata.json
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                • Size 972B
                                                                                                                • SHA256 4d2b47e594a4d5d9d0c079c2ff5fac0e47e26ffad46c371ad51e472b3dcd0669
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                6e19a144-0138-41b8-8e73-087d1fc754d3.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6e19a144-0138-41b8-8e73-087d1fc754d3.tmp
                                                                                                                • Size 13B
                                                                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                85a8258a-1468-413e-9b6e-1e4bea5edc17.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\85a8258a-1468-413e-9b6e-1e4bea5edc17.tmp
                                                                                                                • Size 10KB
                                                                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                c1f7be33-50e7-4eaa-8775-3999a39f37b9.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\c1f7be33-50e7-4eaa-8775-3999a39f37b9.tmp
                                                                                                                • Size 1B
                                                                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                827a3c9d-121a-49db-a16f-3aa7f52cce99.tmp
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3768_1012102647\827a3c9d-121a-49db-a16f-3aa7f52cce99.tmp
                                                                                                                • Size 154KB
                                                                                                                • SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                content_new.js
                                                                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3768_128880271\CRX_INSTALL\content_new.js
                                                                                                                • Size 10KB
                                                                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                Submit Download

                                                                                                                windowsdesktop-runtime-10.0.11-win-x86.exe:Zone.Identifier
                                                                                                                • Path C:\Users\Admin\Downloads\windowsdesktop-runtime-10.0.11-win-x86.exe:Zone.Identifier
                                                                                                                • Size 69B
                                                                                                                • SHA256 d989445fe2d4a33dea18bf7fe9f273de716de5a74636551444ea2e542c3dc29b
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1003771500\manifest.json
                                                                                                                • Size 165B
                                                                                                                • SHA256 880b2b81f96f7ec0799e2939e82955327f65a8e4edadfdd89cfebb70d8fb6f2e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                LICENSE
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1004470572\LICENSE
                                                                                                                • Size 1KB
                                                                                                                • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1004470572\manifest.json
                                                                                                                • Size 78B
                                                                                                                • SHA256 c7e506687caffcf3906916ad3fc190a19212d67a2535479241096bd0d4418b03
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1089077123\manifest.json
                                                                                                                • Size 85B
                                                                                                                • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1119185680\manifest.json
                                                                                                                • Size 113B
                                                                                                                • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1832283175\manifest.json
                                                                                                                • Size 160B
                                                                                                                • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                Other
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1897891501\Sigma\Other
                                                                                                                • Size 34B
                                                                                                                • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_1897891501\manifest.json
                                                                                                                • Size 132B
                                                                                                                • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_2015568450\manifest.json
                                                                                                                • Size 43B
                                                                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                • MD5 SHA1 SHA512
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_2027564701\manifest.json
                                                                                                                • Size 118B
                                                                                                                • SHA256 369cf7df458345c92af945826c1bcb1da153a8aefd5ca5e7feae64328f571965
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_2078310630\manifest.json
                                                                                                                • Size 53B
                                                                                                                • SHA256 138f15e92672b6401fdc51bb1eea7d109b49643f15fb85c56115a679b15510c0
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_2103090122\manifest.json
                                                                                                                • Size 177B
                                                                                                                • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_249955123\manifest.json
                                                                                                                • Size 165B
                                                                                                                • SHA256 fc5dd0f6692cb24ec676b53527dabff28114c905dd08f72c97ac54a22c1bffae
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_259235113\manifest.json
                                                                                                                • Size 135B
                                                                                                                • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_380603192\manifest.json
                                                                                                                • Size 102B
                                                                                                                • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_486588669\manifest.json
                                                                                                                • Size 135B
                                                                                                                • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_667464131\manifest.json
                                                                                                                • Size 238B
                                                                                                                • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_793779620\manifest.json
                                                                                                                • Size 72B
                                                                                                                • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                manifest.json
                                                                                                                • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3768_864405365\manifest.json
                                                                                                                • Size 119B
                                                                                                                • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                • MD5 SHA1 SHA512 TLSH
                                                                                                                Submit Download

                                                                                                                memory/3964-1049-0x000001F37D030000-0x000001F37D130000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-917-0x000001F2672D0000-0x000001F2673D0000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-932-0x000001F279550000-0x000001F279650000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-969-0x000001F37A500000-0x000001F37A600000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-968-0x000001F37A420000-0x000001F37A440000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-970-0x000001F279B80000-0x000001F279BA0000-memory.dmp
                                                                                                                Download

                                                                                                                memory/3964-984-0x000001F37A6F0000-0x000001F37A7F0000-memory.dmp
                                                                                                                Download