Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    853s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/10/2026, 19:20

General

  • Target
    https://send.appntrckrt.com/click?pid=137&offer_id=33256&sub6=44038403q2b4b4z2i274s2x224q2e2s223y2u294c294s25333t2z2w22313&sub2=137_16524&sub3=&sub4=19662968&sub7=137_16524
  • Sample261001-x2a28aba52
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://send.appntrckrt.com/click?pid=137&offer_id=33256&sub6=44038403q2b4b4z2i274s2x224q2e2s223y2u294c294s25333t2z2w22313&sub2=137_16524&sub3=&sub4=19662968&sub7=137_16524
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1220
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x254,0x7ffb8753c188,0x7ffb8753c194,0x7ffb8753c1a0
      2⤵
        PID:2792
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1716,i,4333545576476412322,8641084633750132993,262144 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:3120
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,1434712426939216719,8611345790176040751,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:3
          2⤵
          • System Time Discovery
          PID:3700
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2580,i,18255815020089538074,1144695193434474516,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:8
          2⤵
            PID:4776
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3452,i,16771137420810036029,4556890519450192590,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
            2⤵
              PID:2980
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,10660788206050399936,11215898342210827797,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
              2⤵
                PID:4728
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,7788224646578260817,18422323774837621076,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
                2⤵
                  PID:3884
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4232,i,16370128568820896687,14199567021932914535,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3424 /prefetch:1
                  2⤵
                    PID:312
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3560,i,8105083931276279218,7391002459934704887,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
                    2⤵
                      PID:1056
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=3960,i,5296779026329552749,3666078052945133418,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:1
                      2⤵
                        PID:5092
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3600,i,18258563885919548868,2487910212018999358,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
                        2⤵
                          PID:1804
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3676,i,7493341141349867738,7698448905643557777,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
                          2⤵
                            PID:3612
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,11205898131426464533,9335787206737296360,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
                            2⤵
                              PID:2768
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6060,i,11205898131426464533,9335787206737296360,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:8
                              2⤵
                                PID:632
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6360,i,15125157462479041492,3935579027590283057,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6372 /prefetch:1
                                2⤵
                                  PID:3968
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4256,i,6916724163796287250,10834472198333988125,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                                  2⤵
                                    PID:1972
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4280,i,8291948296766038150,7863013713058080613,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:8
                                    2⤵
                                      PID:3792
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4436,i,3981272229914834059,13670250742785212636,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:8
                                      2⤵
                                        PID:2108
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=4436,i,1189622229111706974,5987573842081814191,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
                                        2⤵
                                          PID:3348
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6292,i,11600337348208064689,4190124694326856388,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:1
                                          2⤵
                                            PID:2052
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=2208,i,9529135439683340657,12644722146608830446,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:1
                                            2⤵
                                              PID:696
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5612,i,14316484305308943142,16970329740644085956,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:8
                                              2⤵
                                                PID:6056
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6776,i,2367386530354201185,17142263499680721953,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6764 /prefetch:1
                                                2⤵
                                                  PID:2292
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3472,i,7044707255062653065,17754574822979657719,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:1
                                                  2⤵
                                                    PID:5180
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5688,i,8631752852918112006,9422951732725870970,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:8
                                                    2⤵
                                                      PID:1980
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6968,i,1588315480236515079,4012257354477202145,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:1
                                                      2⤵
                                                        PID:4592
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6620,i,10850275053215755203,5931755954114634447,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:1
                                                        2⤵
                                                          PID:5796
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=3536,i,611688277357301461,15028370375342269028,262144 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5264 /prefetch:8
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:5924
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=3000,i,2355994578810838813,10745238832890719314,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=1532 /prefetch:1
                                                          2⤵
                                                            PID:5712
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,12773634058932642993,15733891019186642732,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
                                                            2⤵
                                                              PID:6028
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6188,i,5792155325855122864,2269126801057703259,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=3440 /prefetch:8
                                                              2⤵
                                                                PID:6044
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,8063376804209477051,2333792769723753697,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
                                                                2⤵
                                                                  PID:2584
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4176,i,4056403069414147500,17255426121102044045,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
                                                                  2⤵
                                                                    PID:1852
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5964,i,2504991897069842130,17361205948896502471,2097152 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
                                                                    2⤵
                                                                      PID:4592
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,16938523810101806017,3502552429295840776,524288 --field-trial-handle=2272,i,3081398774748613518,15363549984955890951,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:8
                                                                      2⤵
                                                                        PID:3384
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:2764

                                                                      Network

                                                                            MITRE ATT&CK Enterprise v16

                                                                            Replay Monitor

                                                                            Loading Replay Monitor...

                                                                            Downloads

                                                                            04ccb2c6-3ffc-41e5-bc20-c8e18e6de94c.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\04ccb2c6-3ffc-41e5-bc20-c8e18e6de94c.tmp
                                                                            • Size 21KB
                                                                            • SHA256 e958865a51b5f0ce24cf8270dfe68d71e3f08b7ddb31365f6fe0e7d1321bb769
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            05909cd6-3c84-4738-8c17-62ca856e4b57.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\05909cd6-3c84-4738-8c17-62ca856e4b57.tmp
                                                                            • Size 8KB
                                                                            • SHA256 64698569adf0ecd1876338977f290f6ecc212b38b26f2bba1519f9d0f335df5a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            7554f7eb-2292-471a-bab0-350fdd2e83df.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7554f7eb-2292-471a-bab0-350fdd2e83df.tmp
                                                                            • Size 18KB
                                                                            • SHA256 2c171e5886627671c2ffe0f7350f0794ea828f4c902af932772a79e027a12bd6
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            7f33a25a-1ef2-4f40-82be-a1227364b979.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7f33a25a-1ef2-4f40-82be-a1227364b979.tmp
                                                                            • Size 8KB
                                                                            • SHA256 3261e7ccc3b03ec24aa53b5a16eda457402a87792ce6847d31451a5aa2231fdc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            settings.dat

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                            • Size 280B
                                                                            • SHA256 928eda824fe964cd23927cf06086d7d24e20a3a5092daf1acee5b632c76c962a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            0c81bb83-6557-4aaa-9c14-357fe1b49d20.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c81bb83-6557-4aaa-9c14-357fe1b49d20.tmp
                                                                            • Size 12KB
                                                                            • SHA256 0e768ee8e3590c13b19bc14b23be0a5b0257fe093946a7c812d5dc2db06dce7d
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            15d073a4-e02b-4d69-9436-71de5f0fc397.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\15d073a4-e02b-4d69-9436-71de5f0fc397.tmp
                                                                            • Size 9KB
                                                                            • SHA256 81e8074b2f15b9726e02e54e3faa1128bc901126373c845a0d589713788967b1
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            60690a43-d98f-4a79-a233-a4800cdf868f.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\60690a43-d98f-4a79-a233-a4800cdf868f.tmp
                                                                            • Size 70KB
                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            653fbcd5-0801-4d7a-b06d-97ecbb5075ef.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\653fbcd5-0801-4d7a-b06d-97ecbb5075ef.tmp
                                                                            • Size 27KB
                                                                            • SHA256 7f5a1005852866996320a35b5a4e0264cb8a1420615d4167db5ba4513574d58a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            77b2bc53-e3b8-4c25-9c88-96d665f6440f.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\77b2bc53-e3b8-4c25-9c88-96d665f6440f.tmp
                                                                            • Size 9KB
                                                                            • SHA256 eac5ef174958bb6e5e76cee334b0ba945f705fbeaf4ec6275914c6117554a0d7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            LOG

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                            • Size 334B
                                                                            • SHA256 4466e9336fe44e7dd1c6dbb5b24b40f48c97ffcdb568f8a8cc09c1c05096787a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            LOG

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                            • Size 334B
                                                                            • SHA256 b6c9a60e9c10e26bd7097e745ba391d8faf5c56803d1afe36feb42e69c7130dd
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            LOG.old

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                            • Size 328B
                                                                            • SHA256 aa6d5fad43842beccf511d3be1000c5001b947394465a5e828813ed45049ec15
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            f_00004d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                                            • Size 418KB
                                                                            • SHA256 676d4a63ae67ef87cad323b26340c67848995ac2683780243a52c98904c57132
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                            • Size 70KB
                                                                            • SHA256 937ba85886091685ee70eb6bc643fefa7e2d2c0e1f03505221d6a48d46ffa37f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00004f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                            • Size 206KB
                                                                            • SHA256 27a52be66d9e799bda613d94bc824c6be07c65fa3c89c3c09a4bc55230b8429b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000050

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                            • Size 78KB
                                                                            • SHA256 22d31bc2ae591382f2445d2b5e976928961b2bb70ae28e3207f761e716717099
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000051

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                            • Size 27KB
                                                                            • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000052

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                            • Size 17KB
                                                                            • SHA256 64e2ec2ec65baab0b36ccaf543a6392aa5db1a678ee859a5a604fdfc06cb270b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000053

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
                                                                            • Size 56KB
                                                                            • SHA256 f7b1421fbb757ed1f73b5609b4e658b50cd1f9f5a679064bc73c4ef4df9972ed
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000054

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
                                                                            • Size 59KB
                                                                            • SHA256 85593f2fc51b4fefad47011db0b02371cd5ee1c78796b37756cdb53c5c150104
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000055

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                            • Size 45KB
                                                                            • SHA256 f529e8c9aeb497c65559ab91bddb0c5d7debf2ea302ead4a9014063c1722446b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000056

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                            • Size 72KB
                                                                            • SHA256 64e006e29b797b081fd55052037613695818ff7dd221536402900f7cc380ea01
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000057

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                            • Size 256KB
                                                                            • SHA256 ee820160c0242e2f55aa571f70dd454c0b3348f5da39790217e95f0ac41a5366
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000058

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                                                            • Size 512KB
                                                                            • SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005a

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                            • Size 256KB
                                                                            • SHA256 69c3df0acfa9b94fad710cd600e6d092b54a3848415a3c7b9d178cf9600c58bf
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005b

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                                                            • Size 256KB
                                                                            • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005d

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                            • Size 17KB
                                                                            • SHA256 c626f513876dd0e5692a93e2da8bb75c0708e6e8c1ff2b908ae40409cf7251a5
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                            • Size 20KB
                                                                            • SHA256 1acbcc6b1dcd54cceeee7720c7887b611ad125d08f493a1b959e6e89103eca56
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00005f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                            • Size 19KB
                                                                            • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000065

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                            • Size 23KB
                                                                            • SHA256 7c78c1089a2baaad4857ea8374c989232ce9d68f1f40a073c6e530d1675ee3cc
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000066

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                            • Size 39KB
                                                                            • SHA256 b05847904e965e8a62eb81e89bee907f7cf9754c343cfd863c0716ad9f5fc829
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000067

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                            • Size 32KB
                                                                            • SHA256 674a68311512ab2219009d9c2fadf181afdb4330f58d5b7c8cb9ab0ceab91816
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000069

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                            • Size 43KB
                                                                            • SHA256 888d00fdbfa4896c3383b874648512cd7b19862bf08404367619404d4103946f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00006e

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                                                            • Size 18KB
                                                                            • SHA256 fbe5e1ea2aabe4cd0f0c13d61187082c32a873460a5f58611c8f9fa2d941f34a
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000072

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                            • Size 16KB
                                                                            • SHA256 454d6e6f37852a28fd5c57a91e8975d8b667b3f7ab98d81f12c4c9ee9035a927
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000074

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                            • Size 45KB
                                                                            • SHA256 6c1bc67d91725ecb765354dc273d8f9a50287160e6cc7eef46b6b9cf936c6a02
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000077

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                                                            • Size 21KB
                                                                            • SHA256 2f47925e7f73a8f12acf899df1fc69a2559f54e3e8ba983036713c3162eeddc8
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000078

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
                                                                            • Size 44KB
                                                                            • SHA256 6726f8cf04a4a5b1b6105831fdb4ff4f18ee1d52c6131de3d95b2304d52d89c4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00007a

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                                                            • Size 18KB
                                                                            • SHA256 3729fcb141a2e95b10bb0d75154089c710ebb0ab83094703f402dd5bd3f99cc9
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_00007f

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f
                                                                            • Size 16KB
                                                                            • SHA256 b9bb35d80cff29e24e54888f243141be41cdb1f2d8755cc4bef0ff2b55c9044c
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000080

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                            • Size 66KB
                                                                            • SHA256 45a07bf7ff02d05c0e08ef94b7dc3d77c1185a8ce63bd437cf2712684f00222f
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f_000081

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                            • Size 16KB
                                                                            • SHA256 3d564eabe4ae8d396a6ba215a1ef4d2118c0b96ce4d44c285a8e0b7edbf2c221
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 2KB
                                                                            • SHA256 8b06df8608a6024fcccab285082b30788a0930fe356fc7b6b3a92b49583760d3
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                            • Size 3KB
                                                                            • SHA256 49e0cdd7fbc26cee1e8c6bfe98453b85e3c8442c77f368d65fab7efd47eb2cbe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            f626bca4-3648-4fbe-a1b1-30147f54a659.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f626bca4-3648-4fbe-a1b1-30147f54a659.tmp
                                                                            • Size 2B
                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                            • MD5 SHA1 SHA512

                                                                            02239d37-2520-4a66-a5c1-b3ea05fd1244.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\02239d37-2520-4a66-a5c1-b3ea05fd1244.tmp
                                                                            • Size 2KB
                                                                            • SHA256 041d31913f467b90f25cd10f916693be1f0e2e34fd5123d184fca57483fa7520
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            49cbcf40-d066-4fc7-8d97-27c4c1e20442.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\49cbcf40-d066-4fc7-8d97-27c4c1e20442.tmp
                                                                            • Size 2KB
                                                                            • SHA256 be10f5011df9d601f509f9c20ad955022980b4bc58bdc799801d8becbdf19b64
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            661b391a-4f71-4fc4-b93d-f42e6a6efad6.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\661b391a-4f71-4fc4-b93d-f42e6a6efad6.tmp
                                                                            • Size 3KB
                                                                            • SHA256 74a918d2cda40f85cb56d8c2d807df19a92b1c58a01e33989089d923d47df0f6
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            88a90a7a-1777-4e04-97ca-c4e0bd966f86.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\88a90a7a-1777-4e04-97ca-c4e0bd966f86.tmp
                                                                            • Size 2B
                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                            • MD5 SHA1 SHA512

                                                                            ae23a616-6aa1-4c49-92b9-7334339aa710.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ae23a616-6aa1-4c49-92b9-7334339aa710.tmp
                                                                            • Size 111B
                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 6256046f17c01b0c59e4633227799478d5faed21e7e4401aaefbe745f449bffb
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\16ab426a-132e-4002-8b2c-015bc0a100d8\index-dir\the-real-index
                                                                            • Size 72B
                                                                            • SHA256 e79563cb71dadaf7a419524ee3f85bb20d8a75e443522a5822cd14041ef862fe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\40c6b1c4-0fc5-4e58-a122-eee828804701\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 76900b031a04ef49cf4dd0fc4efd084a089a7b1c2a61f306468a0f2254a4c1e5
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\40c6b1c4-0fc5-4e58-a122-eee828804701\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 c0f32df8e059dec43c9e88397dcf02ef87d382bb0c5f5f63a68d7f0bdcdc3cf3
                                                                            • MD5 SHA1 SHA512

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a176a39a-f950-43f5-9fe0-8391e92ffbcd\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 7de3557c4600485b64a7eebae547a79ff4b40e887fcab4eef94a5f0c587863e8
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\temp-index
                                                                            • Size 3KB
                                                                            • SHA256 9be1240cd0f26f98a50974ad47bd13761e39af41dc579fa3d60416878cc8c4a2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\temp-index
                                                                            • Size 144B
                                                                            • SHA256 ca8f6db0b08cc8db94ef6a2e95ff271455094b86f82c5f2fa9ff530e5882a95a
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be978ca3-e233-468d-9f0c-df4bbf0e10c8\index-dir\the-real-index
                                                                            • Size 144B
                                                                            • SHA256 ddf8a1719db4a94e0ead87056d551550bc02f6fbaad35396c02decd66fc3310c
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca50c39b-5f93-44a0-82e7-ba5bb6e5c118\index-dir\temp-index
                                                                            • Size 96B
                                                                            • SHA256 35cc732dbf79822dc9d9922bbf420ddcde6961956d75877536b8ec008d2d6a91
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca50c39b-5f93-44a0-82e7-ba5bb6e5c118\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 1cbc31e566cf90feffa8240a95204ae4d6a5b70295fe672b73a6b034f52691a8
                                                                            • MD5 SHA1 SHA512

                                                                            index.txt

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                            • Size 619B
                                                                            • SHA256 670a530c1cd05c4351aaf3dfdd3a5da6c45d98103bec994083d7a663a0fd5692
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 624B
                                                                            • SHA256 36bd20698433d21e3e4c5fcde49c8c98d8b5bc12e2db90ff2754b013954c0ab2
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            index.txt.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                            • Size 519B
                                                                            • SHA256 5708ff0801e9d149ba1a01933288c23420005424bcab23edac5d7abcf2cb57b0
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            temp-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                            • Size 72B
                                                                            • SHA256 367b4c9ff06b5579161fe97156d8db818a669fabc24ab88812776fd5aee31abe
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            the-real-index

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                            • Size 48B
                                                                            • SHA256 3af1415b067e9b3eaa53a729de534dd6dd28325fa16a71d9cf59e7b2965a3c7d
                                                                            • MD5 SHA1 SHA512

                                                                            sync_diagnostic.log

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                            • Size 4KB
                                                                            • SHA256 e22ab82c44e427e694deeb58dcc292deaa2a2bca06797d8bc9cd47be5ff7af96
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            aa2091a6-4075-4aba-b81e-670a161d718a.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa2091a6-4075-4aba-b81e-670a161d718a.tmp
                                                                            • Size 6B
                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                            • MD5 SHA1 SHA512

                                                                            ecc01b41-2678-4c60-a414-3c613a2c2a5e.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ecc01b41-2678-4c60-a414-3c613a2c2a5e.tmp
                                                                            • Size 12KB
                                                                            • SHA256 ef6a0924f49b442dab37a60b9d717df4454b6c73962af17a877d95bad4adc87b
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            f7a9752a-9807-4e90-b8a3-f65f0b70cde5.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f7a9752a-9807-4e90-b8a3-f65f0b70cde5.tmp
                                                                            • Size 12KB
                                                                            • SHA256 39cd6aca821e00dc291ae742cf612d5028ca136f8e8eae70a1e24768e655bffe
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            OperationConfig

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                            • Size 3KB
                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                            • MD5 SHA1 SHA512 TLSH

                                                                            ad7dcad9-0e80-4374-af38-4d3c29e756ae.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\ad7dcad9-0e80-4374-af38-4d3c29e756ae.tmp
                                                                            • Size 22KB
                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            dc3e21eb-2177-4b7f-97f5-e5c14eadc834.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dc3e21eb-2177-4b7f-97f5-e5c14eadc834.tmp
                                                                            • Size 18KB
                                                                            • SHA256 12ba1d88ec9a58157348b712ba20eb6a8e98674c084f29138489e2d805a98156
                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                            1bb5b5a1-5463-49c7-be4f-f0461441b242.tmp

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1bb5b5a1-5463-49c7-be4f-f0461441b242.tmp
                                                                            • Size 13B
                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                            • MD5 SHA1 SHA512

                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                            • Size 2KB
                                                                            • SHA256 b74867fbac2d6540c29d5d44ee6406b2f28390a8e2560e14b381e0ffea9a2c07
                                                                            • MD5 SHA1 SHA512 TLSH