Analysis

  • geolocation tags

    asiadelhiinindia
  • user interaction
    yes
  • max time kernel
    323s
  • max time network
    325s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/10/2026, 11:37

General

  • Target
    http://google.com
  • Sample261002-nrbrbstvbw
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1836
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdef88c188,0x7ffdef88c194,0x7ffdef88c1a0
      2⤵
        PID:3140
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,7611799076388257545,7157355689953071183,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4656
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,7731951800001559510,2510721139692371136,262144 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
        2⤵
          PID:1248
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2548,i,8699082698721383442,5572127950170278538,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=2580 /prefetch:8
          2⤵
            PID:4596
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,1723793678547208180,10385287762570243708,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
            2⤵
              PID:3320
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3432,i,2309674126948175701,12564065095755669556,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=3452 /prefetch:1
              2⤵
                PID:2812
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4148,i,16730384548542981704,3646933897483349963,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
                2⤵
                  PID:60
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4104,i,4303406832971963740,10881325479910575806,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:1
                  2⤵
                    PID:3800
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,16308694787416064171,11089130687296275774,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
                    2⤵
                      PID:3316
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,1121970889958937573,15191513071405578529,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:8
                      2⤵
                        PID:4048
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5692,i,7669992892486895846,14448919357526598853,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:1
                        2⤵
                          PID:4520
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11616020647792219342,15850657641866287906,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                          2⤵
                            PID:4220
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5864,i,11616020647792219342,15850657641866287906,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:8
                            2⤵
                              PID:4264
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6260,i,1176674525162513370,2025829420879342918,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
                              2⤵
                                PID:1148
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6336,i,11130363894523062143,377218307666986,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=560 /prefetch:8
                                2⤵
                                  PID:4440
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6348,i,3439881182351494281,13246295006002211267,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
                                  2⤵
                                    PID:372
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6332,i,5786324760632075034,767790371682831914,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
                                    2⤵
                                      PID:2004
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=4260,i,6981146743043356655,11251963355027322020,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:1
                                      2⤵
                                        PID:4196
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5616,i,4811608328688200835,14301944110949656175,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:1
                                        2⤵
                                          PID:5224
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6480,i,4740106692206049080,2790084360443541561,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:1
                                          2⤵
                                            PID:5684
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=3956,i,8860669104794288046,16852038652400940383,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:1
                                            2⤵
                                              PID:5692
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4952,i,16705828237694328718,389876019327919287,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
                                              2⤵
                                                PID:5300
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6968,i,11110573276719947393,41273258026260640,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:8
                                                2⤵
                                                  PID:1148
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7160,i,10931719212009978164,3229349181984521079,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:1
                                                  2⤵
                                                    PID:5640
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2124,i,12095686780216879591,2610824639060315396,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=3012 /prefetch:8
                                                    2⤵
                                                      PID:2812
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5036,i,1610320400463041113,2380023407627037771,262144 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:8
                                                      2⤵
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      PID:5532
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,169639111187253840,9252301908713935057,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
                                                      2⤵
                                                        PID:2160
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,16221270192361408436,8977772301272648981,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=4964 /prefetch:8
                                                        2⤵
                                                          PID:2368
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6748,i,6771840533030333642,13588621126358111211,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
                                                          2⤵
                                                            PID:3504
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7416,i,7632490665374448484,6882951680244377070,2097152 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=7448 /prefetch:1
                                                            2⤵
                                                              PID:5836
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,10302745828279838627,2892595607602022717,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
                                                              2⤵
                                                                PID:3848
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,10528943859783045211,7997275078582616895,524288 --field-trial-handle=2216,i,16279886596183306488,703305126949555655,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
                                                                2⤵
                                                                  PID:3472
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                1⤵
                                                                  PID:5104

                                                                Network

                                                                      MITRE ATT&CK Enterprise v16

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      438bc6c7-2e6a-4cdc-bb03-770e602971c3.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\438bc6c7-2e6a-4cdc-bb03-770e602971c3.tmp
                                                                      • Size 25KB
                                                                      • SHA256 2bbe690f1b8395d0584e688ab542f4f7707844287ef1d1f09e0e25f69d762bd1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      4997785b-e272-466e-8783-9cf2fd0bf855.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4997785b-e272-466e-8783-9cf2fd0bf855.tmp
                                                                      • Size 392B
                                                                      • SHA256 fdd57b0dc03430a4fedeb627eafd5b0bdf7442823e7527db8e605b59c537cb3e
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      4c29f94c-0f69-465d-b960-7d370d88680d.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4c29f94c-0f69-465d-b960-7d370d88680d.tmp
                                                                      • Size 392B
                                                                      • SHA256 14cc43424bbef412b332133a755525e0b91767bfbf873a7860cf3cd5bd298bbf
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      54d2c9a9-7a6e-45a0-9dc6-079c0cc4e249.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\54d2c9a9-7a6e-45a0-9dc6-079c0cc4e249.tmp
                                                                      • Size 18KB
                                                                      • SHA256 b0b34e7bab4cbbad0fdfab26950519f21c952b4b11139c26d3a0a7c0a51d6d20
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      78e81cd8-2cb4-4189-a8d9-9cbe4a0e247e.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\78e81cd8-2cb4-4189-a8d9-9cbe4a0e247e.tmp
                                                                      • Size 392B
                                                                      • SHA256 9d9836123774984bb3d45d516372bbb65b9e6eb5a409273750990748a90b45ab
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      971e5ccb-f338-4e25-a2cf-f1e5e44d78ea.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\971e5ccb-f338-4e25-a2cf-f1e5e44d78ea.tmp
                                                                      • Size 18KB
                                                                      • SHA256 505f1a0e4b1882c80ba532a5bbcbbb27691dab914b64d06c764d840d17d25949
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      9c8cd350-27fe-4672-82ef-90bc7d3c0b29.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9c8cd350-27fe-4672-82ef-90bc7d3c0b29.tmp
                                                                      • Size 392B
                                                                      • SHA256 b2c792e884af5bc8041cb0407c1562abc9c88366225d26a22594e371eba60b4f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      c212d78a-cd58-4cfb-8655-78072621a4e0.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\c212d78a-cd58-4cfb-8655-78072621a4e0.tmp
                                                                      • Size 105KB
                                                                      • SHA256 b7dc681318bec8f79b864de12388abf41da30e5e4e730790d8aba375d962eb22
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      settings.dat

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                      • Size 280B
                                                                      • SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      2257ab9d-31e8-4891-9b14-1085529a0b9b.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2257ab9d-31e8-4891-9b14-1085529a0b9b.tmp
                                                                      • Size 26KB
                                                                      • SHA256 fddf72aef9a7924e91dc3617300acaac885756ecaa255d7211a33b16c8eabcff
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      2383bb89-a55b-487d-ab2e-ebaaf35febe6.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2383bb89-a55b-487d-ab2e-ebaaf35febe6.tmp
                                                                      • Size 11KB
                                                                      • SHA256 12d63cf8e541ee522f461f020c6bcb2746e2f0c1f333ce3cce17ba70289f14cb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      2ced440d-79f9-43cf-8406-9f49ad7191ce.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ced440d-79f9-43cf-8406-9f49ad7191ce.tmp
                                                                      • Size 10KB
                                                                      • SHA256 3566d2be35cf2e5458ab54b79ea6ca6d249299b39783924d8a18a3568b512c6a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      43937a59-d8c8-4ecb-9cc8-0735128ae80c.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\43937a59-d8c8-4ecb-9cc8-0735128ae80c.tmp
                                                                      • Size 10KB
                                                                      • SHA256 6258432783e7828263407a88887baf180ebfae580b7254e5ae102deb372630ef
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      5561babc-98e9-4aad-b3a1-d73db118c77b.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5561babc-98e9-4aad-b3a1-d73db118c77b.tmp
                                                                      • Size 6B
                                                                      • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                      • MD5 SHA1 SHA512

                                                                      86a20adf-2921-4231-bf5b-5adfbb4fdd89.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\86a20adf-2921-4231-bf5b-5adfbb4fdd89.tmp
                                                                      • Size 12KB
                                                                      • SHA256 216c4ca1b6d2ae4ccfca7f97b0e7599e7118afb43574c4559335561ed10bcd90
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      LOG.old

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                      • Size 334B
                                                                      • SHA256 7945f850d927302ce569a9500998812905f2adae8215985b8bb4370fca4115e4
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      LOG.old

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                      • Size 334B
                                                                      • SHA256 25b7ba8edf09b398c5353a736e69fee3bb1747256dcbd213f5c57ca0cc49e77c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      f_000079

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                                                      • Size 88KB
                                                                      • SHA256 233bbaf591c2daa1003b79a816fc6e23315e2087e04796482b2c862e44f1506a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00007e

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                      • Size 437KB
                                                                      • SHA256 a451b8791f9183f16a2b30959f9f69e20f35117f8ca6e34e463916869328f3c8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000089

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                      • Size 66KB
                                                                      • SHA256 85889c1e44920a26f3830b737e5610db3c7c81db72e3de550e5c6ea0256c7fe4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d2

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d2
                                                                      • Size 19KB
                                                                      • SHA256 1a743827226c2f160f08ad8d326aa5732ce2934826996f867df264fefc32aec0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d3

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d3
                                                                      • Size 124KB
                                                                      • SHA256 1fa5b0fb96c532050f345deb6a564c8bd4373f7363f68613d9d6c4fcd735fdc5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d4

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                      • Size 34KB
                                                                      • SHA256 802a0afde5a4417ff83aaa53ffe692a1b608430381f0336ac85a164ae7e85a6a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d5

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
                                                                      • Size 139KB
                                                                      • SHA256 4262869237018f5f08d3301bccb623f8780c30a91127ef2da4a83e52eabf4e25
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d6

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d6
                                                                      • Size 19KB
                                                                      • SHA256 ce84a53df69c3040283e7adaff5b88d00237aa282392f1ec098b7877c98e07ed
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d7

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d7
                                                                      • Size 16KB
                                                                      • SHA256 6432c18f8c18c7189cc398bb119f41d0a64c15a955c895f0ae6ada6faea5db61
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d8

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d8
                                                                      • Size 37KB
                                                                      • SHA256 72f9889deaa066466980fa91492424dee0ab73cae59d9b16cb7c826607580efd
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000d9

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                      • Size 135KB
                                                                      • SHA256 bc3cff564ca20c8c128a946f8adccba8941185b3ee911399b680a0eb9ea81f1c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000da

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
                                                                      • Size 184KB
                                                                      • SHA256 603d06c5d57e88b3ec7524a5c1422e80d778700aa0bf83a20391babf157835b0
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000db

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000db
                                                                      • Size 167KB
                                                                      • SHA256 d8ace5a0d929171f37345059c8ea52bf5a2e718eef4972573662ee5744c264db
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000de

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000de
                                                                      • Size 16KB
                                                                      • SHA256 6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000e6

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e6
                                                                      • Size 21KB
                                                                      • SHA256 b5d6faa8e04af67fe066c618b12fc7c9c55e889b122c9f0f0f510d851b343592
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000e7

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e7
                                                                      • Size 88KB
                                                                      • SHA256 b77a92a7f39f1281248f375614b7202b138626511dc42f7bbe8411cdbb8a68f7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000e9

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e9
                                                                      • Size 57KB
                                                                      • SHA256 04c55b6bbaf26482675c79d98d38142a0260ecd0b6d7e2850bcdde3625a3bfb7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000f2

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f2
                                                                      • Size 29KB
                                                                      • SHA256 dc2248790db37a8df65055e9e2d68a94acb0b2fb649dd48f587e8322342e9249
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_0000f8

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
                                                                      • Size 224KB
                                                                      • SHA256 953f3fc217b8787f2481fc5fc00959cf61894b7a8285be882f38fe6f1a1a9183
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000100

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000100
                                                                      • Size 58KB
                                                                      • SHA256 8a581ce7e3e38910f72882cd18be73223d7172123cb97bcda97b99f84fab7f04
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000101

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101
                                                                      • Size 58KB
                                                                      • SHA256 a67a61a9ff6c7d24d8196d5719b4e1979c41a698dc0b8ba9cd59dcf22e74604b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000109

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000109
                                                                      • Size 38KB
                                                                      • SHA256 4d46c879f3c673eff4db1d0d5ba7b61fcacc304802cbfdf3f529478d9ce70ccb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00010a

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010a
                                                                      • Size 58KB
                                                                      • SHA256 c8573e417795605c1e8272f83dfb9364c7312791d5e0a1da5f3a4eea1658d9cf
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00010b

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010b
                                                                      • Size 50KB
                                                                      • SHA256 6c764991cd06074b171d66c77a41daef7a9650f19a1eb3296036d846958f6293
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00010c

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010c
                                                                      • Size 42KB
                                                                      • SHA256 1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00010e

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010e
                                                                      • Size 93KB
                                                                      • SHA256 79d20bcbf8f9a5c915e8ae4815a891955896534737f4879232851594867a5ccf
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000112

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000112
                                                                      • Size 36KB
                                                                      • SHA256 296d2ecf04d7141490af8e86e587082901148aa160f3cd7ff9aae7299719f428
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000113

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000113
                                                                      • Size 36KB
                                                                      • SHA256 927330750b2724082a53852349065cc2fa9736ca783aeca984cf8bf71be7c0b2
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000114

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000114
                                                                      • Size 42KB
                                                                      • SHA256 d07cc74d07796ab9c2698d6ee9610b9afb946869a73398fdf60a33b106c3d25f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000115

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000115
                                                                      • Size 55KB
                                                                      • SHA256 32c872556f1cca44fde19715f3d12b2dabc232eacb2a4bb6555944c0805a59eb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000116

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116
                                                                      • Size 1022KB
                                                                      • SHA256 64f338dbe0bb9c6f06340beacefcd0a7de8e278cb9258ab189f0e7b358566cf8
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000117

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000117
                                                                      • Size 165KB
                                                                      • SHA256 e9bd2de548e592df75504f158dd3381435289600737fe6b1bcd5c65284d7ed0c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000117

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000117
                                                                      • Size 165KB
                                                                      • SHA256 8e0ac02f96687b84ada5cb9f2288e853e5326cfb1063045e32b766829c741538
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000118

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000118
                                                                      • Size 972KB
                                                                      • SHA256 42c30c04bd0be5dcb7f2f462283e7366479dc7a5c0388a32429fcadb82728f9b
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00011a

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011a
                                                                      • Size 1024KB
                                                                      • SHA256 130109e6fdc0dbdbc12685f67679831bbf4464ef881916058ac7ed48e39a418c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_00011b

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00011b
                                                                      • Size 17KB
                                                                      • SHA256 5b6d085e0195973c52fc4552e5f2417f31babe6785fcb6cd3da3aee44687128f
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f_000121

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000121
                                                                      • Size 20KB
                                                                      • SHA256 358fbb0678b1952f6e31e2028424a93d9ad7a820a8e1daf8bf1b066ece7ee04d
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                      • Size 5KB
                                                                      • SHA256 dda5d3217ca770bc4fd3fb8adc4cc62ceebf4f381c04cfc5970672ddd1f3489a
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                      • Size 5KB
                                                                      • SHA256 cf1352997a48f66d945260a50a6f86d54783a30c2ccf7549d0a65229220df449
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                      • Size 6KB
                                                                      • SHA256 5e32ee8ca41156b8e38ffdfa9a0e1e06529500ce7ad9e67e70dff9053263f35c
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                      • Size 3KB
                                                                      • SHA256 e258fc0ff21e9b588265cfe11cc13f477538898e4a008272877cd1be349ec80d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      4a1ad6e0-f7c9-4892-ad24-08e326037ab6.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4a1ad6e0-f7c9-4892-ad24-08e326037ab6.tmp
                                                                      • Size 2B
                                                                      • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                      • MD5 SHA1 SHA512

                                                                      000003.log

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.you-porn.com_0.indexeddb.leveldb\000003.log
                                                                      • Size 12KB
                                                                      • SHA256 49104abc61fa2e2a3fc489779750d822d0635fa37a1859647cdd1eaec5a007ef
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      CURRENT

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.you-porn.com_0.indexeddb.leveldb\CURRENT
                                                                      • Size 16B
                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                      • MD5 SHA1 SHA512

                                                                      LOG

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.you-porn.com_0.indexeddb.leveldb\LOG
                                                                      • Size 353B
                                                                      • SHA256 fa6708eb6fe59d0aa7d0f4b0a1a44fb8615c8f65bad7f81b7837de2172601cc1
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      MANIFEST-000001

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.you-porn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                      • Size 23B
                                                                      • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                      • MD5 SHA1 SHA512

                                                                      58a6b135-2156-425a-a0a0-e78debe1185a.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\58a6b135-2156-425a-a0a0-e78debe1185a.tmp
                                                                      • Size 15KB
                                                                      • SHA256 4e63b969d1f10c404ced2187d49478903e8f73ba2376665dbd8e6b159e6a7102
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      60bbce0a-78a5-40a9-8da2-1dd054577e36.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\60bbce0a-78a5-40a9-8da2-1dd054577e36.tmp
                                                                      • Size 2B
                                                                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                      • MD5 SHA1 SHA512

                                                                      ac62d416-0937-4c95-b34f-ec2efe305fcf.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ac62d416-0937-4c95-b34f-ec2efe305fcf.tmp
                                                                      • Size 111B
                                                                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1de658b0d2cd3564a0d2c881a5ffb11bb78a220f\ecd0aaec-4d96-48ef-9568-b93743e92964\index-dir\temp-index
                                                                      • Size 144B
                                                                      • SHA256 7f08d53ffb755b78d99f67a5dd50ec72ee3d185c41d3dad53f68e3087b7d932d
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1de658b0d2cd3564a0d2c881a5ffb11bb78a220f\ecd0aaec-4d96-48ef-9568-b93743e92964\index-dir\the-real-index
                                                                      • Size 48B
                                                                      • SHA256 7e2aa6859be86aa1fac73239c9246bb04d36a94b5375225a005f9cd322640b52
                                                                      • MD5 SHA1 SHA512

                                                                      index.txt

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1de658b0d2cd3564a0d2c881a5ffb11bb78a220f\index.txt
                                                                      • Size 151B
                                                                      • SHA256 0d6145f68312245f2634c697d7c7ed51307b864483a9c38748a23e64d3b6195c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      index.txt.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1de658b0d2cd3564a0d2c881a5ffb11bb78a220f\index.txt.tmp
                                                                      • Size 149B
                                                                      • SHA256 56f691e0c07179c814c909db78cfa186857dd8a8ba59c278dfe2b3fb0923999c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\96018436-78a9-42c8-9849-813ac16d1c7b\index-dir\temp-index
                                                                      • Size 960B
                                                                      • SHA256 fe237595b40ab093527df506ea2884bec788030fdaa36df5382840e882695634
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\96018436-78a9-42c8-9849-813ac16d1c7b\index-dir\the-real-index
                                                                      • Size 960B
                                                                      • SHA256 81a62d75417ad03d54443261f5edf34efc3c8be9df85ff5c73dcbb14b1fe0f0b
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      013888a1cda32b90_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
                                                                      • Size 1KB
                                                                      • SHA256 c82629c2e5f17935f90b4a081122ecd411380bfb023c919f049ce8cf7099a6c1
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      297ecea5cebb5dfe_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
                                                                      • Size 4KB
                                                                      • SHA256 ed439b04f60ec3ca603acf5e05f51c6aa8067376d7fd06d26b5f494e05079086
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      297ecea5cebb5dfe_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1
                                                                      • Size 10KB
                                                                      • SHA256 04441e452e98120d511a9836e10290e1205b520f914cc07b77c3f2385dc95413
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      67a473248953641b_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_0
                                                                      • Size 4KB
                                                                      • SHA256 fac576459039c853d09ccd3d70aed4fd9c47273fe9df3284175a44be10d854ea
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      67a473248953641b_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\67a473248953641b_1
                                                                      • Size 10KB
                                                                      • SHA256 1fc35020e80a492f50b0ea62221f69bb3f3b3126fc4736963a505db4c44deb35
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      b6c28cea6ed9dfc1_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0
                                                                      • Size 4KB
                                                                      • SHA256 ae6d6acdbd41cf433e55778e38dfaa9d1a40faf588a8fc83569d94b5510c01bb
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      b6c28cea6ed9dfc1_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_1
                                                                      • Size 10KB
                                                                      • SHA256 e7d397acbbd69fb0eae77fddd174840475bb3abefd888aba3f25087b4bcce4cf
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ba23d8ecda68de77_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_0
                                                                      • Size 2KB
                                                                      • SHA256 1e31544969421f6ad9e79ad416f51105ac4b6be2ead280c647286ca543751ea2
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      ba23d8ecda68de77_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\ba23d8ecda68de77_1
                                                                      • Size 3KB
                                                                      • SHA256 119b37a9436011ea6ed7eb731f83faab5efd597914c3143abe8656d628a8d220
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      f1cdccba37924bda_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
                                                                      • Size 5KB
                                                                      • SHA256 0e98c45dedf19f662148c29e8d1daad126048b4ffee830aa6e48031f816044ce
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f1cdccba37924bda_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
                                                                      • Size 3KB
                                                                      • SHA256 865a3dee1edbb8a1c5c35f66ffa54fae9b3be562aaf835e3763fc1a9c962f67c
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      fa813c9ad67834ac_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_0
                                                                      • Size 7KB
                                                                      • SHA256 22b108e7aa4dd33511543cec0b24ed2ab1a0b1bac1a9b60c90a1e023d75869d7
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      fa813c9ad67834ac_1

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\fa813c9ad67834ac_1
                                                                      • Size 26KB
                                                                      • SHA256 f95f1340c36779f98f2aea6d21040c26db30b3d065f2dab1a2bfc99f17682324
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                      • Size 216B
                                                                      • SHA256 cd42814b54901f7bd30ac7a64cc4f2e3a345a743801b136b001aefa04432940f
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      the-real-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                      • Size 48B
                                                                      • SHA256 d992d0252ff860c2ced5f56aca146890f45a9acb57895dcbac944b790c1c7c53
                                                                      • MD5 SHA1 SHA512

                                                                      077fa4239c996e46_0

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\077fa4239c996e46_0
                                                                      • Size 196KB
                                                                      • SHA256 cbd1b192d6e867ecb5f35d893506b739897ffb45d7ecd649c015140ecb983ec2
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      temp-index

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                      • Size 120B
                                                                      • SHA256 3dca7390786924115292c1abead1bcfdbaf7e2b2b1a22b99bfdbdb730fb0bc62
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      sync_diagnostic.log

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                      • Size 4KB
                                                                      • SHA256 7e5dba95363e6fd87b7832ca3440fb6d3cc79d80d41b18e80bf2726f3b6438af
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      b22d454d-1fd4-4206-98a5-ae1819615181.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b22d454d-1fd4-4206-98a5-ae1819615181.tmp
                                                                      • Size 12KB
                                                                      • SHA256 adffb63911fd7198eb941e47624b79a5b6531c19c60261acec2cc3d7555a1f39
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      cbd1b66b-f536-49dd-8a0d-a8f5993596bb.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cbd1b66b-f536-49dd-8a0d-a8f5993596bb.tmp
                                                                      • Size 70KB
                                                                      • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      ced0bf6c-c82c-4219-9e89-ed8ebc7f32b0.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ced0bf6c-c82c-4219-9e89-ed8ebc7f32b0.tmp
                                                                      • Size 11KB
                                                                      • SHA256 1d1a1943f63d7f50cdd39997357098b13e299ded3ae43affd4ca43fb9ad75eed
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      d2bcf864-286c-4cc8-96fd-0e3698a8d1f4.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d2bcf864-286c-4cc8-96fd-0e3698a8d1f4.tmp
                                                                      • Size 10KB
                                                                      • SHA256 0fd6737829780780f62c20a9bf5ec4aa78dbaaa28828814960392c6bd6663015
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      dd3eba3e-8e4f-41bc-8b9f-09ada7f9994b.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd3eba3e-8e4f-41bc-8b9f-09ada7f9994b.tmp
                                                                      • Size 27KB
                                                                      • SHA256 51cf949fe11f28b47d507bb0331f6113aebbac96a7b7cf08de16b6558bf5b873
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      f1317dc0-4f90-4cc5-a0d3-384f4ab8bd67.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f1317dc0-4f90-4cc5-a0d3-384f4ab8bd67.tmp
                                                                      • Size 10KB
                                                                      • SHA256 cc17332cab96bde90c181a4c3c9a31c18f5d7f72f9e6113d3d0a01145fddf4d1
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      fbbda19a-b970-464e-9374-9e429f13db2d.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fbbda19a-b970-464e-9374-9e429f13db2d.tmp
                                                                      • Size 11KB
                                                                      • SHA256 90d75b5a1e250640e4436fe659c50406379627d5a3346037951eb7841a7590c5
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      7ea56daa-fad2-4b5b-93e1-562e102efc65.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7ea56daa-fad2-4b5b-93e1-562e102efc65.tmp
                                                                      • Size 22KB
                                                                      • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      OperationConfig

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                      • Size 3KB
                                                                      • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      RevisitationBloomfilter

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                      • Size 392B
                                                                      • SHA256 89fb29b55610cf70c989347984d32ebd7a5f2d20eb0039e9f25d0592fde5acc9
                                                                      • MD5 SHA1 SHA512

                                                                      a244094a-cc3b-4fe2-9e83-0157e5da56e4.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a244094a-cc3b-4fe2-9e83-0157e5da56e4.tmp
                                                                      • Size 392B
                                                                      • SHA256 8d2429b6a4fe326c817e75560601f2cb4ac54d3560772cf16ae6aa7886243e92
                                                                      • MD5 SHA1 SHA512 TLSH

                                                                      b4db8f11-56e8-4410-8b85-684fcd355636.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4db8f11-56e8-4410-8b85-684fcd355636.tmp
                                                                      • Size 8KB
                                                                      • SHA256 dec67ca32f951699387871d1550d3eb69f1b87e4aeb712bef596520eb46e57ea
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      d17d93a1-243f-410a-b91b-a8b8a0e41f83.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d17d93a1-243f-410a-b91b-a8b8a0e41f83.tmp
                                                                      • Size 8KB
                                                                      • SHA256 c8d344e98443f871df39ee58a2efae46f01e090ab6bc16849612b2d3002b5104
                                                                      • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                      1e4f7721-12ee-4b58-88ab-5a252bf639de.tmp

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\1e4f7721-12ee-4b58-88ab-5a252bf639de.tmp
                                                                      • Size 13B
                                                                      • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                      • MD5 SHA1 SHA512

                                                                      5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                      • Size 2KB
                                                                      • SHA256 3d546e17430a8d1144ac46a3f3243eea2be65774b8e1ec1d2df6959eda96166b
                                                                      • MD5 SHA1 SHA512 TLSH