Analysis

  • user interaction
    yes
  • max time kernel
    599s
  • max time network
    600s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 05:43

General

  • Target
    http://bledisloemedical.com.au
  • Sample261014-gexdyay1hs
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://bledisloemedical.com.au
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5064
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffef14ec188,0x7ffef14ec194,0x7ffef14ec1a0
      2⤵
        PID:3900
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,5090914673905827210,14636928604428680655,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4556
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1692,i,18382419777615289082,10823933087122408477,262144 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
        2⤵
          PID:3828
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2624,i,4933461203421285481,16666495801530052919,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:8
          2⤵
            PID:3956
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3440,i,10479711259067273514,18238915085858446751,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
            2⤵
              PID:1740
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,4955758562884349166,9722412061474505531,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
              2⤵
                PID:1764
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,11058280219001380008,17189905169466032407,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
                2⤵
                  PID:4856
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4300,i,13069865713608332416,18073537547457473134,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:2
                  2⤵
                    PID:1796
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5088,i,728029191470994928,192313724054565004,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
                    2⤵
                      PID:3176
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3444,i,6442749685577337322,18207996126787625438,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:8
                      2⤵
                        PID:552
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2804,i,11429833170577350385,16851178904603761605,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
                        2⤵
                          PID:4128
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,13309653183532798619,11728740503089118615,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
                          2⤵
                            PID:1600
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3512,i,13309653183532798619,11728740503089118615,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
                            2⤵
                              PID:2920
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4564,i,15706510271183127554,14182400338511653897,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=4548 /prefetch:8
                              2⤵
                                PID:2792
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,4904247758902875330,14340113664971264450,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:8
                                2⤵
                                  PID:4440
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6364,i,7069960289388078231,10872250575636606355,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
                                  2⤵
                                    PID:2964
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6492,i,1926621481752492040,9162063114423561527,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
                                    2⤵
                                      PID:1056
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6892,i,16419273203576868056,86452889793425113,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:1
                                      2⤵
                                        PID:3392
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,2154716603874405146,4295408507285443991,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6840 /prefetch:8
                                        2⤵
                                          PID:1132
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6988,i,9634644756708225002,1888267771382033745,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:1
                                          2⤵
                                            PID:3944
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=7212,i,14022554525529292236,6341087145553145679,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
                                            2⤵
                                              PID:2008
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7316,i,5368039497689889631,9537561810267885995,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:1
                                              2⤵
                                                PID:760
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7376,i,3545886144610771522,796506423819545385,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7472 /prefetch:1
                                                2⤵
                                                  PID:1860
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7148,i,4555686295448029273,7058584597867440825,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6876 /prefetch:1
                                                  2⤵
                                                    PID:900
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7968,i,15929147264682822951,6463631894181883762,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7972 /prefetch:1
                                                    2⤵
                                                      PID:4664
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,14767710219041743286,5877637227534135886,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8108 /prefetch:8
                                                      2⤵
                                                        PID:5136
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7856,i,11493146041765619214,11713906583742245867,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8144 /prefetch:8
                                                        2⤵
                                                          PID:5144
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8100,i,12990175872375012000,445693375394739343,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8200 /prefetch:8
                                                          2⤵
                                                            PID:5152
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7064,i,6563459182029208488,17437954630359088811,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:8
                                                            2⤵
                                                              PID:5388
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,3329947952303332831,12593155589734649780,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:8
                                                              2⤵
                                                                PID:5544
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8372,i,1621026606056165248,8833475119654575405,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8388 /prefetch:8
                                                                2⤵
                                                                  PID:5592
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7128,i,2589835843288747168,1125652102167337076,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8548 /prefetch:8
                                                                  2⤵
                                                                    PID:5740
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=8568,i,12909890599193717792,13729258444873936989,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6912 /prefetch:1
                                                                    2⤵
                                                                      PID:5760
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5160,i,1616684293246888186,3415649654612983016,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
                                                                      2⤵
                                                                        PID:5880
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=8280,i,4717006487572523058,16803693581204339433,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
                                                                        2⤵
                                                                          PID:5896
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8268,i,18327219322997671496,3988845975382635786,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8784 /prefetch:1
                                                                          2⤵
                                                                            PID:6000
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8788,i,16711751312457707949,111809036505834007,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8804 /prefetch:1
                                                                            2⤵
                                                                              PID:6008
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8848,i,3211395646214526759,5737917923852525633,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:1
                                                                              2⤵
                                                                                PID:6016
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=7204,i,8648743420290244869,2815392020029996575,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8984 /prefetch:1
                                                                                2⤵
                                                                                  PID:5180
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=8844,i,5087770818845232239,990512339165793431,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=9004 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5188
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=9008,i,8642202051962871594,11557888705347939429,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8636 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5920
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=3064,i,9392371005967568642,5749790324083613287,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8148 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5580
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=9008,i,16732411966391405811,6743512480472563424,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5224
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,14816416004294356003,8739934245184545943,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3412 /prefetch:8
                                                                                          2⤵
                                                                                            PID:5608
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=7376,i,4546289900640747322,9276205243336026752,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:1
                                                                                            2⤵
                                                                                              PID:6136
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8792,i,11106957132433468283,13092898006857526038,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:1
                                                                                              2⤵
                                                                                                PID:3624
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=3524,i,16524856079048149509,11609513655032415786,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:624
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=8360,i,16568576648035521356,4080746440030243513,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3476
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8628,i,8279930528063925490,12580516552363550223,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8544 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5892
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=9044,i,12814369145032022549,733470382454900967,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8620 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:5908
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=5164,i,6025714621460990353,826777315802256081,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:6052
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7940,i,5677088740265586787,13064787995817580025,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:6032
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=8988,i,14024291673760490909,4428333734465585842,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:2612
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7296,i,4778320343820094726,10544802587104329584,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:5416
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=7016,i,12097928584920527213,7866376439103613107,2097152 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=9040 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:5748
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7148,i,17037406434985015076,15602961256840028512,262144 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
                                                                                                                  2⤵
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  PID:5096
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3984,i,13482289226887035472,5873335652942372028,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:3476
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3968,i,12748699431209587950,12915208566083844117,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=3372 /prefetch:8
                                                                                                                    2⤵
                                                                                                                      PID:5908
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,2386555692217810179,17145855125036644466,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
                                                                                                                      2⤵
                                                                                                                        PID:5292
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,9775498964922400341,9306493971815792653,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=7648 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:3448
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7556,i,4085083855061698681,3138296878895350191,524288 --field-trial-handle=2268,i,7126229252198846338,6671475275787740995,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
                                                                                                                          2⤵
                                                                                                                            PID:5828
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                          1⤵
                                                                                                                            PID:1600
                                                                                                                          • C:\Windows\system32\notepad.exe
                                                                                                                            "C:\Windows\system32\notepad.exe"
                                                                                                                            1⤵
                                                                                                                              PID:4880

                                                                                                                            Network

                                                                                                                                  MITRE ATT&CK Enterprise v16

                                                                                                                                  Replay Monitor

                                                                                                                                  Loading Replay Monitor...

                                                                                                                                  Downloads

                                                                                                                                  1b4f2b06-a818-4240-9ee4-796d23fe446b.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1b4f2b06-a818-4240-9ee4-796d23fe446b.tmp
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 e64ad094fc4445e3636c21b6f177d05dd0b078f0e0ba599aa47648b802209cc4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  43241330-dbcc-4bb0-af19-cb27e49d32a3.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\43241330-dbcc-4bb0-af19-cb27e49d32a3.tmp
                                                                                                                                  • Size 26KB
                                                                                                                                  • SHA256 03bea02b7faf117a6da521fc5f0105f883ef77c207711665a43a6422a511a8ec
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  45ea987f-3fd6-427c-b295-cfc5ccbda49b.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\45ea987f-3fd6-427c-b295-cfc5ccbda49b.tmp
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 527298facc7d2f95a6972b6367a1588d1b7dce572c8b48c27a290211a436d2fa
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  settings.dat

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  settings.dat

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                  • Size 280B
                                                                                                                                  • SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  4b5dd02d-61af-425f-9204-53400a251ae0.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4b5dd02d-61af-425f-9204-53400a251ae0.tmp
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 8017bfacaa85b3738c2d0c723ca595d4bfa7c9cddbc12319e886ddc6919b141b
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  512410e5-0827-499c-847f-b204d3e27dd0.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\512410e5-0827-499c-847f-b204d3e27dd0.tmp
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 ba4765bf9c787cccb365d2438ad912ba7348aca8be7a765bf57dd3f237e72c8d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  5626d374-5b72-4f3f-aa90-0fab3ef5f710.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5626d374-5b72-4f3f-aa90-0fab3ef5f710.tmp
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 2427fc44384015eda1f9adbe82b071e0a7466674fdbdb103fb94c87bdcf5b4c8
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  70ca8828-c453-4e08-8c00-d63d0f87f70d.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\70ca8828-c453-4e08-8c00-d63d0f87f70d.tmp
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 39c7b00c5428d982b3850c3877fac9367c373d02827e6e3e9ce4b6b182f7716a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  780cbca4-ca76-4636-ac65-1ad9a07cfe4f.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\780cbca4-ca76-4636-ac65-1ad9a07cfe4f.tmp
                                                                                                                                  • Size 10KB
                                                                                                                                  • SHA256 c50fb0bf3dbd9e5bf165f545105d6767f4ee5ea47b05d7ec1582a7578d306d5c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  7d574a84-1bb0-4375-9116-e2f1ea40b410.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7d574a84-1bb0-4375-9116-e2f1ea40b410.tmp
                                                                                                                                  • Size 30KB
                                                                                                                                  • SHA256 4bada43f9b18b0902951428475ee0172903303b5d59cf9277bc00ad544eb9521
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  864d9ac6-25fe-4d98-96f7-aaa148201146.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\864d9ac6-25fe-4d98-96f7-aaa148201146.tmp
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 b1e156e43e5459c4b33deb52ff1a1a4a0a93fca2807c1157fbe5658da43c6f9c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  LOG

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                                                                                  • Size 334B
                                                                                                                                  • SHA256 fe47dff566be4b8e969f028bed3130cfca9176651ee696a05fc1b69116ab4831
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LOG

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                                                                                  • Size 334B
                                                                                                                                  • SHA256 ccfb9ac2222936debcc54665f089efbec3e670b317508c63109e74f68be5f46f
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  f_00007b

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b
                                                                                                                                  • Size 28KB
                                                                                                                                  • SHA256 e9674087f73c9d8568043554a908dcf4030e40df54859b3b3f72d9fbbd139eb0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00007c

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                                                                                                                  • Size 218KB
                                                                                                                                  • SHA256 2400b33d1636406b2effcd223edd22ac202adfa9b065a0da74109fa6a88acc98
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_000088

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 27dc86143f9a36f387113d4204a94da218d7c56a7c5297ad87d880e4aa8205c0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00008b

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                                                                  • Size 85KB
                                                                                                                                  • SHA256 c59b3b2df76b39e222ff8171050ee20d412f4643693ea2229a072ad4af635b69
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00008c

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                                                  • Size 124KB
                                                                                                                                  • SHA256 d326fcef608f4097f29918ec8bc17ced4c4f42ce2fcc8ebc01b5003eead2ee46
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00008d

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                                                                  • Size 79KB
                                                                                                                                  • SHA256 a4a2e12171f47674c6a1f3583e5ea15e33c9fcddedd693f9e79a483f50afbd1a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00008e

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                                                                  • Size 90KB
                                                                                                                                  • SHA256 0958d24c3603bb935c4e8c06f100b2dd1f98a6345851099f207bc0f44b7cb336
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_000096

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                                                                  • Size 1024KB
                                                                                                                                  • SHA256 1e0ff5be9da109132083ed29d106dc0b8cd31d06cb7f553055acc767e7d511b5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_000098

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                                                                  • Size 1024KB
                                                                                                                                  • SHA256 caa9e2ae86080a0afe45af7e7c5b3027560bce08bf2e5a3dbafe96ac854b7d54
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_000099

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                                                  • Size 107KB
                                                                                                                                  • SHA256 f38a0cfc15798e5baf9fabd09fdac1f76feb7f7b956f0f6460ee1497f93b54e9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00009b

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                                                                                  • Size 39KB
                                                                                                                                  • SHA256 0c4d90e3dad2d2fd16207034f65968790774f89060b5d8c0fedd4f8ca0a6d331
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00009c

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                                                  • Size 74KB
                                                                                                                                  • SHA256 cad41f2c02dee610c81e8d5d448c85b7d6105e347740954eee4cca6e219d92c1
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00009d

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                                                                                  • Size 63KB
                                                                                                                                  • SHA256 248800cfa58434589d1ff0e72f863703b87752c506fe985b51458039467dc6fd
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00009e

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                                                  • Size 84KB
                                                                                                                                  • SHA256 c4fe4fa7df777fab5f4d4b3b1e8ae027724d74046425a7494ab2717e3e35f481
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_00009f

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                                                                                  • Size 96KB
                                                                                                                                  • SHA256 64a5031923ca454e95d2000e77e84f466c7d620146c71859934da6cb57547803
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                                                                  • Size 98KB
                                                                                                                                  • SHA256 527f90f45a98ecba26281e5fec50f3a6e62e1eb950ccf8dc74b580549930e5ec
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a1

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
                                                                                                                                  • Size 108KB
                                                                                                                                  • SHA256 56bf0f0c8ae9f6ece00686dcdd2b4465e1b06676b8ed4e943a1613b2bab17e1d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a2

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                                                                  • Size 130KB
                                                                                                                                  • SHA256 a8261cd1558fe017576532c551e4004009e92f80a85a0d6c6601626ccc80d421
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a3

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                                                  • Size 92KB
                                                                                                                                  • SHA256 f97621ef6e4e9c0fc953e002071d8347a00ee8c98a08bdb00a6da9135ab1a405
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a4

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                                                                                  • Size 109KB
                                                                                                                                  • SHA256 8940905c183774432715d73dfa569bceab5f73f1329ab799ddd54af66676b1d0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a5

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                                                                  • Size 132KB
                                                                                                                                  • SHA256 a117e04168ebb9054a20ae4fa688fe8414798ef089770870591027a7cebe6b26
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a6

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                                                                                                                  • Size 98KB
                                                                                                                                  • SHA256 d9667c4815e02a711e717e2667f75999cf3292f3ca82fa01411de66a9ff1a287
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a7

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                                                                                  • Size 130KB
                                                                                                                                  • SHA256 c30cb33e166f0bc5c6b57e7d2e09aba430a7491a6f462eab5df3a94f728409ff
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a8

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                                                                                  • Size 107KB
                                                                                                                                  • SHA256 0d6c3413aedf0a03e1410dd2f8e99a8e7c960629a56216923ad6ec0a85e54b69
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000a9

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                                                                                                                  • Size 95KB
                                                                                                                                  • SHA256 039f07705389c9f8f5751627a168cee207aa2d810cc1c49d6b77e515214f86e9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000aa

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000aa
                                                                                                                                  • Size 126KB
                                                                                                                                  • SHA256 b7b31040291a1c4829b85457b01d3130c644c7e9a03ea841fafa5802deef116d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000ab

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                                                                                                                  • Size 131KB
                                                                                                                                  • SHA256 9e883cd8e85f080fb2d99a95de0cec9b9921130da15688d52d656c854f7f573f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000ac

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                                                                                                  • Size 898KB
                                                                                                                                  • SHA256 d576428fbe09250668c46275c8f1cc149a8292ee578f821ee7d1d8f491eb19f6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000b4

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                                                                                  • Size 34KB
                                                                                                                                  • SHA256 c811b76785137c789ae1dd0f21ee61c40ee7eb76518b51e3c3fe6a32a606d92f
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000b8

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b8
                                                                                                                                  • Size 346KB
                                                                                                                                  • SHA256 a1ceb3df9fb44cafac57aa6814112f415b31d062f45029b84330a4c8b6ee2223
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000bf

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                                                                                                                  • Size 26KB
                                                                                                                                  • SHA256 57993841b38ceed3c97bcaa2f6557fea4407301c1d1ce26af53115267f24ee46
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f_0000c0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                                                                                                                  • Size 39KB
                                                                                                                                  • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  5929d2b41383e8d9_0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5929d2b41383e8d9_0
                                                                                                                                  • Size 763KB
                                                                                                                                  • SHA256 5b2cfc3d2bf72dfd40dc8ebd9f23d551ce85219d38a3d6aa0e506db6d111fcd7
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  c3f6f4b7b8add5a5_0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c3f6f4b7b8add5a5_0
                                                                                                                                  • Size 249B
                                                                                                                                  • SHA256 76a35eee134f2357a0b1233c697ed4c26325950e4a652a557661d9dc0f353db5
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  c3f6f4b7b8add5a5_0

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c3f6f4b7b8add5a5_0
                                                                                                                                  • Size 289B
                                                                                                                                  • SHA256 8223bc92b43d9caf9bfe48c1025e80caad4a52c1544cb5308f0aaba54f1c9c33
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  temp-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                  • Size 4KB
                                                                                                                                  • SHA256 dd512589aaf77f1f7cb12edc62c572b4a386812037c7e467349b741cf4de124d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  the-real-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                  • Size 3KB
                                                                                                                                  • SHA256 06e6dd091b38394e4dbc2b93c43c49ea7b5d80e5cba526c06b8ad0a3d1a521a3
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  f13b701d-9194-4d97-b767-bd44b3c3b97a.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f13b701d-9194-4d97-b767-bd44b3c3b97a.tmp
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  CURRENT

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
                                                                                                                                  • Size 16B
                                                                                                                                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  DevToolsPlugin.html

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir5064_1011242621\CRX_INSTALL\DevToolsPlugin.html
                                                                                                                                  • Size 220B
                                                                                                                                  • SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir5064_1011242621\CRX_INSTALL\manifest.json
                                                                                                                                  • Size 766B
                                                                                                                                  • SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  manifest.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir5064_983979030\CRX_INSTALL\manifest.json
                                                                                                                                  • Size 658B
                                                                                                                                  • SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  07401971-a34b-4368-b750-0eee9b6301fb.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07401971-a34b-4368-b750-0eee9b6301fb.tmp
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 57352ed9cb00408a3a966e08ec35c4188f9ee1b69734289ad278e44c75586ea6
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  ae16b1e3-9f43-4487-a6bd-4f93219f650a.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ae16b1e3-9f43-4487-a6bd-4f93219f650a.tmp
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 0a42b0ec44258750db381c6f5b01b22f8d3b5b15f05dc0da8e04b0fcf55699f0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  c2096a54-6924-498f-b083-2b1dbacd5eb5.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c2096a54-6924-498f-b083-2b1dbacd5eb5.tmp
                                                                                                                                  • Size 2B
                                                                                                                                  • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  d77d6adf-301d-4a26-ba36-00c61a1dc7d2.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d77d6adf-301d-4a26-ba36-00c61a1dc7d2.tmp
                                                                                                                                  • Size 6KB
                                                                                                                                  • SHA256 46844c16b33d6c87c436de34b1675602c460bf7d9f8f05208ba9c26723d42b16
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  eaf5ec0b-8fb0-49b6-895e-7bd4320b3197.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\eaf5ec0b-8fb0-49b6-895e-7bd4320b3197.tmp
                                                                                                                                  • Size 111B
                                                                                                                                  • SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  ed48bd9e-221e-4833-b237-33c8ad5b0959.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\ed48bd9e-221e-4833-b237-33c8ad5b0959.tmp
                                                                                                                                  • Size 5KB
                                                                                                                                  • SHA256 0e4d5769e4c1c91cb22de9d8104afe67507cbb96e27699da421bcd25573db4f9
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  temp-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\temp-index
                                                                                                                                  • Size 720B
                                                                                                                                  • SHA256 51e54fbe2ce7d73b252ec32b2dae86963554e21290b7dea58bfc5abd0fbd7f1e
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  the-real-index

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\the-real-index
                                                                                                                                  • Size 720B
                                                                                                                                  • SHA256 2577c3b4e44d49d2dce68de2f54cf8263623e87f128f8fe6d4167374e8ffca69
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  index.txt.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                  • Size 371B
                                                                                                                                  • SHA256 ba6d3dd687b6c680d910160409587a1d1d91544863dba9ab289d1a42a173bb39
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  a1e62c71-f28a-4119-8930-1cfc34380742.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1e62c71-f28a-4119-8930-1cfc34380742.tmp
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 dd52a9a12cd65c6b8c7d122dabf03e3e4f72a561a99d7545fcccf87bedc8c3c3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  a67d67b9-9147-4e95-a991-9a8e33f2f2d9.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a67d67b9-9147-4e95-a991-9a8e33f2f2d9.tmp
                                                                                                                                  • Size 13KB
                                                                                                                                  • SHA256 d717dbcb1c13080e295b45d3e7c378afe1a4161a46b5b8987b0967147ca5e6a3
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  a81bef65-c070-4e51-8f62-a7876e14b6fb.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a81bef65-c070-4e51-8f62-a7876e14b6fb.tmp
                                                                                                                                  • Size 70KB
                                                                                                                                  • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  b15f288b-d3d4-48ac-b3d4-ecc147fdecef.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b15f288b-d3d4-48ac-b3d4-ecc147fdecef.tmp
                                                                                                                                  • Size 9KB
                                                                                                                                  • SHA256 1be7809d1aaa980997f98a38e7a1c40473bbd4f8aeea5ec995cc26c4d6800dc0
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  d17cac6d-cb91-4df8-9e58-1d70da8e9b93.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d17cac6d-cb91-4df8-9e58-1d70da8e9b93.tmp
                                                                                                                                  • Size 12KB
                                                                                                                                  • SHA256 ab8578e99bd4c9e71126e9027657958a6c7141b87bf70c8f3b27a2a8f60b3f8c
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  eacc0688-121c-4aa0-b109-8075c0d0fefa.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\eacc0688-121c-4aa0-b109-8075c0d0fefa.tmp
                                                                                                                                  • Size 27KB
                                                                                                                                  • SHA256 3648963bcb65f8575cee9bd7058b13649dce8c75a8070f2041c1917d0148e1eb
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  8ad93f26-0792-491c-80fd-21b4ca77709d.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\8ad93f26-0792-491c-80fd-21b4ca77709d.tmp
                                                                                                                                  • Size 22KB
                                                                                                                                  • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  c4dc7a26-4aaa-47c3-8605-7c93f0a67cd4.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4dc7a26-4aaa-47c3-8605-7c93f0a67cd4.tmp
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 34ad8e190cc0df4c6ba053ea9888ab1cecbb545b5bdb8a5c3effc44809f8e237
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  d92efa37-d6df-4216-aa69-b985e0f9e56b.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d92efa37-d6df-4216-aa69-b985e0f9e56b.tmp
                                                                                                                                  • Size 13B
                                                                                                                                  • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  f5d952d1-290b-4089-a92c-5ff6f8b0d7aa.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f5d952d1-290b-4089-a92c-5ff6f8b0d7aa.tmp
                                                                                                                                  • Size 25KB
                                                                                                                                  • SHA256 dd8e0b68bc1a47476bd931a2b16cfe17f8a0f26341570329881414199b30becf
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  f7fe4868-4773-4c3c-a9ab-4cba0d97715f.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f7fe4868-4773-4c3c-a9ab-4cba0d97715f.tmp
                                                                                                                                  • Size 18KB
                                                                                                                                  • SHA256 936baecdd1fac583116777c9892ee2f662df7e21e9392ac3c43b941f59219983
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 8d792d634bb1b246af25777fe3c4be50be20012b7a638361aa4d413310db17f9
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  9f175702-b428-4199-abcb-e5b4e2ce8392.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\9f175702-b428-4199-abcb-e5b4e2ce8392.tmp
                                                                                                                                  • Size 3.0MB
                                                                                                                                  • SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  e5f62348-65f4-45fa-80cc-8cf363d32f84.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\e5f62348-65f4-45fa-80cc-8cf363d32f84.tmp
                                                                                                                                  • Size 1B
                                                                                                                                  • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                  • MD5 SHA1 SHA512

                                                                                                                                  DevToolsPlugin.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\DevToolsPlugin.js
                                                                                                                                  • Size 8KB
                                                                                                                                  • SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  DevToolsPlugin.js.map

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\DevToolsPlugin.js.map
                                                                                                                                  • Size 16KB
                                                                                                                                  • SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  NamedFunctionRange.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\NamedFunctionRange.js
                                                                                                                                  • Size 1023B
                                                                                                                                  • SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  NamedFunctionRange.js.map

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\NamedFunctionRange.js.map
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  verified_contents.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LICENSE.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\third_party\typescript\LICENSE.txt
                                                                                                                                  • Size 9KB
                                                                                                                                  • SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typescript-tsconfig.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
                                                                                                                                  • Size 91B
                                                                                                                                  • SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  typescript.d.ts

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\third_party\typescript\typescript.d.ts
                                                                                                                                  • Size 486KB
                                                                                                                                  • SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typescript.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                  • Size 9.2MB
                                                                                                                                  • SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typescript.js.map

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1074102187\CRX_INSTALL\third_party\typescript\typescript.js.map
                                                                                                                                  • Size 6.0MB
                                                                                                                                  • SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  verified_contents.json

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                  • Size 2KB
                                                                                                                                  • SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  filelist.txt

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\CRX_INSTALL\filelist.txt
                                                                                                                                  • Size 134B
                                                                                                                                  • SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
                                                                                                                                  • MD5 SHA1 SHA512 TLSH

                                                                                                                                  LICENSE.md

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\CRX_INSTALL\third_party\babylon\LICENSE.md
                                                                                                                                  • Size 9KB
                                                                                                                                  • SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  babylon.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\CRX_INSTALL\third_party\babylon\babylon.js
                                                                                                                                  • Size 1.2MB
                                                                                                                                  • SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  typescript.js

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                  • Size 10.4MB
                                                                                                                                  • SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                  d5400f61-4faa-4e7f-a7a5-e20d8678e533.tmp

                                                                                                                                  • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_256874175\d5400f61-4faa-4e7f-a7a5-e20d8678e533.tmp
                                                                                                                                  • Size 2.1MB
                                                                                                                                  • SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
                                                                                                                                  • MD5 SHA1 SHA512 SSDEEP TLSH