Analysis

  • user interaction
    yes
  • max time kernel
    131s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    14/10/2026, 07:55

General

  • Target
    https://wetransfer.com/downloads/d60fa5bd55618e7f1ec746080950c43120261013193731/95304f96d44d968cefb17dc99ada49be20261013193744/548df4?t_exp=1792179451&t_lsid=26d85bfa-1552-4274-bfea-7b907fc1c5a4&t_network=email&t_rid=Z29vZ2xlLW9hdXRoMnwxMTMxNjE0NzMxNzY0NDI0MDMzNDE%3D&t_s=download_link&t_ts=1791920251&utm_source=wt_sen
  • Sample261014-jsb19shz21
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of FindShellTrayWindow 43 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://wetransfer.com/downloads/d60fa5bd55618e7f1ec746080950c43120261013193731/95304f96d44d968cefb17dc99ada49be20261013193744/548df4?t_exp=1792179451&t_lsid=26d85bfa-1552-4274-bfea-7b907fc1c5a4&t_network=email&t_rid=Z29vZ2xlLW9hdXRoMnwxMTMxNjE0NzMxNzY0NDI0MDMzNDE%3D&t_s=download_link&t_ts=1791920251&utm_source=wt_sen
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3824
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x28c,0x7ffed3dfc188,0x7ffed3dfc194,0x7ffed3dfc1a0
      2⤵
        PID:1832
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1840,i,10717057028408701965,6242438275603448104,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3840
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,6088442453444713701,2637899471773404596,262144 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:2
        2⤵
          PID:3728
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,5221347216138493029,7291164581493581303,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:8
          2⤵
            PID:3820
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3492,i,7709592779985736568,9636618588357414742,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=3576 /prefetch:1
            2⤵
              PID:4580
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3496,i,17996118887300447359,166411525005716708,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
              2⤵
                PID:4636
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4288,i,6517253642561739872,2770288127226063814,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=4304 /prefetch:1
                2⤵
                  PID:3544
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4368,i,13658247167031747238,5355261498891533710,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:2
                  2⤵
                    PID:1184
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3560,i,2587997684641639383,570791535534055799,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=3948 /prefetch:1
                    2⤵
                      PID:3044
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3916,i,8024168445042501088,10270022596950340340,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=5316 /prefetch:8
                      2⤵
                        PID:2504
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3928,i,2002384493916797138,148057635478246540,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
                        2⤵
                          PID:1700
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5712,i,8363181626603041071,12768317700780544684,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
                          2⤵
                            PID:1068
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6044,i,5433217124515125076,12723092308612749945,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:1
                            2⤵
                              PID:3108
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6284,i,6618228828272497662,16329173217258691246,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6280 /prefetch:1
                              2⤵
                                PID:3016
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6416,i,2679928639551497667,12903098443972887722,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:1
                                2⤵
                                  PID:2924
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6600,i,10125877358430572155,8354860648063241197,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:1
                                  2⤵
                                    PID:3476
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,7141543553563560317,10174263057035567178,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
                                    2⤵
                                      PID:5076
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,7141543553563560317,10174263057035567178,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:8
                                      2⤵
                                        PID:448
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6416,i,489774991048989660,3155251434068436547,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:1
                                        2⤵
                                          PID:5944
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6264,i,14595308110209977138,16933394776669365980,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
                                          2⤵
                                            PID:5704
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=5704,i,11730471104134171486,2960169841003286727,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=5144 /prefetch:1
                                            2⤵
                                              PID:5716
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3484,i,13836529251882404323,12584930407672738175,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
                                              2⤵
                                                PID:6132
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4580,i,13181833526582093799,11654316624587781193,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=4592 /prefetch:8
                                                2⤵
                                                  PID:6140
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7108,i,5903544709162586000,3762663897639179761,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6132 /prefetch:8
                                                  2⤵
                                                    PID:5128
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6104,i,12713574892250227268,15104823425908575555,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:8
                                                    2⤵
                                                      PID:2940
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7308,i,13614011462897853730,9683813309021853813,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8
                                                      2⤵
                                                        PID:6048
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7516,i,5236713477000259960,4498570827929265716,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=7584 /prefetch:8
                                                        2⤵
                                                          PID:2364
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7580,i,9757525863051188341,3085765583349919096,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=6028 /prefetch:1
                                                          2⤵
                                                            PID:5920
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7756,i,3614303864699123302,3028198726564871571,524288 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=7792 /prefetch:8
                                                            2⤵
                                                              PID:1736
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7772,i,13165031351648884998,17870593065084630870,262144 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:3536
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7904,i,13148676332984158524,16041060352978943290,2097152 --field-trial-handle=2392,i,2236968984222487654,12010081528949483747,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
                                                              2⤵
                                                                PID:5324
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                              1⤵
                                                                PID:3084

                                                              Network

                                                                    MITRE ATT&CK Enterprise v16

                                                                    Replay Monitor

                                                                    Loading Replay Monitor...

                                                                    Downloads

                                                                    12c07be9-8649-4db0-a8da-393053bab026.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\12c07be9-8649-4db0-a8da-393053bab026.tmp
                                                                    • Size 8KB
                                                                    • SHA256 b6a31585f00103f7084579321cac7bb2e3e5a835ec97cf64fa661fb8b64b0338
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    5971e4e5-e6b9-4faf-92cf-1caaa9884e64.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5971e4e5-e6b9-4faf-92cf-1caaa9884e64.tmp
                                                                    • Size 392B
                                                                    • SHA256 b0c6948550eed9ac94f71764a8c3992b3773ff6a06e9d1a7ff4302b9b4f74177
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    settings.dat

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                    • Size 280B
                                                                    • SHA256 d11bd63a3c8c3641d5bd4407fbf20115daee67c3050695788e54c8df9585c700
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    0976b85d-238f-4548-ac52-c4c1fc5ea282.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0976b85d-238f-4548-ac52-c4c1fc5ea282.tmp
                                                                    • Size 9KB
                                                                    • SHA256 4efdecd87a6ac5f246c002de22f60f6979459b72209579d38ca0cc7d8714d246
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    274f5ee0-3d5f-469d-a933-276d4948ef94.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\274f5ee0-3d5f-469d-a933-276d4948ef94.tmp
                                                                    • Size 11KB
                                                                    • SHA256 b5c315e5090eaa643afe0d148ad5f407b65af06193c419d3d131797ebbf28300
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    2a2c3899-f5da-43ec-b859-25b21422b692.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2a2c3899-f5da-43ec-b859-25b21422b692.tmp
                                                                    • Size 10KB
                                                                    • SHA256 c0d73103c9fae4a6d6b5b42c30b2dc154047f317836854a9c0b359c183c86172
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    5f06e707-a1ba-4ddd-a44d-9c760a7491bf.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f06e707-a1ba-4ddd-a44d-9c760a7491bf.tmp
                                                                    • Size 27KB
                                                                    • SHA256 6766315ca5dd95fc283b15a6b8ec255e2281822d428a942481f34456d8820202
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    609f1148-3ee1-434c-9ae6-e87767a1abab.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\609f1148-3ee1-434c-9ae6-e87767a1abab.tmp
                                                                    • Size 10KB
                                                                    • SHA256 d399a46a1852509b1d69898b09c894a369e0752eb8d9783a7c6fdad7a35e9283
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000047

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
                                                                    • Size 49KB
                                                                    • SHA256 c505102e6c063a31b3384629fc10fef34d6e4764113db491d65d9bb473fd8fa6
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000048

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
                                                                    • Size 21KB
                                                                    • SHA256 618aac630b685eaa1e2b3dd3ef82178b7e0ce39950a0e8a94e65195423710e78
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000049

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
                                                                    • Size 24KB
                                                                    • SHA256 df516e40e6b19ac552e2ad9237c07413c2d00f3470cda909e21604e9392c3213
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004a

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
                                                                    • Size 25KB
                                                                    • SHA256 51dcfac9a7d48ae05b5f37449ee8cc95ad6b70699a528879780d6cf072dfb350
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004b

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004b
                                                                    • Size 20KB
                                                                    • SHA256 a4ea3e9ed4dd7d56f0c48168f63d6b7a66f75935a4c8995cbd366fdc585a0d88
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004c

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004c
                                                                    • Size 39KB
                                                                    • SHA256 b8f8436c55b5587dee9da2c3db1d08309e249de0da6bcc7cae1d346dab551e13
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004d

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004d
                                                                    • Size 43KB
                                                                    • SHA256 23fee6b91e0c528f183dc8f555db1d43140039826514baaf72dcb7607af463e8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004e

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004e
                                                                    • Size 31KB
                                                                    • SHA256 d81aaa574b9c76932e6a20e0483ed62eadc140e4a0bb3347c7f80c6168ef6ead
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00004f

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                    • Size 35KB
                                                                    • SHA256 8070ff51b72a9aae78859a6ad193f6f63f0fefa122b1bed753bf715ea12702f5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000050

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                    • Size 45KB
                                                                    • SHA256 eeb2f9661699e1efab6b3f709df451b4a33bc45a9bb06ec44e1df7c4233f52e9
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000051

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                    • Size 105KB
                                                                    • SHA256 27d58666e7d0e26789cda60469a8af2ef3250f34e1af654fb118f76785d8f497
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000052

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                    • Size 77KB
                                                                    • SHA256 a7f238e24bb59cd3586d353e3dd004f17d5704138eb8c64bac37196cb9cff007
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000053

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
                                                                    • Size 49KB
                                                                    • SHA256 23f8e5ba002d08b9f231d1cb3372f209c99da2e61a72864f5358081949f0954f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000054

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000054
                                                                    • Size 22KB
                                                                    • SHA256 42d406cf76c02a2f18b944c19f09ba86146485db686e67f25664a0c5ec5e0b00
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000055

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                    • Size 22KB
                                                                    • SHA256 4ceec9883056a6c35fb5eacdc6e60677e9cb3eeb4b99345b6e996edd66ecb57b
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000056

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                    • Size 60KB
                                                                    • SHA256 14d2efb1ed3e1c17eee87b460533183f3ce121c11de86d10958e3db08cd5d024
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000057

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                    • Size 32KB
                                                                    • SHA256 68e687975d204a31eae90a37df82a374e4c551ad39ec79d3fd6797271cbca3bf
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000058

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000058
                                                                    • Size 92KB
                                                                    • SHA256 0baa4e1d43aa64bb9463f24b09d2a55d30487ffa5f3a355d9cb321b9f6808a03
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000059

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000059
                                                                    • Size 36KB
                                                                    • SHA256 e95cc164bf38ed8038aebb697a9daf70260f76d25f5d2180bf670fecb5115dff
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005a

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                    • Size 24KB
                                                                    • SHA256 f76f755a14aad16422816c394f8f3c06a6537e45f25571ee02a3c373a68870fe
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005b

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                                                    • Size 16KB
                                                                    • SHA256 664153d40fea6e23a71e10fe76143fac212f99e1036c0e50f21d135ba221d179
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005c

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                    • Size 30KB
                                                                    • SHA256 2a945eabfc747adabf34fdb847ac4fad6cfca365d99baa0dda98c95dc38fbf79
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005d

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                    • Size 29KB
                                                                    • SHA256 ed59b3146980aca12de015a91f7882370ca49a7d653bc7c7214e66cc6baeab11
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005e

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                    • Size 19KB
                                                                    • SHA256 554163002c3819c0f2f2df0e15e3f9ad1bfcb5055901e0fd90f06c67ad563fd2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00005f

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                    • Size 188KB
                                                                    • SHA256 875d20cf9f8d2425eefd7bb152a616beec017c40644580baced6138e942b77c4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000060

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                                                    • Size 18KB
                                                                    • SHA256 0ad5b2f8ea33f0ba0670dee1442533fd54ab2d82219beb570d6e2f1f19496c89
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000061

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                                                    • Size 17KB
                                                                    • SHA256 fbe40640dc83f3e1a33d3ff719d9381d8811dfc8cfe8efdc5f4b4b667bdcce5f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000062

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                    • Size 23KB
                                                                    • SHA256 d178bee88fda113e453bcbc32a9747cf3f66d1a05fa69138149ae43d953510ac
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000063

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                                                    • Size 36KB
                                                                    • SHA256 c3e7cdad3ae7d3624acb5d2b714295066ca2b7159dd0a1beb65050b594ae1666
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000064

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                                    • Size 35KB
                                                                    • SHA256 04f37713611ab3665adf1df334cd86bf59f59d7dae8b1b6808b5354259b5dfd8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000065

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                    • Size 67KB
                                                                    • SHA256 06626991fe864e390ef9f16b36837e7246956c8b765a1a337f1fcf18762e6da0
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000066

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                    • Size 101KB
                                                                    • SHA256 3b3954f213ef4b85138fe7382e29bdc80009a048ebdb825b5e0113399bee9940
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000067

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                    • Size 108KB
                                                                    • SHA256 e70ede14bd7c7322738691b606ca63579d8ee71c6e02e6fad3b2315e9b4370a0
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000068

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                                                    • Size 222KB
                                                                    • SHA256 1226e298820fa1be543b2191294828d1c838376695946db503a3df9b1a8212fa
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000069

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                    • Size 102KB
                                                                    • SHA256 8fa264ced14f7ac86fb25394ac482a24a250b969bd8f2beb569d04216bbbac31
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006a

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                    • Size 180KB
                                                                    • SHA256 e7417bd36563a1884c025a3f4e34263237a1441f2b202fa2280a7d8255d81021
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006b

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
                                                                    • Size 173KB
                                                                    • SHA256 06faf5cfb52a9cd6ecfe29fe3594c1fc91967770573ecb221171e238b19ec45c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006c

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                                                    • Size 16KB
                                                                    • SHA256 386e2ec0cfcddd5e2a59311de1081251de2cf70bf16dd52e8db4821ee061afc9
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006d

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                                                    • Size 267KB
                                                                    • SHA256 8eaa1036514c7aa51b04cbcaee8d34e9210478de4be2a53d9cf9fa60d5a7c6ca
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006e

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                                                    • Size 24KB
                                                                    • SHA256 21ed5a6d8199c3998382883a7f0594e8c7f7943ccae48ef5df6225eafd850c39
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006f

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                                    • Size 29KB
                                                                    • SHA256 d69e5ea67c44e028f296e5e71b2a8efcedb61d09ccb20fc82d5cbbcd3472fd4e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000070

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                                    • Size 27KB
                                                                    • SHA256 4c9cea7b804803a1a27b183e485c684934480e009e0f999f64abc6c26f14af0c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000071

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                                                    • Size 26KB
                                                                    • SHA256 8b271876ebb2cc145871d0daa6f5d9581947e425338e6bc3dbb604e8a808b81c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000072

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                    • Size 27KB
                                                                    • SHA256 ae3f0597ef34719d83d8153ec6a734d18c28098264f903424112be85354e78cb
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000073

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                    • Size 34KB
                                                                    • SHA256 aba5ed6fd88893985f020ed12a2ceaad57fd18e025eadaaed67629626cc2be9d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000075

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                    • Size 188KB
                                                                    • SHA256 57ec06a841703b02d06235059dfb51a67c8b31674109cc1e1de2a0bf6864c6c2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000076

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                                                    • Size 138KB
                                                                    • SHA256 92ce1ee67c1d7e8f7445fd6ecde63c5c75234c31168d8dbe12bc61d41464257f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00007c

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                                                    • Size 73KB
                                                                    • SHA256 2df7eded3b56e07d7001f48d11369f4e5eea8a191604883284fa182c8129a864
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000084

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                    • Size 131KB
                                                                    • SHA256 5195f58344c880e10f132ff7f7d58b5bdae708eefcad07cb18b789984bb25f2e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000085

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                    • Size 17KB
                                                                    • SHA256 75dfd7b4ba9f7b1f8da1553fd46b23b835649f967694051059415359e7493e4e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000086

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                    • Size 89KB
                                                                    • SHA256 0789b3d6f1d6c6205ecea1f9fe58ebffc011d9fd5bd9e809f868c0488a163d19
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000087

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                    • Size 30KB
                                                                    • SHA256 5a7543e7e53b782de577c993e62a6c9b6d2937d1d1e7b9a2ff43f0ba5d12f99a
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00008b

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                    • Size 18KB
                                                                    • SHA256 97722715f92bfef1cccdf80f1dcee232f79e48a4b5612305ca2b864c352f0274
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000091

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                    • Size 117KB
                                                                    • SHA256 b96f1bcfd4484f407691d96a61eb69f08e68c16b4cd1af77edf484af6bb019dc
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                    • Size 6KB
                                                                    • SHA256 f9429e971e5334ab99c12db797b3e99f77af7d97cca134e1f8226049db4f43da
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    c710cddf-68de-44b2-9f92-d71ce6c4b69f.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\c710cddf-68de-44b2-9f92-d71ce6c4b69f.tmp
                                                                    • Size 2B
                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                    • MD5 SHA1 SHA512

                                                                    000003.log

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\000003.log
                                                                    • Size 403KB
                                                                    • SHA256 181c8e4b0b86a7a413ced8ae17d674fb9fe1e05e619a69754c07d291f104d3f1
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    CURRENT

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\CURRENT
                                                                    • Size 16B
                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                    • MD5 SHA1 SHA512

                                                                    LOG

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\LOG
                                                                    • Size 349B
                                                                    • SHA256 9bb758083e048191c1bba1de01d688907f74ad559af9d7d75e9a4776f754e246
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    MANIFEST-000001

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_wetransfer.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                    • Size 23B
                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                    • MD5 SHA1 SHA512

                                                                    1d9cb11b-0d3e-4300-a835-981c9f24cf5c.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1d9cb11b-0d3e-4300-a835-981c9f24cf5c.tmp
                                                                    • Size 2B
                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                    • MD5 SHA1 SHA512

                                                                    7762f06d-a094-4a23-9dd5-227fd73885ee.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7762f06d-a094-4a23-9dd5-227fd73885ee.tmp
                                                                    • Size 10KB
                                                                    • SHA256 ea89f7f3b793a745a0b510a9c81f2214ee3ecf41295b06168693879f0a9278e4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    d7324a20-5396-4c54-ba5a-33ac89b56c57.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d7324a20-5396-4c54-ba5a-33ac89b56c57.tmp
                                                                    • Size 111B
                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    4cb013792b196a35_0

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                                                                    • Size 65KB
                                                                    • SHA256 3e27d383a3efbeb30eec6d14a32e8627f34089ad973b82e10df5d7987c2ec01d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    4cb013792b196a35_1

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                                                                    • Size 111KB
                                                                    • SHA256 ef4242a9cfe33e1e59c2fce2ddd8f7e1b34f0ab080fd09a350c144b5dc4cca63
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                    • Size 96B
                                                                    • SHA256 cd7670b84e9b04747ffa1c15c7bbe82426bb30f2454ef6939b4a7913407fc118
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 48B
                                                                    • SHA256 3aea7aef83714df76f80b80d5942c2b57bcf713e4230bbcf9aa954dfe662ad37
                                                                    • MD5 SHA1 SHA512

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\temp-index
                                                                    • Size 72B
                                                                    • SHA256 edd0be20a137f270b68e3cdb58ba5a175e764060db8dda82877dfe84d3aaaebd
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    sync_diagnostic.log

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                    • Size 4KB
                                                                    • SHA256 322432bdbddcc0e093565ba224d6d54d21c3624c2ff39e3c7f66fdc59e6a76f8
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    a1d0e52d-4e83-4633-83ce-d58bb95bc1ed.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1d0e52d-4e83-4633-83ce-d58bb95bc1ed.tmp
                                                                    • Size 10KB
                                                                    • SHA256 71d864580526b39cff9e15cf3aac050cf6ad93cefad299ad69aca8780fb92f06
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    b015d4f0-b240-45c6-8345-b0d34fe44f5e.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b015d4f0-b240-45c6-8345-b0d34fe44f5e.tmp
                                                                    • Size 6B
                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                    • MD5 SHA1 SHA512

                                                                    0

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\blob_storage\40129740-827b-46f1-bcb3-b7cebd7585e0\0
                                                                    • Size 44.6MB
                                                                    • SHA256 ca900496fb9217c7d74951898c98714c313a64c4a97990ee715048e123edf6b7
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    c0b7c134-9436-46db-9557-d2537df0ae1f.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c0b7c134-9436-46db-9557-d2537df0ae1f.tmp
                                                                    • Size 70KB
                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    1e1b33e4-0bc9-444d-89d1-1dd70ff60ae9.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\1e1b33e4-0bc9-444d-89d1-1dd70ff60ae9.tmp
                                                                    • Size 22KB
                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    RevisitationBloomfilter

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                    • Size 392B
                                                                    • SHA256 9140df52f6e346225c8caff2c45ead7fc434fff2b8c73ce636820c28c9dc67d4
                                                                    • MD5 SHA1 SHA512

                                                                    a6fa7115-dd8e-4e38-b66e-fef698a9387f.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a6fa7115-dd8e-4e38-b66e-fef698a9387f.tmp
                                                                    • Size 18KB
                                                                    • SHA256 abb9f48b1e9ab18084c1af6e9fdf01c80b7482ca326437f7d6888779aacfd666
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    afa22b0b-a94a-491e-a50c-cb9789243d44.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\afa22b0b-a94a-491e-a50c-cb9789243d44.tmp
                                                                    • Size 21KB
                                                                    • SHA256 5c0f0ac8fa38e22a110cc98ae4a7e8de6e849a9414bd16ae6bc18a977a420390
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    b04e9c61-72fa-4d2b-8f27-a24dc0f51e87.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b04e9c61-72fa-4d2b-8f27-a24dc0f51e87.tmp
                                                                    • Size 12KB
                                                                    • SHA256 02bce842ed06ad9d648e8e9f42fc30f94128c2152c1b79d96d497b55a68747e5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    dd58f118-ea6c-4f20-8c10-c9787cad49d3.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\dd58f118-ea6c-4f20-8c10-c9787cad49d3.tmp
                                                                    • Size 392B
                                                                    • SHA256 affe329e4c9040d524531cdb8ee05b80ecf1dc48a2ce87b0f345f0b06cbefbc1
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    e6cfdadf-ac4d-40ea-92c0-0fa42155680d.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e6cfdadf-ac4d-40ea-92c0-0fa42155680d.tmp
                                                                    • Size 8KB
                                                                    • SHA256 a33b18d6f5e7b8306ecd914767649fc51b48fb5f23129caf8b433b916b792d80
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    ea4e4e41-6b4d-4a02-9468-7828d25e0ada.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ea4e4e41-6b4d-4a02-9468-7828d25e0ada.tmp
                                                                    • Size 392B
                                                                    • SHA256 d65e097dbfe634fa6490568ddd0bcf2819cb0238c8daf1626c176264df04afae
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    efef5caf-ac31-4c06-acbb-06e8a6c5127f.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\efef5caf-ac31-4c06-acbb-06e8a6c5127f.tmp
                                                                    • Size 18KB
                                                                    • SHA256 bc4327a28bec22973fa0b534976de4d841ea8d6bdd18c9ee475776859a0c058f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    af09ea7d-7210-4768-ac71-827748e94f26.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\af09ea7d-7210-4768-ac71-827748e94f26.tmp
                                                                    • Size 13B
                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                    • MD5 SHA1 SHA512

                                                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                    • Size 2KB
                                                                    • SHA256 7a8ef47294157eedefc0cbf46414e54d49174e68d380ef5feb99e6ec1853c4e6
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    UNMUTED_Pitch_Deck.html.crdownload

                                                                    • Path C:\Users\Admin\Downloads\UNMUTED_Pitch_Deck.html.crdownload
                                                                    • Size 4.4MB
                                                                    • SHA256 dd236cfa2881712b7e4f46be3d0ab358144adf30aff37c0ba707cf06e2c46cbf
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH