Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    731s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    15/10/2026, 14:18

General

  • Target
    wGaNdf2a8nLrjqVJmM3HYd.html
  • Size 30KB
  • Sample261015-rmgcssxthw
  • SHA256 b90c45403083acce1103beb27e61d8de6777e14afff7100c0998f73752777980
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\wGaNdf2a8nLrjqVJmM3HYd.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1828
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x308,0x7ff8bccac188,0x7ff8bccac194,0x7ff8bccac1a0
      2⤵
        PID:3508
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1988,i,5408052622191980425,5651603547784540614,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1668
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1876,i,8822337430387443651,1949295580548854227,262144 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=2904 /prefetch:2
        2⤵
          PID:2732
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2340,i,2838075537585907127,13832378647446246843,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3144 /prefetch:8
          2⤵
            PID:4216
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3432,i,9561346398924770863,15780325275280881692,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
            2⤵
              PID:5048
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3436,i,5804174918359904291,8733539971256172811,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:1
              2⤵
                PID:1320
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,6315931046578022066,1529755895304606207,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:1
                2⤵
                  PID:3188
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,16300186052479628608,1041049589190443058,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:2
                  2⤵
                    PID:2632
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5052,i,16906229261150227263,10017806042695404426,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5136 /prefetch:1
                    2⤵
                      PID:3924
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5528,i,9905187524641822103,7674053075138514754,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5924 /prefetch:8
                      2⤵
                        PID:2744
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5672,i,13392299790682694320,14754621830243235569,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
                        2⤵
                          PID:2384
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5676,i,9123927892262581245,4492622255710995287,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5604 /prefetch:8
                          2⤵
                            PID:2836
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,9815625970628012679,2143282110442957347,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
                            2⤵
                              PID:4812
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,9815625970628012679,2143282110442957347,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6376 /prefetch:8
                              2⤵
                                PID:4592
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=4136,i,16527097550771207754,6482112313981012182,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:1
                                2⤵
                                  PID:556
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6876,i,4062933057226158926,957817487715286967,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
                                  2⤵
                                    PID:1808
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,5016067883798105968,492278445398398550,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:8
                                    2⤵
                                      PID:2340
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6836,i,8317098688345343992,9896019552192172438,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:8
                                      2⤵
                                        PID:3008
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,4824101275141716606,9134719260016340332,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
                                        2⤵
                                          PID:1888
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6240,i,9207188201649501990,10525744818963162402,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:1
                                          2⤵
                                            PID:2628
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6744,i,1125378990138132786,17376785167471609839,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:8
                                            2⤵
                                              PID:4648
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6972,i,6861218296681326769,8175080350136764300,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4220 /prefetch:1
                                              2⤵
                                                PID:4160
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=2596,i,643542291712277034,1543187920343367363,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
                                                2⤵
                                                  PID:2488
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=6880,i,14623754975238670887,10687527913204640613,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6928 /prefetch:1
                                                  2⤵
                                                    PID:2540
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7476,i,859875016379855893,17205505321703085539,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:1
                                                    2⤵
                                                      PID:4732
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=6908,i,394490102932451002,12422533717464028190,2097152 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
                                                      2⤵
                                                        PID:5172
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7956,i,8526760331424450599,3479753313773058540,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=7888 /prefetch:8
                                                        2⤵
                                                          PID:6040
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5564,i,9342220771381768453,6240565903908500630,262144 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=4712 /prefetch:8
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:5500
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,5970385312177691581,7186699169586469502,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
                                                          2⤵
                                                            PID:5768
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,11137412327509644966,17904792660957483135,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3884 /prefetch:8
                                                            2⤵
                                                              PID:5832
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6596,i,12031833732503590268,2254938028721820433,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=5664 /prefetch:8
                                                              2⤵
                                                                PID:5868
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,674874766190913645,2752695878931907677,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=3020 /prefetch:8
                                                                2⤵
                                                                  PID:2656
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6132,i,17538632282377788713,12827722129206589573,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=8176 /prefetch:8
                                                                  2⤵
                                                                    PID:4488
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3020,i,13243744979494916521,13601720366168659421,524288 --field-trial-handle=2908,i,15841909793432562270,6625789262576341488,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:8
                                                                    2⤵
                                                                      PID:4672
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                    1⤵
                                                                      PID:2372

                                                                    Network

                                                                          MITRE ATT&CK Enterprise v16

                                                                          Replay Monitor

                                                                          Loading Replay Monitor...

                                                                          Downloads

                                                                          0ce1d118-9fcb-4c04-b97f-24b9cfdc87ae.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ce1d118-9fcb-4c04-b97f-24b9cfdc87ae.tmp
                                                                          • Size 392B
                                                                          • SHA256 dd08d132c6fba36a44ef1afa66cf84b527568122486640f2b7e8265217692dcb
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          0d7c9c19-d0fc-4bca-adb6-11b548db1b0d.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0d7c9c19-d0fc-4bca-adb6-11b548db1b0d.tmp
                                                                          • Size 8KB
                                                                          • SHA256 93b48692f164c35613ba9f7538595a94c6e8412dcdfc8d7eb58026131ef335e9
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          37d09943-19e4-4c16-9d19-7f08d5e86c84.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\37d09943-19e4-4c16-9d19-7f08d5e86c84.tmp
                                                                          • Size 392B
                                                                          • SHA256 5b281015a187ce72d743df538cf89a6b073b40ba7bbb196543f03e6bb2dfbbf6
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          3cc6fe74-1389-4682-93d1-4ab3679ac3cc.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3cc6fe74-1389-4682-93d1-4ab3679ac3cc.tmp
                                                                          • Size 8KB
                                                                          • SHA256 a0887820642c275e1c7f1c61fd1d484f7653581d7b18599dd45191abf031ec3e
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          452ab523-eabb-464f-8869-4ccb16d763e5.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\452ab523-eabb-464f-8869-4ccb16d763e5.tmp
                                                                          • Size 18KB
                                                                          • SHA256 f90d1209965a673790d56db9af9aeb91915a602853aee3f095dc6be6679adbe6
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          68b88e21-6e08-4507-9fcf-414f2c8125e0.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\68b88e21-6e08-4507-9fcf-414f2c8125e0.tmp
                                                                          • Size 26KB
                                                                          • SHA256 aef4acf622c30988707e5973e232e6555c1f13d6c73b65e13243333d5d32a700
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          74f4e0fb-9c24-409a-84c9-9bf119bd346f.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\74f4e0fb-9c24-409a-84c9-9bf119bd346f.tmp
                                                                          • Size 105KB
                                                                          • SHA256 36138979757d4e71ef05f08e5474db36d940b11e0e5038b1bc41edf6d9480864
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          settings.dat

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 3d55f2c99b845161db37b100a47911bb408c97298230373b32b80504c093bdac
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          settings.dat

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                          • Size 280B
                                                                          • SHA256 f584a210a80810dcf70390eb86fe52a56c51ec17c3dc5bdad617c5592045fbf3
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          077ecafd-0d4f-4ed3-9f3e-07157dcf38f6.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\077ecafd-0d4f-4ed3-9f3e-07157dcf38f6.tmp
                                                                          • Size 27KB
                                                                          • SHA256 269a314e797f236d647dc30a1b579c6f9ce3b55bef3465deebc83d516ce3a72f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          13a3e9a7-7741-4961-a395-9208edd98ece.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\13a3e9a7-7741-4961-a395-9208edd98ece.tmp
                                                                          • Size 15KB
                                                                          • SHA256 e08cd424d4dd861ed70ed89faadd041ae9ab48ee43648c15ee077e5ca8ed5776
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          18fd88e4-dd9a-46a0-8732-e949fdb957a7.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\18fd88e4-dd9a-46a0-8732-e949fdb957a7.tmp
                                                                          • Size 14KB
                                                                          • SHA256 85866afcf36811bbd9f8122924fc5cf5196b18c3b924ffb0685f9d2f40dd3b13
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          61efafc4-26b0-4df5-93ec-ffe6f541cda8.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\61efafc4-26b0-4df5-93ec-ffe6f541cda8.tmp
                                                                          • Size 70KB
                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          90332cd6-2291-4184-9983-c31c912177c5.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90332cd6-2291-4184-9983-c31c912177c5.tmp
                                                                          • Size 15KB
                                                                          • SHA256 e70eca41956e5929fa006891a63c736b3a89fc4ad413918e91a30b4f9ae943cd
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          LOG.old

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                          • Size 334B
                                                                          • SHA256 b213727162f1d458a64e43dd5b7efb1d932cec524aaf6538b6c5f8149fc0309b
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          LOG.old

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                          • Size 331B
                                                                          • SHA256 9ed7f21ed4b71974b58b354835296fc9de955d1fe79a754bde329f162fe58289
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          LOG.old

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                          • Size 331B
                                                                          • SHA256 de289f3369cd217b3627afa607fadd8cd2f5a04217aced24e2fe669ea625a408
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          f_000080

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                          • Size 34KB
                                                                          • SHA256 4b4f47452f420002647661b492c932a9b4c82dd4585d92570ca38ef6f59f49a2
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000081

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                          • Size 419KB
                                                                          • SHA256 7f4ad807d568efc1b72f059497cc2b257a6e5de7927b11854d8c36336111ea68
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000082

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                          • Size 70KB
                                                                          • SHA256 94883ad5326c0f89665b98c03d81ea166cacbca091953da02a95b40544de9099
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000083

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                          • Size 206KB
                                                                          • SHA256 a5faafb32dc2c3f8cd1573203160a322c73d5edc087ea41a5e590ea40c28b759
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000084

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                          • Size 27KB
                                                                          • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000085

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                          • Size 78KB
                                                                          • SHA256 29c4793a96e142e694842e65d4899d20399817fa4386148be7036d003bb54d94
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000086

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                          • Size 16KB
                                                                          • SHA256 ea74aeb9bbc1fd7d71b911d911108b192c03a4422bc3078ae67ab84d4bea9152
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000087

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                          • Size 17KB
                                                                          • SHA256 974256cc9b1a3cff925ab6340083f2483244dea264c854de8a4cd94f0f5ff7ae
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000088

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                          • Size 57KB
                                                                          • SHA256 7c93cb1e10c47d28da8661c0323da712931ee8c6857a5590b4848920db34ed05
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000089

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                          • Size 47KB
                                                                          • SHA256 8fc00464cf19b3ff8d0839ed6817985abdf6c311dddcfae254156fd3852c492f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00008a

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                          • Size 60KB
                                                                          • SHA256 71b10b9fc91d883eb548ebd3d4d2331ff8f8ca965f7e0eb83a032d568af6a4de
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00008b

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                          • Size 72KB
                                                                          • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00008c

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                          • Size 71KB
                                                                          • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00008d

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                          • Size 512KB
                                                                          • SHA256 3524d8883e4d5781b6215c05f97d1232b442cd41f66cc59723de6c5e19399ba3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00008e

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                          • Size 256KB
                                                                          • SHA256 7cf6db9eed43b81665629edbed64b5a629e86cfaa0bb7bc644721687c5017311
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000090

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                          • Size 256KB
                                                                          • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000091

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                          • Size 512KB
                                                                          • SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000092

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                          • Size 17KB
                                                                          • SHA256 fa7159aaa81b6b616e4e1e729314ee01e515a634f347b8f2c4a945407958558d
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000093

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                          • Size 19KB
                                                                          • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000094

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                          • Size 44KB
                                                                          • SHA256 9c8ff87ceaf0bbbf54761fe3f78944042f21cd888dbf7e800810b14d5eba2580
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000096

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                          • Size 65KB
                                                                          • SHA256 06185bb32a4f6ee3ed36c400703e6d57c23c418efae89e2664ef61f2735ae888
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_000099

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                          • Size 62KB
                                                                          • SHA256 e571fd7aa39475ea5f56825f23ece48b41fc9120d2d8fb23c2819ec9bf33faba
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00009a

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                          • Size 16KB
                                                                          • SHA256 b9bb35d80cff29e24e54888f243141be41cdb1f2d8755cc4bef0ff2b55c9044c
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_00009d

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                          • Size 32KB
                                                                          • SHA256 96b3a31d33c4461ece1a341a6602dc784f086a472e222fc0b4c0bfd49fbc92e9
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a1

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
                                                                          • Size 27KB
                                                                          • SHA256 28512d77c7ad3c09d649ba94ff4ac94047153459a20e89cc9b1ad0e7105c380f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a2

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                          • Size 32KB
                                                                          • SHA256 9db214179703bda3ad07d187c7c60fa06248dadaf95909cd9eab9c1076b2ee32
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a5

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                          • Size 16KB
                                                                          • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a6

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                                                          • Size 26KB
                                                                          • SHA256 685207ca87e90253608d32b84298abb583e715e870c31c96d3601ab9dbfe6a1f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a7

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                          • Size 39KB
                                                                          • SHA256 cbf7daf19b2778e1670b023b476a93f320eb777473f71ea9203fb06f44b16e70
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000a8

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                          • Size 35KB
                                                                          • SHA256 7b25457254f5d29e08c63cc2cdfd7e5a320df85be78c3b694345e45c67080e31
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000ad

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                          • Size 60KB
                                                                          • SHA256 5ab80bb5cf54e09dc76ef46ee449b032119023c6cab72683c0d4414e44ef6a16
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000b0

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                          • Size 16KB
                                                                          • SHA256 d237f87d6adc74cdea6630d818ee82137d7fc99d93571df1858d296d42a2cfcb
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000b1

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                          • Size 22KB
                                                                          • SHA256 059510e915ba69c966e28a1d03a837830a76deac44b69973979f9f904c0745f6
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000b2

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b2
                                                                          • Size 20KB
                                                                          • SHA256 65fd7a46faaad39f3604e01ae2bf672f26cb0e7175056c4e486c06bcf1fd47a8
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000b4

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                          • Size 16KB
                                                                          • SHA256 794b1f72c8a29cd8b578d6c8f5fb15d05cca762bcb740ebe1c0ae3f77382d716
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000ba

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                                                          • Size 36KB
                                                                          • SHA256 9c3c2c99cfc3d21b0787ae3fdf1acdcfa6cce868799992fbdbb2202f9f7f1218
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000bd

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                                                          • Size 37KB
                                                                          • SHA256 c89c73b2229aabc8854d05db0dc9b225f9c89bb940249d69724e9d75feaa2e31
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000c6

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                          • Size 72KB
                                                                          • SHA256 88fa76f644c1423795b4c939d7854f6bf05370fbe2254e9cb483ce3dc8743b6a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000c7

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                                                          • Size 68KB
                                                                          • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000c8

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                                                          • Size 60KB
                                                                          • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000c9

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                          • Size 19KB
                                                                          • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000ca

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                                                          • Size 65KB
                                                                          • SHA256 f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000cb

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                          • Size 45KB
                                                                          • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000cd

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                          • Size 29KB
                                                                          • SHA256 db56f22d5aedaea1c670fee02b9801d5e18daab2fd59a43a7d5da0225644c3c9
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000ce

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                          • Size 19KB
                                                                          • SHA256 65004c4fcc1eff4ed8eae995bb6c5d30b54dc7fe9b2cf388c76a25ef68e76f6c
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000f0

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f0
                                                                          • Size 24KB
                                                                          • SHA256 f48ce507789215087358bb4b75f8c39cc0311ac6d561b183337ec649d21163ab
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000f4

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4
                                                                          • Size 36KB
                                                                          • SHA256 ca433d8876d8da0e8e932690e5d999b2472420791d4b77e1e069357f0ffac1c5
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000f5

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f5
                                                                          • Size 73KB
                                                                          • SHA256 eaa364e5c0cad33d042b6c8e429c77f940fccc6fbad199b489d7dd7ecb061732
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          f_0000f6

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f6
                                                                          • Size 31KB
                                                                          • SHA256 26be9377d8ff2ed8a0b5e11894f4e6c1b5ca640efe4a6c531d3825d5adb86351
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                          • Size 9KB
                                                                          • SHA256 5b809c5b02c7460ae2c25861bc8b7f03761f83ec712c7a212221db117206b5fb
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                          • Size 3KB
                                                                          • SHA256 9cfe1abb431c1e004a93722f789810a769894aad5d33ab9a73927c544a4dc3d3
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                          • Size 3KB
                                                                          • SHA256 b431ed66603ac4b470067903d040038c9070ff677034aa2203fd6420567d5963
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          e157da66-3ae2-42ce-8e18-c8da42020b02.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\e157da66-3ae2-42ce-8e18-c8da42020b02.tmp
                                                                          • Size 2B
                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                          • MD5 SHA1 SHA512

                                                                          1057603a-358d-40c9-b876-3391fc514b3f.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1057603a-358d-40c9-b876-3391fc514b3f.tmp
                                                                          • Size 10KB
                                                                          • SHA256 3e0392b20d30b2ed80177312d86b19d734c16d504a85f7de7b6085c25a331427
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          13238405-cff8-4239-87a9-721c20f79bfc.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\13238405-cff8-4239-87a9-721c20f79bfc.tmp
                                                                          • Size 8KB
                                                                          • SHA256 3c0194e0ab50630a85f26c259c67d6a810764742b0363b5fd2a9ed9e1cd3a55a
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          3c41c5b5-c497-4a88-b5b1-26a9fd9390f5.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3c41c5b5-c497-4a88-b5b1-26a9fd9390f5.tmp
                                                                          • Size 2B
                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                          • MD5 SHA1 SHA512

                                                                          58b9f0b5-0942-4fd0-8ab1-d12b51732894.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\58b9f0b5-0942-4fd0-8ab1-d12b51732894.tmp
                                                                          • Size 211B
                                                                          • SHA256 a176531c54167f6e0255c9aa465111e3a9707ee9a59dccada3bbcd5ed78bf473
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          Sdch Dictionaries

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                          • Size 40B
                                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                          • MD5 SHA1 SHA512

                                                                          c649cc40-9f2f-4310-8a27-9a7674495160.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c649cc40-9f2f-4310-8a27-9a7674495160.tmp
                                                                          • Size 111B
                                                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          Preferences

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                          • Size 9KB
                                                                          • SHA256 0a8e5ccc41bb9486760a7390020eaa82ca227add889765eaef970c8a614630e9
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3a160100-e3b0-4c0d-98f6-4c7053893b3c\index-dir\temp-index
                                                                          • Size 72B
                                                                          • SHA256 01dd387b922adc5cc8d3dfa4d15cff7398fa32cfa345d9afc9ff94f315a01c0c
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\3a160100-e3b0-4c0d-98f6-4c7053893b3c\index-dir\the-real-index
                                                                          • Size 48B
                                                                          • SHA256 3b375a13bc1d9b1139a845f7fc870129bc505e5a07c236b6990acfe8ce585cf3
                                                                          • MD5 SHA1 SHA512

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5947b5f5-aa40-4b5b-9073-87b9c3760be0\index-dir\temp-index
                                                                          • Size 3KB
                                                                          • SHA256 06ff03d9e2d1971e154c168833d0cd3eb43c9d6aa0818b58f2433cadf526b685
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5947b5f5-aa40-4b5b-9073-87b9c3760be0\index-dir\temp-index
                                                                          • Size 1KB
                                                                          • SHA256 94afc8b41e6e5cce34c6111518f516e2ef95cdd0600bd5582e9d2aa00745d84c
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5947b5f5-aa40-4b5b-9073-87b9c3760be0\index-dir\the-real-index
                                                                          • Size 1KB
                                                                          • SHA256 6905b25a97fbfce6bee0020ccbebb34da9fb8989df74118da89fdf155b57a2ca
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9688a32b-d7ad-4080-94eb-34a7b5c43506\index-dir\temp-index
                                                                          • Size 72B
                                                                          • SHA256 8a984b54ea317d32d0cbee49b0cc64447fd13263de890020bfa79169559cf1a6
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e2563dce-89cd-48b6-ab26-6ca57d7714b2\index-dir\temp-index
                                                                          • Size 96B
                                                                          • SHA256 21a6477e943f292092e31d0463002ec2c31f54d9a1295b7e4acc3cc57ef32314
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e2563dce-89cd-48b6-ab26-6ca57d7714b2\index-dir\the-real-index
                                                                          • Size 48B
                                                                          • SHA256 713a4fad7f70fd9dc59aae8b5125222047e97e7517494eda6d466e9f704fd9bf
                                                                          • MD5 SHA1 SHA512

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef672a13-cbcc-4a93-bd26-cdd479f780c5\index-dir\temp-index
                                                                          • Size 72B
                                                                          • SHA256 1424f364415d1148da45916c4ad28ffa17b1ae8c50a707fa8c2ade382729b109
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef672a13-cbcc-4a93-bd26-cdd479f780c5\index-dir\the-real-index
                                                                          • Size 72B
                                                                          • SHA256 b5b31533e41e542798832f2eaa5605164c943fd3ab961a0be33a39f0ac2f160e
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          todelete_623cd082b6202da0_0_1

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ef672a13-cbcc-4a93-bd26-cdd479f780c5\todelete_623cd082b6202da0_0_1
                                                                          • Size 81KB
                                                                          • SHA256 7049fa1e4b6ffeabd5ef016cb0e04a883608cfe79c502ab6394d8b2ad6f87869
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          index.txt.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                          • Size 519B
                                                                          • SHA256 cbfbef2723f787b9ef8edfb704e161511d57cecc0ee27709a08316811795da54
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          index.txt.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                          • Size 624B
                                                                          • SHA256 d4a5abb870bffb95edd70ad99d9d9bb516a1321d5fe9c886f3d00b7f1c8aebe1
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          index.txt.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                          • Size 619B
                                                                          • SHA256 635eba82bce213c7d76411cc50168d28bf2893a4febba697e66f470bfff6b354
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          temp-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                          • Size 72B
                                                                          • SHA256 7f6b520aa5ef061a5cad4629579ebaf6c761d8a96a65bf5f8763a6a311f88699
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          the-real-index

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                          • Size 48B
                                                                          • SHA256 7e5ffd52d7a5263589b9b90d990884c3b2d0e29178fc3e228b93d2c62d0aaa1b
                                                                          • MD5 SHA1 SHA512

                                                                          sync_diagnostic.log

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                          • Size 4KB
                                                                          • SHA256 28d736679436970bdfdbe5fcb3d454e56a913aa195aedb86e8f662d552c154e3
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          aa9b2f4d-0a84-46a9-93e9-08dfd4a7502d.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\aa9b2f4d-0a84-46a9-93e9-08dfd4a7502d.tmp
                                                                          • Size 30KB
                                                                          • SHA256 452655129d041362ca6c0cc9f7f7d5644443abb39fae4910e9fcbd0115c27528
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          b9966973-08db-4c4b-a5f6-d32d7baa52fc.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9966973-08db-4c4b-a5f6-d32d7baa52fc.tmp
                                                                          • Size 6B
                                                                          • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                          • MD5 SHA1 SHA512

                                                                          cb5cb5b6-9d99-47e0-bc5f-efccd10604b8.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb5cb5b6-9d99-47e0-bc5f-efccd10604b8.tmp
                                                                          • Size 9KB
                                                                          • SHA256 d80067bfd6759cb7143447afc28278478439fc0aefe7e6b4de52b14896325eb7
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          4e3f93dd-102f-41ca-827a-ea79d8717313.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4e3f93dd-102f-41ca-827a-ea79d8717313.tmp
                                                                          • Size 22KB
                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          OperationConfig

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                          • Size 3KB
                                                                          • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          RevisitationBloomfilter

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                          • Size 392B
                                                                          • SHA256 35e511178b684767ec2b677c51f07589e658e274b168eba8237034d67aadfab9
                                                                          • MD5 SHA1 SHA512

                                                                          c5d6ed02-bfff-416d-8839-4cf22c9a8b2b.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c5d6ed02-bfff-416d-8839-4cf22c9a8b2b.tmp
                                                                          • Size 392B
                                                                          • SHA256 08a8c53315fafa8c5b20e3fe750bf2dbdb239a646eb7b401450976c10ed41e92
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          ce2b7265-311b-4bd8-87d2-206178547748.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ce2b7265-311b-4bd8-87d2-206178547748.tmp
                                                                          • Size 392B
                                                                          • SHA256 594423e80fca9b492d0dad1b6271268fa765276738024b75b431bf519ab9faff
                                                                          • MD5 SHA1 SHA512 TLSH

                                                                          d5dc6894-0f59-4a45-a481-04b7c450370e.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5dc6894-0f59-4a45-a481-04b7c450370e.tmp
                                                                          • Size 18KB
                                                                          • SHA256 45982dea15bf650d8ab5188b13049a0b079ff56d3ab21533ccd9b2fd649f3363
                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                          a4c81a8b-efaf-4d90-b3a2-eaa69f5dc22a.tmp

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a4c81a8b-efaf-4d90-b3a2-eaa69f5dc22a.tmp
                                                                          • Size 13B
                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                          • MD5 SHA1 SHA512

                                                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                          • Size 2KB
                                                                          • SHA256 c6187c9a8b467877b2805ff2f8e50b1fff5b62fce3b8e1181e7093e883021c4b
                                                                          • MD5 SHA1 SHA512 TLSH