Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/10/2026, 10:34

General

  • Target
    http://xkwrk.mjt.lu/lnk/AW8AAKmJdgMAAAAAAAAAA_807KoAAAABCBsAAAAAABVvZABq1rq9_oJHnU97SXicHWsSWkJUmgAVM2Q/1/g_shCdK-KVzT-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
  • Sample261020-ml8nfacv8p
Score
7/10

Malware Config

Signatures

  • A potential corporate email address has been identified in the URL 1 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 60 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://xkwrk.mjt.lu/lnk/AW8AAKmJdgMAAAAAAAAAA_807KoAAAABCBsAAAAAABVvZABq1rq9_oJHnU97SXicHWsSWkJUmgAVM2Q/1/g_shCdK-KVzT-TemU46nJQ/aHR0cHM6Ly9zZWN1cmUtd2ViLmNpc2NvLmNvbS8xbHlNTUdrRVFjVUtCVnZuajZEVkR2a1Z2ZkcxTVpmSmhMU2dQRjROdnRoZGl2YzRHOS16ajA5SFVmeW1LdXBTVTFTNnN6azUySlJVdEpjUzRyRm9vR2xaeTh1bnVTd2FPaHhkZC00bjFObGg4UzZ2TklVOGxobnZQTkNyZV8yN3Jyd2dHMlpkTmdrTHV3SFhRWlFTWTlmYzMwemJIT0pLckpjajdsUnV6V2syYmdzcnh6XzMydm4wTzJzUnh0NmNDRUtwMzhmeW5yMGlTVzc1akNaRFpFNVpuQTctMnJrOWktMEJDSEN6MjN1VDEzNUJDVlJ3M29RNHdrOUZYbk1DRXRWc29PVUI3QkVNY3pwOGNkMUlYbEZLalJLMS11eW9TeVdjX0xRUG5CRnhRNnJVOXYzZ3pBdlpZTmsyY3ptRGwvaHR0cHMlM0ElMkYlMkZnZXN0YWd1YWNvbnN1bHRvcmlhLmNvbS5iciUyRmZvbmVzJTJGMjMzOTIxMzk5Mg
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3164
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffe7284c188,0x7ffe7284c194,0x7ffe7284c1a0
      2⤵
        PID:4680
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1884,i,9065334470382070558,12331331411897694021,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:3
        2⤵
        • A potential corporate email address has been identified in the URL
        • System Time Discovery
        PID:3348
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1796,i,6092603636348104363,10847886977846875013,262144 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
        2⤵
          PID:3316
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2540,i,1366197616781369954,11674749042880788009,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=3180 /prefetch:8
          2⤵
            PID:2576
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,3101354452153750307,16816633849152202219,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
            2⤵
              PID:1848
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3488,i,8531782776140023446,13894067534354004551,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
              2⤵
                PID:2740
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,3016541622580816040,16370009970645074495,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
                2⤵
                  PID:3864
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4308,i,9521708885708523372,6244410485749311943,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:2
                  2⤵
                    PID:3860
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5260,i,4685024298288320267,1905328699094002138,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=3760 /prefetch:8
                    2⤵
                      PID:1264
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,14860037405403702567,14637424415706004626,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
                      2⤵
                        PID:4000
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,6218317128252177096,2704933024904800955,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
                        2⤵
                          PID:5004
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,6218317128252177096,2704933024904800955,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=5836 /prefetch:8
                          2⤵
                            PID:4236
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6200,i,17663293367344131802,12710810807997028998,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:1
                            2⤵
                              PID:2428
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=3540,i,11253182510004521848,6935817236031738472,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
                              2⤵
                                PID:1856
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5040,i,1983849238407948670,5995749618923619673,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:1
                                2⤵
                                  PID:228
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6604,i,7339369834434829426,14712619798639847678,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:8
                                  2⤵
                                    PID:1900
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6704,i,7666718049261407679,10766017227213604385,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:1
                                    2⤵
                                      PID:4644
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6860,i,1639315919527248886,10187096203021050364,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=4744 /prefetch:1
                                      2⤵
                                        PID:4652
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=560,i,11296083008422258210,17098063984599268641,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
                                        2⤵
                                          PID:3280
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6704,i,15131475669747403160,6787893294514149198,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:8
                                          2⤵
                                            PID:1456
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,3221824639747204152,8217756306748406979,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6632 /prefetch:8
                                            2⤵
                                              PID:4196
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6864,i,1824448827586602978,994116209977863104,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:1
                                              2⤵
                                                PID:1616
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5836,i,15994569483123360563,14794190199204257092,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
                                                2⤵
                                                  PID:2368
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7132,i,17318895170236435098,997715511730434586,2097152 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
                                                  2⤵
                                                    PID:5348
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7344,i,8419964216410624081,7119170533457756734,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:8
                                                    2⤵
                                                      PID:5560
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7632,i,14446344347702897156,7438353792079594898,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=7788 /prefetch:8
                                                      2⤵
                                                        PID:3864
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7316,i,16979901941024391529,3875477700818461960,524288 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:8
                                                        2⤵
                                                          PID:5868
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6176,i,2320776253558896201,7103454384180512130,262144 --field-trial-handle=2384,i,2221674433280969066,10306475827953781068,262144 --variations-seed-version --mojo-platform-channel-handle=5688 /prefetch:8
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:4196
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                        1⤵
                                                          PID:5060

                                                        Network

                                                              MITRE ATT&CK Enterprise v16

                                                              Replay Monitor

                                                              Loading Replay Monitor...

                                                              Downloads

                                                              1cca2522-4c6f-4b8c-8e8d-3b07d27f42e5.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1cca2522-4c6f-4b8c-8e8d-3b07d27f42e5.tmp
                                                              • Size 392B
                                                              • SHA256 039a13cfaa7d21e282a050a960a717b02adb632560b99c2179c51e8800c3798b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              380de108-a26e-42d6-a3e8-72ef6cdf2055.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\380de108-a26e-42d6-a3e8-72ef6cdf2055.tmp
                                                              • Size 8KB
                                                              • SHA256 eba88e1744c25b1df8f07bb688a27b525d961210e40a3a652f457682ad4ee0a6
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              3c2fff01-85f1-46aa-b6be-9fc2d429b9c2.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3c2fff01-85f1-46aa-b6be-9fc2d429b9c2.tmp
                                                              • Size 392B
                                                              • SHA256 f80304e27894498fef9ef8b59706e99dd1467f03e2bff63e1aaadd9e42483b9f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              83746f82-b9dc-4112-8505-a181fb166f4d.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\83746f82-b9dc-4112-8505-a181fb166f4d.tmp
                                                              • Size 18KB
                                                              • SHA256 5f0dbb434a6ffc86dd7800a26781a8351022a5bc33ffbb0015fad8371a20db0a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              settings.dat

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              • Size 280B
                                                              • SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              settings.dat

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                              • Size 280B
                                                              • SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
                                                              • MD5 SHA1 SHA512 TLSH

                                                              190d90bf-39b3-4b9b-b91a-879415f2ee1a.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\190d90bf-39b3-4b9b-b91a-879415f2ee1a.tmp
                                                              • Size 27KB
                                                              • SHA256 3676297a77804a38d2b42985d590399a4516bf346456b0348f1501f0bb744920
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              2e37cc59-c15f-4ad8-8007-0d9c314a08f3.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2e37cc59-c15f-4ad8-8007-0d9c314a08f3.tmp
                                                              • Size 70KB
                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              4459234f-6e13-46ae-82ff-6dce573d11b1.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4459234f-6e13-46ae-82ff-6dce573d11b1.tmp
                                                              • Size 16KB
                                                              • SHA256 409534168eb81f26e47d41034d21820607b5610b3680a43343b795adc3cbf274
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              5f95853b-fee6-4665-9bb8-9a706a9f01bd.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f95853b-fee6-4665-9bb8-9a706a9f01bd.tmp
                                                              • Size 13KB
                                                              • SHA256 e9971d6527d8fcc8a8d08628cd8a85bbc0cddecf63067f894526e0d2240ef05a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              85431730-3d06-4631-b3e0-0c1df4586c86.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85431730-3d06-4631-b3e0-0c1df4586c86.tmp
                                                              • Size 10KB
                                                              • SHA256 981f1b716dfa611df475bcd0b44330bc3b7ce649fc3ea869c5df80ec16573b92
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              LOG.old

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                              • Size 331B
                                                              • SHA256 b456bc000ec9512223d13d2e2e9623743d3ad2b39d4f9bb9d07e516b0256a8b2
                                                              • MD5 SHA1 SHA512 TLSH

                                                              f_000067

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                              • Size 19KB
                                                              • SHA256 82aa6412f3dcb1f438c34f142c16e8b3678054cdc5439e47cf53bbd802c527b9
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000091

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                              • Size 420KB
                                                              • SHA256 6315e24b0ee950a8f1b22b17b717d638bddc5f1e46256cbedf88aa05b6ebd249
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000092

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                              • Size 70KB
                                                              • SHA256 e4bc97e59a7413e8a5b61603df0b4611654e61c4b71767c650ed7634d1568b6e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000093

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                              • Size 206KB
                                                              • SHA256 b181b6096ff818d0239a8388c2dcefb49d6ebe1911b30c59c51bcfbf77d0b30c
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000094

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                              • Size 27KB
                                                              • SHA256 d8f492a3b2b440f99b99ca20aa208419a2ff3434fa08992e7a5ccd4f90fe09f7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000095

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                              • Size 78KB
                                                              • SHA256 f5aa1b72319c1cf56b314472bef48e00dafcdfb37422229b715a3f18a0011126
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000096

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                              • Size 128KB
                                                              • SHA256 711ef54e187b69822b2501eeb0f846e51a9a2d9bf9baba98314e10e38561f265
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000097

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                              • Size 16KB
                                                              • SHA256 ea74aeb9bbc1fd7d71b911d911108b192c03a4422bc3078ae67ab84d4bea9152
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000098

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                              • Size 71KB
                                                              • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_000099

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                              • Size 17KB
                                                              • SHA256 974256cc9b1a3cff925ab6340083f2483244dea264c854de8a4cd94f0f5ff7ae
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009a

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                              • Size 57KB
                                                              • SHA256 7c93cb1e10c47d28da8661c0323da712931ee8c6857a5590b4848920db34ed05
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009b

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                              • Size 60KB
                                                              • SHA256 9c7cf62588cfa05d6022b80cd2a4e8c9e819610ff8f6764ef9774e16bd7b01e2
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009c

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                              • Size 48KB
                                                              • SHA256 84b9d2e0f72add702cdc103e3ac7b3113cc5f7f250f32fbb0c332d094922f8b7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009d

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                              • Size 72KB
                                                              • SHA256 fcfaf2e8e1a5d8cff6e2c7736a10a6a3faf27d4696d5d4bf1e2d34cf3512b5e0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009e

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                              • Size 256KB
                                                              • SHA256 542ac655cca6f4835f0752937b8144fa3620dfec1b42b5277470217010a621c0
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_00009f

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                              • Size 512KB
                                                              • SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a0

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                              • Size 256KB
                                                              • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a3

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                              • Size 17KB
                                                              • SHA256 fa7159aaa81b6b616e4e1e729314ee01e515a634f347b8f2c4a945407958558d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a4

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                              • Size 19KB
                                                              • SHA256 c64c67529ad8eb12e8dbaf84ed7b0e6b54083fff315147771a92f7eb2d3ffdad
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a6

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                                              • Size 22KB
                                                              • SHA256 a0e3fc9625b54d88973555b7232f78a8ba80ee59d1ec767461c8f124e3192a14
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000a9

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                                              • Size 31KB
                                                              • SHA256 3ef80f1bb1c5dacc3721f2ce3113608504685f62a704c752bf1ccee3c0b3d507
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000ab

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                                              • Size 34KB
                                                              • SHA256 23cfbe4049c9cae151be8557210d960fefa77d912d8be9bcacbe8e984ad56617
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000ad

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                              • Size 44KB
                                                              • SHA256 bd60f003bd2a584eb53e727771bcc900ec2c2a039694fe5d39f51a1b53b18f3b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000af

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                              • Size 16KB
                                                              • SHA256 8463ed535eccb85e24c0d668a6055b3148777528304e8c9f8d510be0628c0467
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000b1

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                              • Size 32KB
                                                              • SHA256 e0ee4b69b18a8de007791fb91b07f8caa3e9c1569bc7301545e05eb78f33d75e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000b3

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                                              • Size 39KB
                                                              • SHA256 52b5c75037d48de74ed740123e3413e8cd1253d3cd1d1493ffbe2d32cd287ab8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000b5

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b5
                                                              • Size 47KB
                                                              • SHA256 5b093977a69f43431782f97e1d774f14d949a80b8236ad92c25f574cbb1a6bde
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000b6

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                              • Size 48KB
                                                              • SHA256 820bbf52f2177dbf47c34ee21a0943cbbfef163be8fb18171b1228eca3499e4e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000b7

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                                              • Size 33KB
                                                              • SHA256 f5afd8be088fca7f8ceb7710ce30b619db645eff5fddacb7f16202f9f1a15bc8
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000bb

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bb
                                                              • Size 83KB
                                                              • SHA256 0665ad8725a61013d881327b4a0cb191d613effbf9a698bb6f51089265db7dea
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000be

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                                              • Size 17KB
                                                              • SHA256 8c4a43a7349696d083123ec643b4b8e793d1441c03642cd82d9b692a8aa8af2d
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000c0

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                                              • Size 21KB
                                                              • SHA256 ad03eb821a19a7bc47e56740f3cdcc552f917e46cd22e2287dfb703765b65be4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000c1

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                                              • Size 22KB
                                                              • SHA256 371d09815018890af3e2bbc07ec7fe7fc86a8b34d4935df68a66ce7d08c022bc
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000c2

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                              • Size 40KB
                                                              • SHA256 a9022094ef7ad8c8cb8773eecfda122a536e5d3b76aea543ea6e446bc3cab67e
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000cc

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                              • Size 60KB
                                                              • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000cd

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                              • Size 68KB
                                                              • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000ce

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                              • Size 19KB
                                                              • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000cf

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                              • Size 63KB
                                                              • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000d0

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                              • Size 45KB
                                                              • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              f_0000e3

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e3
                                                              • Size 346KB
                                                              • SHA256 12d9d79dfebc7af3bc8f51865b297aae3799b2fa2ce9d188b5741e85350062ff
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                              • Size 7KB
                                                              • SHA256 6d70f52a080e848319202221967a13033189ee3e9c432d8683411e15998d27e5
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                              • Size 3KB
                                                              • SHA256 62343e5cb292acc55e7ee83c19be56924fe8d78b7cb87a2d05b99fc8b318d7b3
                                                              • MD5 SHA1 SHA512 TLSH

                                                              cb7f72d3-44ba-453c-b8e9-28b0c321a9f5.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\cb7f72d3-44ba-453c-b8e9-28b0c321a9f5.tmp
                                                              • Size 2B
                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                              • MD5 SHA1 SHA512

                                                              LOG

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                              • Size 383B
                                                              • SHA256 9ae1fbd6096746bda554804a2caf9c6ca2773438348a38da1a9393aa839f26f0
                                                              • MD5 SHA1 SHA512 TLSH

                                                              80970644-7258-4a47-9fb4-f31dc561cb30.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\80970644-7258-4a47-9fb4-f31dc561cb30.tmp
                                                              • Size 2B
                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                              • MD5 SHA1 SHA512

                                                              8aa4e013-2e19-41a8-b9ed-16c246263d07.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8aa4e013-2e19-41a8-b9ed-16c246263d07.tmp
                                                              • Size 211B
                                                              • SHA256 2c041016f6d044f4451a434c3210b4f45a19dd4c6d08e6025660957c192cdabd
                                                              • MD5 SHA1 SHA512 TLSH

                                                              9d23945f-1e22-40dc-b5f2-489d389cb492.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d23945f-1e22-40dc-b5f2-489d389cb492.tmp
                                                              • Size 11KB
                                                              • SHA256 97ecdec82bfad4dc060952679468a8ca904c1fd50edbfd292d0912190da8e709
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              Sdch Dictionaries

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                              • Size 40B
                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                              • MD5 SHA1 SHA512

                                                              c4c876dc-f39b-469d-8f38-e52da4795dc3.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c4c876dc-f39b-469d-8f38-e52da4795dc3.tmp
                                                              • Size 111B
                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\11a91adc-312b-46fa-ac01-3d9968a3eef4\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 70cd9c0e7639f7767282c6f57b7377fa21c4caa844fb74d90690b87f146431be
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\275b49c0-4124-495f-9d57-453c06a1ad74\index-dir\temp-index
                                                              • Size 96B
                                                              • SHA256 ef187403d9a57d7d449cee5fcabf696ba0c3f81ac2776f11f3165f7b6b32ed28
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\275b49c0-4124-495f-9d57-453c06a1ad74\index-dir\the-real-index
                                                              • Size 48B
                                                              • SHA256 90daad1d34cd74375c6e050e22a8a076797afa34dced8f6dec34edddb941c53d
                                                              • MD5 SHA1 SHA512

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a0ad452-2bb0-48a8-878b-7cdcc62d17f8\index-dir\temp-index
                                                              • Size 768B
                                                              • SHA256 63b14036090834e54eb4f654205de97fccefc4d0a33a320259d7c1c6f02e7d2b
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a0ad452-2bb0-48a8-878b-7cdcc62d17f8\index-dir\temp-index
                                                              • Size 3KB
                                                              • SHA256 8aae4555e5f4bf3fe94af4437b846999bdcb7e8025e386f5e63bee76e241cd94
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4a0ad452-2bb0-48a8-878b-7cdcc62d17f8\index-dir\the-real-index
                                                              • Size 768B
                                                              • SHA256 afcfd33c16f7f5a1dc52b4ca9971c6db7131c7cbdfa0a926e70c9742acc85160
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5711f3dd-8c06-445d-a7e9-f5b13be2839a\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 c8fa17ab69e1b7a9fc7e3524e2c61d1c978e116fb6aa3e0d20ef6490bff91e8a
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5711f3dd-8c06-445d-a7e9-f5b13be2839a\index-dir\the-real-index
                                                              • Size 48B
                                                              • SHA256 d2485d7fe2a3e48a849e6d4e62464d83b2f21f39b1c19ce42e864cec1a635df1
                                                              • MD5 SHA1 SHA512

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\715ee119-f60d-4578-96fa-55e8d24313f7\index-dir\temp-index
                                                              • Size 72B
                                                              • SHA256 823d2814b874ab416e0c232cb2371008eeacf54ae8036b74eedca0b9cbd0b9e8
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\715ee119-f60d-4578-96fa-55e8d24313f7\index-dir\the-real-index
                                                              • Size 72B
                                                              • SHA256 8366426225db297bf122b819d48aff2b020084d034ae7003ef5acc1ebe154bae
                                                              • MD5 SHA1 SHA512 TLSH

                                                              index.txt

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                              • Size 619B
                                                              • SHA256 fe32dd107e1ef73c1b675d244e68353f4fa5b78b562097172a394cd469bf04f1
                                                              • MD5 SHA1 SHA512 TLSH

                                                              index.txt.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                              • Size 519B
                                                              • SHA256 a5e5e1a1d87c09815ee7ccf763ee6e6265cd8acdb24132df3ba267ecc6eb4ea7
                                                              • MD5 SHA1 SHA512 TLSH

                                                              index.txt.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                              • Size 624B
                                                              • SHA256 8e409eb91d06f410615075cb4fc8c30d57573fa98ad3d2f030266d8b848ad2c3
                                                              • MD5 SHA1 SHA512 TLSH

                                                              temp-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                              • Size 96B
                                                              • SHA256 2f2866e333e5a97d2f672ab0eabb80fdb3bd29f99338fea502af022c1c72e000
                                                              • MD5 SHA1 SHA512 TLSH

                                                              the-real-index

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                              • Size 48B
                                                              • SHA256 e5a46ac5e0bf4c07c05ef49d1ab451d41347dc779c205f926843048dea7e7953
                                                              • MD5 SHA1 SHA512

                                                              be7ef30c-2940-42c5-be6e-f03670b9cd58.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be7ef30c-2940-42c5-be6e-f03670b9cd58.tmp
                                                              • Size 16KB
                                                              • SHA256 c685970c03951720f6a6fdff7fe7aecde96a2025c224434564bded23dd6887f7
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              4ade1e8b-f100-4cd7-be96-1a33874f75ba.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\4ade1e8b-f100-4cd7-be96-1a33874f75ba.tmp
                                                              • Size 22KB
                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              OperationConfig

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                              • Size 3KB
                                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                              • MD5 SHA1 SHA512 TLSH

                                                              RevisitationBloomfilter

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                              • Size 392B
                                                              • SHA256 b2e48bd3ffcacbf8572a1b1f413f1a42711f5a687d2e74532c1dce80a484675a
                                                              • MD5 SHA1 SHA512

                                                              c1975ef7-5924-4563-9bf2-e757e587160a.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c1975ef7-5924-4563-9bf2-e757e587160a.tmp
                                                              • Size 18KB
                                                              • SHA256 3077c24c0911476c5139e8c093535c827beee1c67a4daf68d7b509f934d55adf
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              cfd73fd9-82a4-44e7-af39-5b50743aa807.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cfd73fd9-82a4-44e7-af39-5b50743aa807.tmp
                                                              • Size 26KB
                                                              • SHA256 04d279eb39b74c28f9f20b71d3108ce174c4f84715199192193358e11506665a
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              3b790328-48d7-4172-9b16-e2595e9b33fb.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3b790328-48d7-4172-9b16-e2595e9b33fb.tmp
                                                              • Size 13B
                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                              • MD5 SHA1 SHA512

                                                              f07954b4-8c30-488f-a537-05c05ef083b2.tmp

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f07954b4-8c30-488f-a537-05c05ef083b2.tmp
                                                              • Size 8KB
                                                              • SHA256 3f64b07e1a9c7995676eccb60295d631f53e00d88078e8aa36cc8d5c61a61e36
                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                              • Size 2KB
                                                              • SHA256 0953c7580114bb84b431db5a0d9ca1bc8d05b7c7c37bcfb2eb7d1e5a6b680879
                                                              • MD5 SHA1 SHA512 TLSH