Resubmissions

22/10/2026, 16:06

261022-tkglwssscx3

22/10/2026, 16:02

261022-tgvz4sag233

Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    22/10/2026, 16:06

General

  • Target
    sample.html
  • Size 293KB
  • Sample261022-tkglwssscx
  • SHA256 56c0da8119832a65b8d3576eea81fbfbabda1029b0fdba2624eaef0bd216f6bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2708
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffa1b0ec188,0x7ffa1b0ec194,0x7ffa1b0ec1a0
      2⤵
        PID:1908
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,1285294429419185049,14444738000209435415,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
        2⤵
        • System Time Discovery
        PID:5080
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1884,i,14340674449502406232,2395218773232569081,262144 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
        2⤵
          PID:4680
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,1489545061775138778,5888673734905366395,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:8
          2⤵
            PID:3336
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,17348917502101314022,9998028138472955523,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
            2⤵
              PID:3828
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,2329805971981692496,18330157901636490310,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
              2⤵
                PID:4896
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=3964,i,14987591707467605567,4949300647271736787,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=4092 /prefetch:1
                2⤵
                  PID:3992
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4104,i,10062303188410909595,10940755011879791088,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=4216 /prefetch:2
                  2⤵
                    PID:1252
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=3580,i,2368189632638322128,15684192798734798664,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                    2⤵
                      PID:4048
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5164,i,3066054545779042951,7096866544563043054,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:1
                      2⤵
                        PID:4104
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5328,i,1362594733847502072,10252805927558201626,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
                        2⤵
                          PID:4568
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,8192487444522461084,7525336443993195386,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5424 /prefetch:8
                          2⤵
                            PID:4744
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5816,i,286546448230519535,9440348573305901110,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5824 /prefetch:1
                            2⤵
                              PID:1176
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6140,i,3338264418988040629,16412853209618755940,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:1
                              2⤵
                                PID:4604
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,5316631564936718934,10114060045103271412,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                2⤵
                                  PID:4528
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5792,i,5316631564936718934,10114060045103271412,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                  2⤵
                                    PID:4368
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6876,i,15677748601875339874,5201275910570871550,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:1
                                    2⤵
                                      PID:1636
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=3500,i,17515169515578979247,14452770920574373960,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
                                      2⤵
                                        PID:3700
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6284,i,10042466719090334933,8442268787104510507,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:1
                                        2⤵
                                          PID:2192
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=5952,i,13034687262971979327,886582223615016794,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5244 /prefetch:1
                                          2⤵
                                            PID:4080
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=4144,i,12394072911401101874,1158984201389584869,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=4432 /prefetch:1
                                            2⤵
                                              PID:1660
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5316,i,7434897745388377829,5719077193830248156,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:1
                                              2⤵
                                                PID:2760
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=5024,i,7075607619409453017,14124611398316476246,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:1
                                                2⤵
                                                  PID:5040
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4220,i,4540536075309062842,7817591660695708871,2097152 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
                                                  2⤵
                                                    PID:1100
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5932,i,3859898320911546991,187682746191037894,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
                                                    2⤵
                                                      PID:5404
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5936,i,9730365295761064820,3290216528723043304,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
                                                      2⤵
                                                        PID:5412
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,15574712452094549034,16502338659719743391,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=3716 /prefetch:8
                                                        2⤵
                                                          PID:5420
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5640,i,6928944338370508635,13004888774844054587,524288 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=5628 /prefetch:8
                                                          2⤵
                                                            PID:5856
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6688,i,7567903092493903984,7346850723995667426,262144 --field-trial-handle=2308,i,6934658607804930697,2075065122518450345,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
                                                            2⤵
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:5140
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                          1⤵
                                                            PID:3024

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                30aaacad-9ecb-4286-bcaa-5cab70b1cd9d.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\30aaacad-9ecb-4286-bcaa-5cab70b1cd9d.tmp
                                                                • Size 8KB
                                                                • SHA256 baf1784e62216609d9e58534ccbdaf4c523982df2e1c88d0cceb6ac4fe084067
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                7e9d7da7-22ec-4b35-9590-369a6dd1fc2f.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7e9d7da7-22ec-4b35-9590-369a6dd1fc2f.tmp
                                                                • Size 18KB
                                                                • SHA256 83b69587785b573f95ff6d7468a3450a4a8e8a3156608afdb51f904e878e0115
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                82ba86e3-eb6f-46fa-a5e8-a73c262dabfd.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\82ba86e3-eb6f-46fa-a5e8-a73c262dabfd.tmp
                                                                • Size 18KB
                                                                • SHA256 0bcd21dab32298f6afc4b3a830c35a171fd6e9e250c7e2c5057d04b6e0d91066
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                99e838e6-b81b-4a57-83d1-7362b8a5c372.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\99e838e6-b81b-4a57-83d1-7362b8a5c372.tmp
                                                                • Size 8KB
                                                                • SHA256 6548f7c99bfc0d416a2f32060ffef3348a13581066dca8d8ff551f57dd943676
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                b38f2fa1-1387-40f1-a984-fd5cb5f6f534.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\b38f2fa1-1387-40f1-a984-fd5cb5f6f534.tmp
                                                                • Size 105KB
                                                                • SHA256 d94841acc41ca658a5ee48a1ef8763d968ff86dec9b648ab9d4d5f3d4fea0d3a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                settings.dat

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 27f6aa5d39c98b4843eaed7972cf93d10e75e08f497afafa54ccf4057f6d52c9
                                                                • MD5 SHA1 SHA512 TLSH

                                                                settings.dat

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 0e364ae2365b95ee5142a1a0abe3ee5065b85c554bc5cb9fcb1f31bcd0a1af4e
                                                                • MD5 SHA1 SHA512 TLSH

                                                                23a6efca-21e6-4a49-9286-5cecd167abed.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23a6efca-21e6-4a49-9286-5cecd167abed.tmp
                                                                • Size 70KB
                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                58dc70ab-6164-4fef-b243-edd3cfd01b4a.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\58dc70ab-6164-4fef-b243-edd3cfd01b4a.tmp
                                                                • Size 9KB
                                                                • SHA256 227e624042af5fadc66e2afa5979393e815957d127ee72103d189f25607de040
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                704b55b2-d689-4dd4-83f1-e7e33bd97a1a.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\704b55b2-d689-4dd4-83f1-e7e33bd97a1a.tmp
                                                                • Size 10KB
                                                                • SHA256 d615516190caa1b5b333604f3dd677574286214ace19165bdac031011a0db971
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                84cf3a3f-e649-4283-a18d-747aba50621c.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84cf3a3f-e649-4283-a18d-747aba50621c.tmp
                                                                • Size 6B
                                                                • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                • MD5 SHA1 SHA512

                                                                9ede7bab-d974-4661-af15-3a865797899d.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9ede7bab-d974-4661-af15-3a865797899d.tmp
                                                                • Size 11KB
                                                                • SHA256 46a51effe460fe0c5c9acd05ff2d24c19bed1d652b998abf0d95e981b2af9592
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000085

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                • Size 44KB
                                                                • SHA256 9bc63b4d8594a22dd7042bf4cf337a55421606df2e56079f64f236adde51f7b7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000087

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                • Size 29KB
                                                                • SHA256 ec58e12c892937b38135e1b46d19de26d5a28ed5e1168fff497f71648c7271a3
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000088

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                • Size 25KB
                                                                • SHA256 b537500f89faabbb78e4cefd00867aaf538a7330aad0f4d58a496ee51f1f658e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000089

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                • Size 16KB
                                                                • SHA256 9f36b901fdfe87f2476b3c897a613d73ab1331a64fad0b4f775e9c0330e51aad
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008a

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                • Size 17KB
                                                                • SHA256 d34f01729dbadbeb21b9d304917cc79cf3973cb761e60fa39ef9b4c3ac5094c0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008b

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                • Size 21KB
                                                                • SHA256 d6a78463187e7c3d869a942c200aff6c7e73faddd30cef4e8776642bac33f5e2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008c

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                • Size 25KB
                                                                • SHA256 aa11d5cdb22f8460c45f7a5a7e74544bda43323781d591075439e6f5bb23996d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008d

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                • Size 184KB
                                                                • SHA256 5dbbff711183697b3c76cf6cb7606a51d18792394c79e4c197696f8967edd822
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008e

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                • Size 325KB
                                                                • SHA256 2c9709cefed4d1aaece1537adf1901131aab9e29b1ebca74ac8b2e468610f737
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00008f

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                • Size 253KB
                                                                • SHA256 9c9bd096dd76dfe5d16554a3efdf4940cf78026c7b56a92ba63852601be602dd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000091

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                • Size 225KB
                                                                • SHA256 117e4be6832deefe2d758114903272231a44851a00fe7b32c2cbff287304b0d9
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000095

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                • Size 420KB
                                                                • SHA256 33de24f404ef60642bb262ddbed04f38163d61da0bc5ecb652066e2b373fb1ad
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000096

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                • Size 123KB
                                                                • SHA256 6fa622d1d7761aadf3a6ae2295895febabc78f2e0577cabf1cf2d407acadd069
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000098

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                • Size 251KB
                                                                • SHA256 24f5f7f21700af301f54d909f9ba09d16d099cffdccf3dc9a07a3fda95f86c76
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_000099

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                • Size 337KB
                                                                • SHA256 d9977cd57777293906b5bd3023204148f9c02cc3521830d84ef03b714321abb2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00009a

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                • Size 221KB
                                                                • SHA256 9e91618544ffd7335040cec762fe437ee06c2b10541dabfbdfe71b2b108f5433
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00009b

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                • Size 421KB
                                                                • SHA256 aeb1293ec0297c6011c76f958908a9db2aa9a2484e15d7c206f328ec20808d0f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00009c

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                • Size 164KB
                                                                • SHA256 0e213268d68db9d9a17a26d841bcaf33065f86544433f69dcf49692a497140f2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_00009d

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                • Size 553KB
                                                                • SHA256 015573499b20b5320b8c04ba0881223651533412b3ed8b68f8029d6a9127050c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a2

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                • Size 105KB
                                                                • SHA256 97b8e459bb949d2f1e4e2ef2124e4af13f8adbc8e8b1344f6b480624dae2da8d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a3

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                • Size 57KB
                                                                • SHA256 b666fee802363003d63b8e4e0566c9bbfa204867a341b4d70054b304eec66d6f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a4

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                • Size 149KB
                                                                • SHA256 373eae2cc99c457dc00f8c1f359f11051ea94851323a7af8ba6fa4d44deefa19
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a5

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                • Size 462KB
                                                                • SHA256 9f8ddeb6d33f5fb2cd611a206796010d3a25351afcbb10c59cf1a14f77a9c5fd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a6

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6
                                                                • Size 39KB
                                                                • SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a7

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                • Size 221KB
                                                                • SHA256 4d6d36366b4a765f6fd67ffe9727295693720a3434c637c2b38ab3767a06694e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000a8

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                • Size 23KB
                                                                • SHA256 24ef4aecfe4482d4cb6c2c0eb7fd4190ef2b8f02c844051b3432fd461b72e4a4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000ab

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ab
                                                                • Size 36KB
                                                                • SHA256 d971996f8b12f88e44acf27d5ccb6ad1ec64b9f7f4aaa6e721a7aeeebb4ae716
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000ac

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ac
                                                                • Size 32KB
                                                                • SHA256 7cefea75c7844e9ae53207fe52a6f8bde32344790fe59a4d5412b7a7e47eb679
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000ad

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                • Size 39KB
                                                                • SHA256 694d441d52a599b8bad07af4379886657f4157ecbce38ca18ca10fd40f461784
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000ae

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                • Size 39KB
                                                                • SHA256 0832cc7d61c56ce342157f3f3673082908495d8fe5d6efa97b74e6db53266e42
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000b0

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b0
                                                                • Size 127KB
                                                                • SHA256 2614c6b9e28e027e1cb4170b4ce45a2599cd7ca8c2e9026130220ef6251dfc89
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000b3

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                                                • Size 190KB
                                                                • SHA256 77ed8db1043157a5188f8f0ea1f02b71d12a5a568d4353f18b14dbfdb116365a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000b6

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b6
                                                                • Size 47KB
                                                                • SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000be

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                                                • Size 329KB
                                                                • SHA256 1b56e333a827241e6517b4637bd95b4569330f545e87a5cf735c014d844de86c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000c1

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                                                • Size 20KB
                                                                • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000c2

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                                • Size 24KB
                                                                • SHA256 299ffefb691c2d95bb89479c40eafb6e2713a61cfb30416028b4055f8ad46eca
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000c4

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                • Size 36KB
                                                                • SHA256 4d2bc38cafcbe79648aaad663125973d4eed95ee8329721a291e1884ec1d49d8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000c6

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                • Size 111KB
                                                                • SHA256 c3c328e232657b642e74853c805cc1542fa990e1a15fce9d09600c4cc0f22220
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000c9

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                • Size 56KB
                                                                • SHA256 8d24f8ca2acbb2f8b38617a8aa609fb42f20d7a6e42f6183e6dbf66b69f2c523
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000cb

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                • Size 114KB
                                                                • SHA256 df2f81423ae9c3016edb09966d49e655cd7469e274edfa778b15b352b9b912fe
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000cd

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                • Size 159KB
                                                                • SHA256 99a2edb4ed11b7e642566f40db55b245e08dd9a0ce49f139c197913f26bba074
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                f_0000ce

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                • Size 35KB
                                                                • SHA256 057b18ddb20921e6d0c3312db6a6d109f6e8c1827ef13cdd8a30920049856996
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                temp-index

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                • Size 4KB
                                                                • SHA256 d4a50226439c9bf5a37873c63a82977ae7a89d5154b00010b0cb623a03739b72
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                the-real-index

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 3KB
                                                                • SHA256 36940c11af2abff9315358bd0cfdffa4aca06b024878980c190cbf5fe8afff54
                                                                • MD5 SHA1 SHA512 TLSH

                                                                4c0d7998-3730-4e29-be06-5872185b636b.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4c0d7998-3730-4e29-be06-5872185b636b.tmp
                                                                • Size 2B
                                                                • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                • MD5 SHA1 SHA512

                                                                039da723-232d-4eb7-a726-a67a6efca7bc.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\039da723-232d-4eb7-a726-a67a6efca7bc.tmp
                                                                • Size 111B
                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                • MD5 SHA1 SHA512 TLSH

                                                                23663989-30a0-43d0-adbd-ea5033c50f83.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\23663989-30a0-43d0-adbd-ea5033c50f83.tmp
                                                                • Size 22KB
                                                                • SHA256 923ab6562da350bab39308cdc856db6db35e0225897d3da4bd171a6861d8f2ad
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                a622b4f1-1ece-4aa3-b10c-18897b804b59.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a622b4f1-1ece-4aa3-b10c-18897b804b59.tmp
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512

                                                                sync_diagnostic.log

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                • Size 4KB
                                                                • SHA256 a6cbcd08ff57269eb168fe2253c99cce04a33e0e2acad2d86b076e962ab64543
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                index.txt

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                                                • Size 149B
                                                                • SHA256 7fc44a2c8331b54bda98b019878ae57c21d08b6120cf7374309ca88492029d18
                                                                • MD5 SHA1 SHA512 TLSH

                                                                index.txt.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
                                                                • Size 65B
                                                                • SHA256 26e78cb8e189406e12ca36d7fe0eee3d0757dcb21dd8c84917e09c50bff3b708
                                                                • MD5 SHA1 SHA512 TLSH

                                                                index.txt.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
                                                                • Size 149B
                                                                • SHA256 db8c2e2a370818f614ca5b824b814805a8fcc0fbe0cebfac0de56f68cb4faa88
                                                                • MD5 SHA1 SHA512 TLSH

                                                                000003.log

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\000003.log
                                                                • Size 52KB
                                                                • SHA256 ad589ea291cd9c7acc8c61cd525064c1b470aa64dfdd20d9d160eba7b3a02e07
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                CURRENT

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\CURRENT
                                                                • Size 16B
                                                                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                • MD5 SHA1 SHA512

                                                                LOG.old

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\LOG.old
                                                                • Size 329B
                                                                • SHA256 64f26f2853fcfeaf8a0f621d024ee99f52ce252e60f5ce24f12df8b6acb104ae
                                                                • MD5 SHA1 SHA512 TLSH

                                                                MANIFEST-000001

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\IndexedDB\indexeddb.leveldb\MANIFEST-000001
                                                                • Size 23B
                                                                • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                • MD5 SHA1 SHA512

                                                                c51b0e7f-0bf9-49d7-aa44-07db47933e45.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c51b0e7f-0bf9-49d7-aa44-07db47933e45.tmp
                                                                • Size 10KB
                                                                • SHA256 c7371fd179d4f22bb82fb56f26218ec5d25c8c9867f99d5ae96e5cacd104158d
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                e8415438-ac60-446c-8741-456f95c50f7c.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e8415438-ac60-446c-8741-456f95c50f7c.tmp
                                                                • Size 27KB
                                                                • SHA256 15693bf26ce45d389375bfa60b70f7a7e310d2ec733187c49bbc3934539372be
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                37262636-8039-4d33-88a7-b461a47510f9.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\37262636-8039-4d33-88a7-b461a47510f9.tmp
                                                                • Size 22KB
                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                RevisitationBloomfilter

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                • Size 392B
                                                                • SHA256 34682e002bfa77a75044c8b97d2663503a7115ee1631e5a06ef4768d87855ed5
                                                                • MD5 SHA1 SHA512

                                                                ca39a7e4-db6e-4194-9c3c-7e987605a1a5.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ca39a7e4-db6e-4194-9c3c-7e987605a1a5.tmp
                                                                • Size 26KB
                                                                • SHA256 4a9d33c660e4be6b7312a2c773f4c6134e473a96474eb1c0c400dc0482169ae0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                0e9589e4-ff97-430f-b1c9-92ef48aad139.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\0e9589e4-ff97-430f-b1c9-92ef48aad139.tmp
                                                                • Size 13B
                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                • MD5 SHA1 SHA512

                                                                ff22f17e-e32b-4dfa-92da-2128623d144f.tmp

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ff22f17e-e32b-4dfa-92da-2128623d144f.tmp
                                                                • Size 392B
                                                                • SHA256 1f407ec1ac8fe16c7f36ad91ed7934a63354b7cb2221f91c99c76d942ed1fb16
                                                                • MD5 SHA1 SHA512 TLSH

                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                • Size 2KB
                                                                • SHA256 8f7c84eb4246470c870ce373522aa237c998dee1f1efc7072aefb8a1620885d7
                                                                • MD5 SHA1 SHA512 TLSH