Resubmissions

24/10/2026, 02:40

261024-c6bt4aft2s3

24/10/2026, 02:34

261024-c2ys3a11ds6

Analysis

  • user interaction
    yes
  • max time kernel
    209s
  • max time network
    208s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    24/10/2026, 02:34

General

  • Target
    https://frdl.my/70o1iv6yhkmn/IndSxyMilfHrdFkedAllVidsPics.zip
  • Sample261024-c2ys3a11ds
Score
6/10

Malware Config

Signatures

  • Looks up external IP address via web service 1 TTPs 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 9 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://frdl.my/70o1iv6yhkmn/IndSxyMilfHrdFkedAllVidsPics.zip
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2084
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffecd59c188,0x7ffecd59c194,0x7ffecd59c1a0
      2⤵
        PID:4848
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1744,i,5834575603374809177,3218571135422051452,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=2980 /prefetch:11
        2⤵
        • System Time Discovery
        PID:984
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1576,i,6577971945973420178,9443658898622912042,262144 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:2
        2⤵
          PID:4064
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2136,i,15635967497135669016,7298792104444606388,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=2988 /prefetch:13
          2⤵
            PID:1744
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3412,i,6726930545049765563,4686304177298617387,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=3472 /prefetch:1
            2⤵
              PID:4700
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3416,i,12259734098148901053,18074815228524291225,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
              2⤵
                PID:3604
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4100,i,14909058340261983580,17977166403579695279,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4112 /prefetch:1
                2⤵
                  PID:2536
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4172,i,3794731088499652279,10679670767520931183,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4120 /prefetch:9
                  2⤵
                    PID:2428
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4228,i,13706578337534802977,17745753150909504713,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:9
                    2⤵
                      PID:2412
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4216,i,7571662928896659324,14900996439808818353,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
                      2⤵
                        PID:4292
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5344,i,13682165225169872608,2230389939342677070,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:1
                        2⤵
                          PID:3192
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,13044913764280679315,10563544901636186912,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
                          2⤵
                            PID:576
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,12837199793881109320,8228703685167420304,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:14
                            2⤵
                              PID:3456
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,4549144764358130920,17851923806501003513,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
                              2⤵
                                PID:1192
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6352,i,11227489304739472479,6911210291018541934,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:14
                                2⤵
                                • Suspicious use of WriteProcessMemory
                                PID:440
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                  cookie_exporter.exe --cookie-json=1128
                                  3⤵
                                    PID:792
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,4549144764358130920,17851923806501003513,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:14
                                  2⤵
                                    PID:3836
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6616,i,16680555714647183635,13516467972909053309,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=6560 /prefetch:12
                                    2⤵
                                      PID:3840
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6608,i,255153481796198893,6556094998576168428,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:14
                                      2⤵
                                      • Modifies registry class
                                      PID:1068
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7100,i,7043989296577793923,3291247501319294561,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7048 /prefetch:1
                                      2⤵
                                        PID:2848
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6908,i,15791907640396265318,3212818048184604514,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
                                        2⤵
                                          PID:4468
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=4508,i,8871155399029182485,5179138763837254559,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4500 /prefetch:1
                                          2⤵
                                            PID:3428
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=4504,i,14154183274030718919,18012527873422526341,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:1
                                            2⤵
                                              PID:5492
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7164,i,3731724955050116361,16644102708967923685,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:1
                                              2⤵
                                                PID:5608
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7148,i,3900769682832093384,4650141416302871312,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:14
                                                2⤵
                                                  PID:5724
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,14617877494688185052,17256834940526759881,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:14
                                                  2⤵
                                                    PID:5732
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7324,i,13653441279626501022,220580558827862105,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7440 /prefetch:14
                                                    2⤵
                                                      PID:5740
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,4281696718248624452,6502623557055697564,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:14
                                                      2⤵
                                                        PID:1836
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7584,i,7837806493476626323,8878845989119310200,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7604 /prefetch:14
                                                        2⤵
                                                          PID:5076
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7772,i,6381440569280174869,16065011386707486676,2097152 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=7784 /prefetch:1
                                                          2⤵
                                                            PID:5392
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6132,i,16019357886512824276,2902369666670014663,262144 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:10
                                                            2⤵
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:5548
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,15453025177748836191,7734859949866218270,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:14
                                                            2⤵
                                                              PID:5228
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2436,i,11871436106638289094,3219207605664867478,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:14
                                                              2⤵
                                                                PID:5984
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4420,i,1365177446167718140,12217109060495315942,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:14
                                                                2⤵
                                                                  PID:3284
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5764,i,16747252559137010348,14724153377674186099,524288 --field-trial-handle=2936,i,4768652240831852550,4656873844458990144,262144 --variations-seed-version --mojo-platform-channel-handle=5704 /prefetch:14
                                                                  2⤵
                                                                    PID:6104
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                  1⤵
                                                                    PID:4296

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        03b186f5-c187-4812-b5e8-a629de7d675d.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03b186f5-c187-4812-b5e8-a629de7d675d.tmp
                                                                        • Size 392B
                                                                        • SHA256 a80cc3cfc7111cff1ae60753c7fe4c862e46796590c18e22b0feca644c106c4f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        2229b7cf-e595-404b-88d4-ecc78e957953.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2229b7cf-e595-404b-88d4-ecc78e957953.tmp
                                                                        • Size 26KB
                                                                        • SHA256 eaa5122f2dfc8bb66c094163cd7d277991d044b1ad26dbc1c852a479f4c07208
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        2dd12566-0b1a-468f-8b5b-371dbe0fcb20.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2dd12566-0b1a-468f-8b5b-371dbe0fcb20.tmp
                                                                        • Size 18KB
                                                                        • SHA256 b269c1d17205b1649c6a4c7cc2de5ae200aed8034f4c80ee569b95573300e18e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        7419cbfb-de25-4df9-97cb-91ccd1a764db.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7419cbfb-de25-4df9-97cb-91ccd1a764db.tmp
                                                                        • Size 18KB
                                                                        • SHA256 3b73edcc02543cc47e96781f9687f1a67d0412db6619aa39ccf9d9606b50bd57
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        87f8dfee-e707-4258-9024-95a977f009f3.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\87f8dfee-e707-4258-9024-95a977f009f3.tmp
                                                                        • Size 392B
                                                                        • SHA256 1c21e944ac1d78c82ed1a86c98b7378050e725c40eda12ff4b6d79f50e703a17
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        9599a6d4-885d-4f9d-9782-86f35e814b31.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9599a6d4-885d-4f9d-9782-86f35e814b31.tmp
                                                                        • Size 18KB
                                                                        • SHA256 7804c3be1d91132add4ddff163fb03846983e4dd1796f72a3a4d97ed35c64ee0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        96d56aea-e45a-4be5-b789-866525dc897c.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\96d56aea-e45a-4be5-b789-866525dc897c.tmp
                                                                        • Size 26KB
                                                                        • SHA256 a8d36256ade7cfb88d04367648ec5928c6b735539b25fb08a04d67a05546b252
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 635a17b62bc802a1d6d2ac977e63b5a2027aa2bf3d1b5551e63352afa4362fd9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 2aa0ef8543982e42f2141a859cd78cf0f780a6b139ea99c1c2ad33fd4f56cb7b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        05921c46-e0a0-4e6d-a181-6712c398d19b.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\05921c46-e0a0-4e6d-a181-6712c398d19b.tmp
                                                                        • Size 12KB
                                                                        • SHA256 886af7792fc7d2fd105b8888f84aea43ce07a0ef4799818551038dabf09afd14
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        41c7cb6a-bafa-4c43-8a98-a1f09381761b.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\41c7cb6a-bafa-4c43-8a98-a1f09381761b.tmp
                                                                        • Size 13KB
                                                                        • SHA256 5a410d44304fc5382ac6b6a215cda17f072de1fdaf9005d01cfa8899ce7ce4f8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        772663b8-cc37-400e-a118-a8d00d9b11f6.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\772663b8-cc37-400e-a118-a8d00d9b11f6.tmp
                                                                        • Size 70KB
                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        85abf30c-085a-4a09-b060-34cc5f6705db.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\85abf30c-085a-4a09-b060-34cc5f6705db.tmp
                                                                        • Size 28KB
                                                                        • SHA256 58f7a4829ef4ec278ee0505d4db148b2bc87ce5d121dd32657389b9e94ea8fed
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        9463873f-c91b-47ca-8aa5-f6b1ca80e2cd.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9463873f-c91b-47ca-8aa5-f6b1ca80e2cd.tmp
                                                                        • Size 14KB
                                                                        • SHA256 04ee44c279335ac7d17d9ec3c6ab3d9d59be70782cb91ceb52a0fc523c6667ce
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        LOG

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                        • Size 331B
                                                                        • SHA256 32c9927033cc4692ae01824a41f31082ee6345508b15f842f0f683f5aa8e4d29
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f_000090

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                        • Size 27KB
                                                                        • SHA256 f517e3c6facb8c02c6d4598e03aa12e148a20d36c7913b9bbbaeae9289b1569d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000091

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                        • Size 120KB
                                                                        • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000092

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                        • Size 119KB
                                                                        • SHA256 a72209b41ff1a866b9a759a6746748c72e610eda83b22876ac723797b95ff927
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000093

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                        • Size 31KB
                                                                        • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000094

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                        • Size 101KB
                                                                        • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000095

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                        • Size 239KB
                                                                        • SHA256 870e18309c7e13e203841aff8814dbebf9fba7a8a2d4770a6bc03e33e0aa0c73
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000096

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                        • Size 610KB
                                                                        • SHA256 f5cfe71b8b2397005f855f8bae1362a3a43343437bd0dc7811daed6d9fa91f32
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000097

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                        • Size 45KB
                                                                        • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000098

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                        • Size 102KB
                                                                        • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000099

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                        • Size 20KB
                                                                        • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009a

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                        • Size 16KB
                                                                        • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009b

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                        • Size 36KB
                                                                        • SHA256 73ab8b2905a87ad861c032cbec7c56dfbb7edfa4ef9fc06aab056a37e4e6f09d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00009c

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                        • Size 71KB
                                                                        • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a2

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                        • Size 16KB
                                                                        • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                        • Size 23KB
                                                                        • SHA256 523593dcb39470941570b5260c68108d06376205ccb358925c5c1720aca7802a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a4

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                        • Size 16KB
                                                                        • SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a5

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                        • Size 33KB
                                                                        • SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000a8

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                        • Size 34KB
                                                                        • SHA256 eb2c5142d4bcf8e6fd61e6f2f7c410d38e83a1913b79a9cb9762366b8f26715a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ae

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ae
                                                                        • Size 31KB
                                                                        • SHA256 557cfaf510be4a04e7cf5f90f90129095f17ebbcf8011c11e95e636bf7e0730f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000af

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af
                                                                        • Size 46KB
                                                                        • SHA256 06156c6f113d351551d4399e1dc7a807c3c1311486504388e6085766ad5b5f82
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b1

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b1
                                                                        • Size 31KB
                                                                        • SHA256 66c453ba2e4f2405159c740f14dbc343d57baab928d8ea695751f7d25d227e86
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b3

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b3
                                                                        • Size 30KB
                                                                        • SHA256 81b8d4da5bee744db5841d5943e1c0643c2eca8241a24fe4fa29b5bdb15ceb89
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000b4

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b4
                                                                        • Size 58KB
                                                                        • SHA256 c882a452fb99730adf8dc6595ed0900d89f11731aae438082fe33d122a3d93d9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000bc

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                                                        • Size 17KB
                                                                        • SHA256 f329e1ce9c8f7fcdc2d391533bb940bc2731de4d7238697daa9fd01fb1b21b99
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000bf

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                                                        • Size 39KB
                                                                        • SHA256 cd522e57be6d484abf0ee0b34a98b46cec33ac240df81363667ae993ab7f9d9c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ed

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ed
                                                                        • Size 106KB
                                                                        • SHA256 f289656b6676bf04a90ec103e61dbfb2a0b49ec2a766600f3f1ebdd52941484c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000ee

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ee
                                                                        • Size 107KB
                                                                        • SHA256 10a99aa97e4bc2d778d20d06723e28a09b588a2e199846ce5be4aaf292ff0aea
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f0

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f0
                                                                        • Size 107KB
                                                                        • SHA256 4444a301b14cd15a82ef180021a76adf7f42b1716d1a82b1e67797535cb38866
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f7

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f7
                                                                        • Size 35KB
                                                                        • SHA256 a8e6316140cb26596bef4b73d3c6117dfd6139f5a5f59aeeb8a172f38d42a6fb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f8

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f8
                                                                        • Size 32KB
                                                                        • SHA256 0936d75669d6f441e71f232ed43cc07e8c88b8d344e2e9208c71d22d12298e03
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000f9

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f9
                                                                        • Size 136KB
                                                                        • SHA256 8519d5ff045e085886790119b13816e06647583f1c463a0d6b7fd66ae951fb12
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fb

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fb
                                                                        • Size 97KB
                                                                        • SHA256 cd8bfa5768556d8377ce1439ef3b2cdf5f562e222420376ebca34bd5466ae715
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_0000fc

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000fc
                                                                        • Size 97KB
                                                                        • SHA256 451f194d3bb50aae14ea8299b9519b4201e13e5a1f4a4e8bad1fe11c617bbaab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00010d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00010d
                                                                        • Size 115KB
                                                                        • SHA256 a6c1493fad87b4d20e8441acd678846292a1b7f08d9b21d6eb2ba306e6a35d22
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000114

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000114
                                                                        • Size 953KB
                                                                        • SHA256 769f459a1970ac710805ce22ed90bdf5fa27bed5890bb82abb6b1ec4033f5bd1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 5KB
                                                                        • SHA256 58d5e8ab26a84791a1ac7efb2675fb0a4dea7fc683e7827d260b166679f160b0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 3KB
                                                                        • SHA256 bd9663019a5f640563d677db6495ac0bb4635dc4b5f575c3ebe66029cf2ef707
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        d596e97e-87b4-468b-accd-16a2f314cdd1.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d596e97e-87b4-468b-accd-16a2f314cdd1.tmp
                                                                        • Size 2B
                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                        • MD5 SHA1 SHA512

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_loadads.online_0.indexeddb.leveldb\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        07bcf778-2df2-4223-8239-4d5d13b6bbec.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\07bcf778-2df2-4223-8239-4d5d13b6bbec.tmp
                                                                        • Size 10KB
                                                                        • SHA256 fd57ad8fadc84e48fe6a9df4e989efc2b49502923d36b6c2725083d6867dab4a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        2db07342-ea44-4efb-a9fe-af22fa8fcd4d.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2db07342-ea44-4efb-a9fe-af22fa8fcd4d.tmp
                                                                        • Size 111B
                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        57ce146f-0cd1-4a67-a4ab-3c4600c7eb4d.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\57ce146f-0cd1-4a67-a4ab-3c4600c7eb4d.tmp
                                                                        • Size 13KB
                                                                        • SHA256 e5d3cb3aabf2649f682cc6105d1b91cbaf6e7284a52954b93f6cbfae9287a7df
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        5b27e1ad-bef8-4bd4-93a5-21713c755500.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5b27e1ad-bef8-4bd4-93a5-21713c755500.tmp
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\48fdc774-27f4-4e31-a838-a9070de49d1b\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 870d5ce8138e2834b3899e431196eba882b95588904f2a3a3984bdbaadbe62b5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\48fdc774-27f4-4e31-a838-a9070de49d1b\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 32186075f0b403f670e518389f8107f98a4b31913fa5cc05423e1e67cbbc203a
                                                                        • MD5 SHA1 SHA512

                                                                        index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5d9d9449-76f6-44a7-8cf3-31ba588c23c8\index
                                                                        • Size 24B
                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                        • MD5 SHA1 SHA512

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5d9d9449-76f6-44a7-8cf3-31ba588c23c8\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 50fe923eb065c9469758fbade020b7a5e3ef2ee8d899de2b3ba29fa5d5171c9a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5d9d9449-76f6-44a7-8cf3-31ba588c23c8\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 48fcc123dc32576a1cb75a29dbdd4334b8f8168aaed53c19054cc93018cbe630
                                                                        • MD5 SHA1 SHA512

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\904eaa8c-5b5e-4f51-8012-a32578e989eb\index-dir\temp-index
                                                                        • Size 864B
                                                                        • SHA256 6c4c8bb594c56ddca1c911971ff24b6dd442f20e1470e4513ff1bd26487650f7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\904eaa8c-5b5e-4f51-8012-a32578e989eb\index-dir\the-real-index
                                                                        • Size 864B
                                                                        • SHA256 4c3488daf93c41a8b52eaf3b7b73a56aa4197295145e9cb1646baefeaf98dce5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\92abc819-0593-4267-b584-d982c9c735ec\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 0bf98bfbedcf1d0b5cc8a5659ec5282ad7f05fc61a910e0b363a70f455ec1886
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e83cc414-8e26-432b-988b-23eaac704126\index-dir\temp-index
                                                                        • Size 2KB
                                                                        • SHA256 ae2290dbc617a57f3fed136758a53035805072acd579a0e08d2088ba35629351
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e83cc414-8e26-432b-988b-23eaac704126\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 b6fe414f3363aad2e9d58d68f2575ff22473ad38512d4762729fe69a830cb6f5
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 281B
                                                                        • SHA256 0b4175a2df5b1cd116359339f9bffe3ed85698fa1f412fa98cc14f6eca546b93
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 259B
                                                                        • SHA256 fbfc7e6b46d8721afedbc8e3333761c835165073ed0bf06cb824dea7c4e746dc
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 161B
                                                                        • SHA256 5c5d6bf5d053e799bd516c1682ba079f0348d88a9c2d6ecd331970b1f41f1fcf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 488B
                                                                        • SHA256 6d69fecf9ae8a51e1a403943c80e62dedde66e63da73e96b361d18767c63e0ab
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 386B
                                                                        • SHA256 8a9bd7c1d3761f951164a27e92383a1a0b5b6f2989081ef23a8ae15dc8e71ddb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 394B
                                                                        • SHA256 dc2aabf1f393094f47ed7e207560908bab892f3c6bb7e7b234fb059d7c749cbd
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 399B
                                                                        • SHA256 9b9b9af4dc0854053bb1d34416d97539c65340b1813907bcf9d77feb2d711dde
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 672a638dfb08396f66e48881a4b4f503143bd37cbd17cfdf153f48c1ab713d0b
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 eab5cce6dc466824d032045d71e3f67c159d368bf1728391050b4d79167d78f4
                                                                        • MD5 SHA1 SHA512

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 968B
                                                                        • SHA256 b1c9832a40ed02f9674449b7c756b7a5dac146b02a7e5e38cdc03f3881c9edaa
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 1KB
                                                                        • SHA256 12f6574f028da5649ad49282a02e403d760fe8dae69c408c1e65bc7c9433323a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 1KB
                                                                        • SHA256 96a9e83d7515aea25814aa6fb6f43b109dc2736f372111c252b17e0963045c7a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\57e208e7-5181-49d4-8cb4-8d66443d5719\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 be484757895f373dacfd2404893500f872d5f1b7e66eb671b2d325c00078c353
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\57e208e7-5181-49d4-8cb4-8d66443d5719\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 cc65b989d1364c0443259cddb7c428fed55cea3fde55a78bf29db06db7354a1d
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
                                                                        • Size 174B
                                                                        • SHA256 8a59ba952d102129b7da2fd3fad83d24f31e3e7fe34db78f2c5ce36ff2db1ff2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt.tmp
                                                                        • Size 87B
                                                                        • SHA256 2b3536d33b6d417b7512ef715a8a10b2ce8c762ba346375656ffbb7b07f0f335
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        a7975fde-e87c-441e-b618-53c018405111.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a7975fde-e87c-441e-b618-53c018405111.tmp
                                                                        • Size 10KB
                                                                        • SHA256 06467ec7270e2231395a33b2b777806d066a203f4817832fa1a98a8ea070fda6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ac93a655-00fe-47c8-b477-aa6a6fd33a9d.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ac93a655-00fe-47c8-b477-aa6a6fd33a9d.tmp
                                                                        • Size 13KB
                                                                        • SHA256 79e8947ec7951846e93900090c16b57287e5acbf58849637475065c9551a6310
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        b9ae5b5c-7418-4115-b39c-5a5c8333d27a.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b9ae5b5c-7418-4115-b39c-5a5c8333d27a.tmp
                                                                        • Size 12KB
                                                                        • SHA256 5132129717dd2d483da624bfe75a688dba408047b99088a388986027232ee122
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        cb5d4137-447c-4aa6-abd0-3446b3ff0f49.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb5d4137-447c-4aa6-abd0-3446b3ff0f49.tmp
                                                                        • Size 13KB
                                                                        • SHA256 138552cb9dd67247f45de9669758fc7b3526a65ae6c6298875cddea80fbbec72
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d1ce29ef-3fcc-43cf-bb9e-2192917c6e08.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d1ce29ef-3fcc-43cf-bb9e-2192917c6e08.tmp
                                                                        • Size 14KB
                                                                        • SHA256 b5d9b963a8d87f14c06e0cec25f682969e6cdde7df96781ecf7778765e51f390
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d949df71-84fa-41fd-9e01-cfb5acf239c2.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d949df71-84fa-41fd-9e01-cfb5acf239c2.tmp
                                                                        • Size 9KB
                                                                        • SHA256 30f6d02d2a2bab98d0058b3d7f6ff0a10584a8228e96bb993221199d2d783596
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        OperationConfig

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                        • Size 3KB
                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        f4eed25b-0ccd-4525-bc8a-e11e6efa0c9e.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\f4eed25b-0ccd-4525-bc8a-e11e6efa0c9e.tmp
                                                                        • Size 22KB
                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 7c2ae8dbb896f082aa1cc98bcacec12da5d6a199442e3f837ae8bcf84d3f5334
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        b79ac412-bf5d-4948-88d3-62e0f95bc466.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b79ac412-bf5d-4948-88d3-62e0f95bc466.tmp
                                                                        • Size 26KB
                                                                        • SHA256 d68201394942577d8d15980463e30cc42464c67b01c5ab5c66fe8b617750f36b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d40cf4e4-d15d-41f0-902f-d9d4d78b8543.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d40cf4e4-d15d-41f0-902f-d9d4d78b8543.tmp
                                                                        • Size 8KB
                                                                        • SHA256 4bc60b7644b5e3de8eb36bd37ca9362046c67a7c04b1e4de5c851ee07d6ade38
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e7d31ba4-ef0a-44b2-ac46-6fee523364c3.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e7d31ba4-ef0a-44b2-ac46-6fee523364c3.tmp
                                                                        • Size 18KB
                                                                        • SHA256 979814b050beacf06fc5df2f9a3c23e22f68a7815058f446a0c8f29ad63bb556
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e99e57b5-6a36-4ef6-aa3d-bd6477270b28.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e99e57b5-6a36-4ef6-aa3d-bd6477270b28.tmp
                                                                        • Size 8KB
                                                                        • SHA256 abf430b94279f66b4e771cf4f15da82deaa4b556736bb2a115e5ac2fd58023dd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        63d0015c-4364-43b4-88e6-322c620839db.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\63d0015c-4364-43b4-88e6-322c620839db.tmp
                                                                        • Size 13B
                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                        • MD5 SHA1 SHA512

                                                                        default.exc

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                        • Size 2B
                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                        • MD5 SHA1 SHA512