Analysis

  • user interaction
    yes
  • max time kernel
    1799s
  • max time network
    1102s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260911-en
  • resource tags

    arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    26/10/2026, 17:05

General

  • Target
    http://icloud.com
  • Sample261026-vly31abe64
Score
6/10

Malware Config

Signatures

  • Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 63 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://icloud.com
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:6116
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ffd3344c188,0x7ffd3344c194,0x7ffd3344c1a0
      2⤵
        PID:2588
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1760,i,7731708173582646840,5259107152313624220,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:11
        2⤵
        • System Time Discovery
        PID:3496
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1556,i,2533018588900392846,11804865326777261797,262144 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:2
        2⤵
          PID:3584
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2344,i,15309677923064614950,10708274994343539366,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=2952 /prefetch:13
          2⤵
            PID:3492
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3532,i,10183108530703759338,4267560281885091364,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
            2⤵
              PID:6076
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3536,i,15136423307911700172,10461524901666480540,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
              2⤵
                PID:5700
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4956,i,8801247754426921087,1142151540826330631,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
                2⤵
                  PID:5752
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,9845388933219952785,3440346562676642362,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:14
                  2⤵
                    PID:3440
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,9902639921241553214,5916330063819847741,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3824 /prefetch:14
                    2⤵
                      PID:3608
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5840,i,11788477345294057350,14558201534828325640,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:14
                      2⤵
                      • Suspicious use of WriteProcessMemory
                      PID:4492
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                        cookie_exporter.exe --cookie-json=1128
                        3⤵
                          PID:1148
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,17461951552921563819,1768224120801934091,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
                        2⤵
                          PID:1940
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5872,i,17461951552921563819,1768224120801934091,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:14
                          2⤵
                            PID:4432
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5896,i,16592582539972480040,2755474070569415118,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
                            2⤵
                              PID:4344
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,13447435382139774099,11262791782622309899,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:14
                              2⤵
                                PID:4856
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,5132464860104930544,5116366515522628320,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:14
                                2⤵
                                  PID:428
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,11066863725623228614,13197934084124962430,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:14
                                  2⤵
                                    PID:3852
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,7983063976170149040,5120997291114050113,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6648 /prefetch:14
                                    2⤵
                                      PID:4284
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6628,i,6467574784763109767,11786916413017096985,262144 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:10
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2392
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5816,i,5468348955377975924,15941230317843434322,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6048 /prefetch:14
                                      2⤵
                                        PID:2284
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6660,i,14901965675786481554,4268363748427814161,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3836 /prefetch:1
                                        2⤵
                                          PID:4832
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6328,i,6959851543356396917,469679382549512031,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:1
                                          2⤵
                                            PID:4840
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7028,i,6216084821220056242,11362805209431396890,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:1
                                            2⤵
                                              PID:3352
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=5400,i,12073615678206165621,16962655597801770879,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5412 /prefetch:1
                                              2⤵
                                                PID:2228
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=3088,i,3372916870942448158,18383690213555420122,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
                                                2⤵
                                                  PID:5132
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,6110020561073542170,14866196270024123615,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=3848 /prefetch:12
                                                  2⤵
                                                    PID:4140
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7172,i,14097352548417162815,9706421351008119896,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:14
                                                    2⤵
                                                    • Modifies registry class
                                                    PID:3868
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7852,i,13833798066119868103,3509663299238974436,2097152 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=8276 /prefetch:1
                                                    2⤵
                                                      PID:3988
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7096,i,726093091587292906,12974169815070848294,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:14
                                                      2⤵
                                                        PID:5176
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1032,i,17730035474256273020,8626380036432687057,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=7688 /prefetch:14
                                                        2⤵
                                                          PID:3604
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7072,i,15770834640459213713,7639305038877565986,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
                                                          2⤵
                                                            PID:5268
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5376,i,1529963227262528021,8525480922826891079,524288 --field-trial-handle=2336,i,9558311271148167177,9963136381650839800,262144 --variations-seed-version --mojo-platform-channel-handle=6664 /prefetch:14
                                                            2⤵
                                                              PID:4804
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                            1⤵
                                                              PID:1744
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                              1⤵
                                                                PID:2892

                                                              Network

                                                                    MITRE ATT&CK Enterprise v16

                                                                    Replay Monitor

                                                                    Loading Replay Monitor...

                                                                    Downloads

                                                                    0ace36f0-8724-4549-94ac-71ccf1c3a2fa.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0ace36f0-8724-4549-94ac-71ccf1c3a2fa.tmp
                                                                    • Size 27KB
                                                                    • SHA256 fda39115bd21f0eef4e31373d240b91e66a1323e7172601ba57890391555da38
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    2682d7c8-ea7a-43fd-a1a1-bd7eebad6ae2.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2682d7c8-ea7a-43fd-a1a1-bd7eebad6ae2.tmp
                                                                    • Size 32KB
                                                                    • SHA256 3cb978c66b28928e2f8e13792cd3d35fcd6292daa8ec1a06df5c9154c4aac41f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    8dabcaba-0cee-48a6-8181-e0d27af2f34e.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8dabcaba-0cee-48a6-8181-e0d27af2f34e.tmp
                                                                    • Size 26KB
                                                                    • SHA256 627fc39d066a21bfd2e064eb57136b15d14241a585a117ebe6259a49f5e6e19d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    settings.dat

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                    • Size 280B
                                                                    • SHA256 19cb171abd8024376bb573db410defd4bdc70c3b24e22be345856e8d3ee9e747
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    settings.dat

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                    • Size 280B
                                                                    • SHA256 0b28463e7a1d95cbc7da894417349c134b26a5efaa80870f8f6efdf126f99c29
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    0d4ffa1c-b9e0-495d-8fb2-4b1bacf9ef6d.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0d4ffa1c-b9e0-495d-8fb2-4b1bacf9ef6d.tmp
                                                                    • Size 15KB
                                                                    • SHA256 46abbab42ef6affac478af9efbfbc03d590f936b1e4abba555f03e6b1bf22ae6
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    2fb7e69f-3e9d-4899-83e9-93d6e31a6b88.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2fb7e69f-3e9d-4899-83e9-93d6e31a6b88.tmp
                                                                    • Size 12KB
                                                                    • SHA256 1a6012965fb5baad072038babadc30fadf4ee93890676f3d6fa68ce98f6305dc
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    481b6cc7-b41f-4c3d-80e0-c783bf7c9392.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\481b6cc7-b41f-4c3d-80e0-c783bf7c9392.tmp
                                                                    • Size 29KB
                                                                    • SHA256 3147859e64a04d5a6e6bfa860b314353582dfeae68a5295b368155c03a21369e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    5f60e0b3-352d-4642-a4d2-56fddb472959.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f60e0b3-352d-4642-a4d2-56fddb472959.tmp
                                                                    • Size 15KB
                                                                    • SHA256 580acc0da87787bff06677fa7920b6c03eea3c580eb4c7c69fcf99b7adacf5f5
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    87d6b9d6-d498-493d-a9d5-bf9711217c0b.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\87d6b9d6-d498-493d-a9d5-bf9711217c0b.tmp
                                                                    • Size 12KB
                                                                    • SHA256 baff57c2169a0fca44b51831e0e4222dd0ab926487456f6b25a456e09a81e3a4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    LOG

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                    • Size 334B
                                                                    • SHA256 87ba3b631968879f13439b426dd8ca7cc0f9294c5124d2dbc91f1a969e893be1
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    LOG

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
                                                                    • Size 334B
                                                                    • SHA256 e78c1fdbb1b19bbd138ade2545becf02738f3b911e26d8e4989320d5ec19a495
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    LOG.old

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                    • Size 331B
                                                                    • SHA256 9ca6a764747fa8e2e640ad4267beef077b63922cbb0d4ddc97fda4d375a0e91f
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    f_000061

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                                                    • Size 1024KB
                                                                    • SHA256 4400e84239a38d0194f39db35aac8ee295b0bc044911a375ce4b9f5cc6e8d32c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00006f

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                                    • Size 114KB
                                                                    • SHA256 53aeca952cf8dfa4e64e54956d4a8b6fcf75a9b75a4c41b2fa24de75334761a4
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000070

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                                    • Size 215KB
                                                                    • SHA256 3231b77ee2775dadbaa76de85f95763976aff1091f63a67fa553d727a6edb933
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000072

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                    • Size 27KB
                                                                    • SHA256 bc99895ed4ba19fd039f98313e7d9d862aed0e5084852f07e7c3226a50ace120
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000073

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                    • Size 104KB
                                                                    • SHA256 f108f7923af8e6318eb36b33d7f27ccdf0f0dba22756d4e7ee6bd582ef4895f3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000084

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                    • Size 120KB
                                                                    • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000085

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                    • Size 31KB
                                                                    • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000086

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                    • Size 101KB
                                                                    • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000087

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                    • Size 239KB
                                                                    • SHA256 bf4a68d6c736d7ea8dc9967c378b4e19bd60053cf0e5c400af4a92c64d334892
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_000088

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                    • Size 119KB
                                                                    • SHA256 adb60407191b872708383b6d9f888f280a05f038921933ef23916248a421bc4f
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00008c

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                    • Size 16KB
                                                                    • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00008d

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                    • Size 20KB
                                                                    • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_00008e

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                    • Size 36KB
                                                                    • SHA256 73ab8b2905a87ad861c032cbec7c56dfbb7edfa4ef9fc06aab056a37e4e6f09d
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f_0000ad

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad
                                                                    • Size 39KB
                                                                    • SHA256 cd522e57be6d484abf0ee0b34a98b46cec33ac240df81363667ae993ab7f9d9c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                    • Size 3KB
                                                                    • SHA256 c11badfb0d22856cae8dd9e92e78409e7cc21136fada4a6f412acce96e070cca
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                    • Size 16KB
                                                                    • SHA256 f75c4db20e0b820fae7dc10d5a03fa406f08bbe9e6c10556fe9be7d2a915f123
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                    • Size 2KB
                                                                    • SHA256 68781e97cdd342225a363a0aca6708951e492cb54f5c47fb247dcdf05ff5917c
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    4c7d90e9-81f6-4a2c-a299-3359640fb865.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\4c7d90e9-81f6-4a2c-a299-3359640fb865.tmp
                                                                    • Size 2B
                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                    • MD5 SHA1 SHA512

                                                                    MANIFEST-000001

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_chatgpt.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                    • Size 23B
                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                    • MD5 SHA1 SHA512

                                                                    16f78035-1335-423f-b839-7e55b2479472.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\16f78035-1335-423f-b839-7e55b2479472.tmp
                                                                    • Size 4KB
                                                                    • SHA256 ef9c1679d429dd27c60136adee8f9a18dccc99dc2a9bf1d7d3f75f80ea70ae02
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    457efb80-6231-4e06-b03c-d5ab18e44ae0.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\457efb80-6231-4e06-b03c-d5ab18e44ae0.tmp
                                                                    • Size 40B
                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                    • MD5 SHA1 SHA512

                                                                    5782236c-e4e8-4cf7-99d5-2b953dead484.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5782236c-e4e8-4cf7-99d5-2b953dead484.tmp
                                                                    • Size 8KB
                                                                    • SHA256 732824796ad5d8a1474e96cbf338cc2a249656b6329a2a59f973527a750915a2
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    6483e4c1-7b32-45fd-9075-c3c3a2cda4f4.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\6483e4c1-7b32-45fd-9075-c3c3a2cda4f4.tmp
                                                                    • Size 9KB
                                                                    • SHA256 6e0ad3650b41682f1bf8f3a74c1aae7ee9db113e245cd465318751990689b6a1
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    8145e0db-de5f-4e18-bab3-044d3e19da00.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8145e0db-de5f-4e18-bab3-044d3e19da00.tmp
                                                                    • Size 8KB
                                                                    • SHA256 f6a489e13e74a953d1f51d9791094614d1275d658a2d806f987e374b00f55d57
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    b5c57bbf-90b0-418c-b92e-b220d86624f2.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\b5c57bbf-90b0-418c-b92e-b220d86624f2.tmp
                                                                    • Size 2B
                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                    • MD5 SHA1 SHA512

                                                                    bc489e5b-cc95-4c14-a8a0-635793bfeb3c.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\bc489e5b-cc95-4c14-a8a0-635793bfeb3c.tmp
                                                                    • Size 3KB
                                                                    • SHA256 4f9ad754f2314267918f44bc0e8f1bdded27f07ec9fa6c897606fba14ea7ba88
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\54a9bfaf-9d90-41af-bff1-13eefb431751\index-dir\temp-index
                                                                    • Size 2KB
                                                                    • SHA256 af1e2de1cc89eef60a526bdb88d4e13dcc96ecb53e7026407802fa51b23db947
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\54a9bfaf-9d90-41af-bff1-13eefb431751\index-dir\the-real-index
                                                                    • Size 48B
                                                                    • SHA256 2196f606430a1c4350d48d07007c1f63f9495c9313c38311789a50f72034719e
                                                                    • MD5 SHA1 SHA512

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7e678847-4a8a-4ce6-b0bf-b4917aedfd15\index-dir\temp-index
                                                                    • Size 576B
                                                                    • SHA256 a0c93133d3f35d72ddfb843d254c9a0c68f95f1ece9351f30ad382577e651051
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\7e678847-4a8a-4ce6-b0bf-b4917aedfd15\index-dir\the-real-index
                                                                    • Size 576B
                                                                    • SHA256 a0780dab822d052b2ab79bf1c6236fc3c51bed48121ce4193bf6d65c428b766d
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                    • Size 386B
                                                                    • SHA256 6aac354b7507ee126f2351065670289fe00372939fc9df99dd74f89825851226
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                    • Size 259B
                                                                    • SHA256 2a0b81800dd21e1a048549089ba26a64b3f870904e891c2d0865e18925514671
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                    • Size 488B
                                                                    • SHA256 166fddec8f427269a80309cc836a89dc54bc11060697f8c4297d908720ef0166
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                    • Size 161B
                                                                    • SHA256 3dd40b93ef8b07707ae51549fdf2c6ea6d2bb946d73e485166dc9c3dd7e21aa3
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
                                                                    • Size 138B
                                                                    • SHA256 9403c950ec049acf67e1c95bce510a17154f9f12c5ceb3b72a1a00e20c9ef550
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt.tmp
                                                                    • Size 233B
                                                                    • SHA256 73ac2383aec04455c82de9aaaf9122be5cd5d281ad7c8229a05b40bde4e41c2f
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt.tmp
                                                                    • Size 226B
                                                                    • SHA256 28024d8ad8e796d2c41f6565ce314a78bb3227166c536d56c95cb30032aa9e81
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                    • Size 72B
                                                                    • SHA256 845cc6e11bff28269d09ceccbcd4fe5c0ae28f52c8da6a5f4296621208256728
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                    • Size 48B
                                                                    • SHA256 dd5856c1e3caf6bf5e654c5f7b5d78fd78c549107f5c749b3e3d2d6e4f052858
                                                                    • MD5 SHA1 SHA512

                                                                    CURRENT

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                    • Size 16B
                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                    • MD5 SHA1 SHA512

                                                                    sync_diagnostic.log

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                    • Size 23KB
                                                                    • SHA256 a9114cc87072733b35e1ac1157687d8f0afe4471472ba848aa9db0deb5c08af1
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    MANIFEST-000001

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                    • Size 41B
                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                    • MD5 SHA1 SHA512

                                                                    index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\81359ca8-03a0-491d-96db-b4c4c9e92260\index
                                                                    • Size 24B
                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                    • MD5 SHA1 SHA512

                                                                    temp-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\81359ca8-03a0-491d-96db-b4c4c9e92260\index-dir\temp-index
                                                                    • Size 72B
                                                                    • SHA256 c4db64649c8ec1e8024fbb372d8d26ff34a79a11447c513cd18eee7988c49583
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    the-real-index

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\81359ca8-03a0-491d-96db-b4c4c9e92260\index-dir\the-real-index
                                                                    • Size 48B
                                                                    • SHA256 feb1b7becda8a917b1938acd38dc3b1a68498bc72c89f60a58224ccf2665b528
                                                                    • MD5 SHA1 SHA512

                                                                    index.txt

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt
                                                                    • Size 178B
                                                                    • SHA256 e8c20fbbb081533b899e8592ce3e2a6759cb5f44ec53a4b97d771e597257c3fd
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    index.txt.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\5\CacheStorage\index.txt.tmp
                                                                    • Size 91B
                                                                    • SHA256 b2868a378d48dd2d0a8b1f9f0fc91fc8f6c51510152ddd8707ab7b30272eef89
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    bece375e-3601-415d-aaa5-e7e89b2c1e25.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bece375e-3601-415d-aaa5-e7e89b2c1e25.tmp
                                                                    • Size 414B
                                                                    • SHA256 494956c225d651280a5dffd23ca17731dc719a94a8ee9d1597c0a8ff16fbc02e
                                                                    • MD5 SHA1 SHA512 TLSH

                                                                    caf71727-93ec-420c-bc63-3781baf5086f.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\caf71727-93ec-420c-bc63-3781baf5086f.tmp
                                                                    • Size 15KB
                                                                    • SHA256 1ba5680f350e30bc8d6901288de235a04abb5fba7688792aac447a1a7308c471
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    ce2de874-9e14-42e2-a52e-5c0c0df649a7.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ce2de874-9e14-42e2-a52e-5c0c0df649a7.tmp
                                                                    • Size 28KB
                                                                    • SHA256 7e5c0efbe62817fc26e7111fa924548ed0c54e74db7ffb89f5210c999d5de653
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    d9514ddd-ff94-458e-9e14-efc9a9cb43c2.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d9514ddd-ff94-458e-9e14-efc9a9cb43c2.tmp
                                                                    • Size 12KB
                                                                    • SHA256 423db20bff6627fac68b3adbe4c9a80ebe89ff791ee0f33eb0a79ced0897e974
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    e3daffad-1440-4caf-bff6-0c16b78381eb.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e3daffad-1440-4caf-bff6-0c16b78381eb.tmp
                                                                    • Size 6B
                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                    • MD5 SHA1 SHA512

                                                                    Local State

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                    • Size 27KB
                                                                    • SHA256 f9f7b0126e633baf05a0bdab6fbd071485a3512502c5cf835906da0b34cde5d3
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    RevisitationBloomfilter

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                    • Size 392B
                                                                    • SHA256 170190466bc9ae559c93dec2e007b1322b04e5c311612d65ea47aeca7ead9d20
                                                                    • MD5 SHA1 SHA512

                                                                    e5671436-3cda-4a87-ac51-8722a0189960.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\e5671436-3cda-4a87-ac51-8722a0189960.tmp
                                                                    • Size 25KB
                                                                    • SHA256 ef9641a1ed803c28901fb2f34bf1762324f3510b19187b4596cef1c0182347ee
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    f69ea78a-34da-4ebb-afbf-2f1dab92738a.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f69ea78a-34da-4ebb-afbf-2f1dab92738a.tmp
                                                                    • Size 27KB
                                                                    • SHA256 bb14fbe014078ca0d32b80bb8cd36205e42d9041bde5d1683a2114ac281f6e3c
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                    fbeb4070-75bd-499c-b99d-57851a7857e9.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fbeb4070-75bd-499c-b99d-57851a7857e9.tmp
                                                                    • Size 392B
                                                                    • SHA256 1d8b71fceed566433cbe2ac68b49107f504b60a8d29ffcac9e86c93ca35dc1eb
                                                                    • MD5 SHA1 SHA512

                                                                    fcdd0cd3-2e99-4aad-a370-7719c85b0cdd.tmp

                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fcdd0cd3-2e99-4aad-a370-7719c85b0cdd.tmp
                                                                    • Size 27KB
                                                                    • SHA256 1cf506bacac6c82cbedf673a6c0f4df83685fbbe6247b8365d757af31a18be82
                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH