Resubmissions

27/10/2026, 03:48

261027-ec7qsa1vct3

27/10/2026, 03:45

261027-ebct1s1vaz3

Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    146s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 03:45

General

  • Target
    sample.html
  • Size 233KB
  • Sample261027-ebct1s1vaz
  • SHA256 e1bbbf2e0499dfbab8ae0c4da463c9fbf137b34203c0bee858b2504f6afd7005
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: LoadsDriver 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x328,0x7ffe7a2ac188,0x7ffe7a2ac194,0x7ffe7a2ac1a0
      2⤵
        PID:2696
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1612,i,2911351927519089633,4629786976055062646,262144 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:2
        2⤵
          PID:3488
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,12573215244106579498,12360230313323750362,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=2716 /prefetch:11
          2⤵
          • System Time Discovery
          PID:1512
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2020,i,7047312103504760663,4107064116990589955,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=2864 /prefetch:13
          2⤵
            PID:928
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3632,i,5027502857187578079,8366484893359644439,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
            2⤵
              PID:4788
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3640,i,7357889142234079694,12596099001482780633,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:1
              2⤵
                PID:256
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4348,i,1380506703776497644,4550865836114776088,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=4532 /prefetch:1
                2⤵
                  PID:5544
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4360,i,6093979263435389729,12750881195999311927,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:9
                  2⤵
                    PID:3772
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,8667188491249220822,7946251479971990560,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
                    2⤵
                      PID:4272
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,4521349925220252311,2428087736310408006,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
                      2⤵
                        PID:3956
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,778240536595461928,16394667871269564287,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
                        2⤵
                          PID:1468
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6136,i,778240536595461928,16394667871269564287,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6040 /prefetch:14
                          2⤵
                            PID:2456
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3832,i,12275303039394508576,14475169421672280078,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5220 /prefetch:1
                            2⤵
                              PID:2520
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6764,i,5162079506296278902,2020558903293566627,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
                              2⤵
                                PID:1692
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6776,i,12044958636557777993,10541202617745076137,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=804 /prefetch:14
                                2⤵
                                  PID:480
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,7158115412986912057,4572805006494849008,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
                                  2⤵
                                    PID:3048
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6576,i,4645918267164106022,17155766506224784500,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:14
                                    2⤵
                                      PID:4124
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6928,i,4016149864908657673,12862587245626914626,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6768 /prefetch:1
                                      2⤵
                                        PID:5584
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=2100,i,14655260258756445805,782855443735089033,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:1
                                        2⤵
                                          PID:4556
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=2744,i,13340712063182206556,476141748825961332,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=3416 /prefetch:1
                                          2⤵
                                            PID:3940
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=7028,i,12453289273140253281,252687186599423587,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=4496 /prefetch:1
                                            2⤵
                                              PID:5564
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5212,i,7029472401569329554,15543805848698336832,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=3380 /prefetch:1
                                              2⤵
                                                PID:4420
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3836,i,155462508842451130,10973031408834779346,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
                                                2⤵
                                                  PID:2644
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5076,i,9685313472636946506,18128523668856487309,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5108 /prefetch:1
                                                  2⤵
                                                    PID:2288
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4156,i,3796954354124727143,12482201722021194094,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=4348 /prefetch:1
                                                    2⤵
                                                      PID:712
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7152,i,8985487082515526828,11428073959211507069,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:1
                                                      2⤵
                                                        PID:5360
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7432,i,85312695922693387,2754300300005834339,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:1
                                                        2⤵
                                                          PID:4140
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7268,i,14706071501415887124,8360746666000511140,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:1
                                                          2⤵
                                                            PID:1008
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7484,i,13321466823039076560,18152224869488910119,524288 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:14
                                                            2⤵
                                                              PID:2104
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7652,i,14071196519188155657,5560343869912911832,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7628 /prefetch:1
                                                              2⤵
                                                                PID:772
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7804,i,11579553901353126789,15096451375628359019,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7828 /prefetch:1
                                                                2⤵
                                                                  PID:4060
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7664,i,9866187250701877522,4397491479844740853,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7668 /prefetch:1
                                                                  2⤵
                                                                    PID:1176
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=2628,i,6205511952440055588,11265619448094836682,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:1
                                                                    2⤵
                                                                      PID:1292
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5520,i,14513421314402415827,14328803538171557744,262144 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:10
                                                                      2⤵
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:2900
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5540,i,14772149087969147943,2316240754653336874,2097152 --field-trial-handle=2356,i,6991719217919627335,10007914123117913670,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
                                                                      2⤵
                                                                        PID:3992
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                      1⤵
                                                                        PID:4552
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                        1⤵
                                                                          PID:2428

                                                                        Network

                                                                              MITRE ATT&CK Enterprise v16

                                                                              Replay Monitor

                                                                              Loading Replay Monitor...

                                                                              Downloads

                                                                              15487eec-fc98-4c1f-adcb-71d1f434cb12.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15487eec-fc98-4c1f-adcb-71d1f434cb12.tmp
                                                                              • Size 37KB
                                                                              • SHA256 7dad341771fdcd97bd99c7e1cd731091ec7b747383ef5d70ac0ede98e5a68647
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              4f7bfdb5-aa51-484c-851c-b7cd2d3923fb.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4f7bfdb5-aa51-484c-851c-b7cd2d3923fb.tmp
                                                                              • Size 392B
                                                                              • SHA256 96445fb6d4f200b689f979eacb302c024416025a0031f9df29dcfec95756a5e4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 a201096456be1e380b7687844e70aa8e2d987a06740acf66db0d56e000a3b50d
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              settings.dat

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                              • Size 280B
                                                                              • SHA256 4123fa2cc2e73053b7602d1d53a57b01f3a6cd8872729fcd7ed66886082b1b99
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              04660a49-9bb8-40fd-b400-9eb934e8e88c.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\04660a49-9bb8-40fd-b400-9eb934e8e88c.tmp
                                                                              • Size 70KB
                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              0c695933-0edf-46a6-a1de-a6c551ecfb45.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0c695933-0edf-46a6-a1de-a6c551ecfb45.tmp
                                                                              • Size 15KB
                                                                              • SHA256 cc23d9504eb37aa8b403c0bd878e880ccc2360e3f0a71648e0f1e112a078b85a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              13fc4e65-432e-448e-9256-eb63be078a75.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\13fc4e65-432e-448e-9256-eb63be078a75.tmp
                                                                              • Size 11KB
                                                                              • SHA256 0c2de9ed7e30963b0080616b79ba9ed6251dcab8bd36afd592ce3bb7b83877d8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              28eec425-6c5d-4247-b210-dd741ef2d2c4.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\28eec425-6c5d-4247-b210-dd741ef2d2c4.tmp
                                                                              • Size 12KB
                                                                              • SHA256 ad70f524bf10fbbff41e7dcaeb90d53653b6c6f15d285828b58346c3d5f62ac8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              7140d4c0-cba0-4aa4-a846-51292f853c78.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7140d4c0-cba0-4aa4-a846-51292f853c78.tmp
                                                                              • Size 23KB
                                                                              • SHA256 579efb7bd8f21080a5741fcb449479f868c6249d09c4fffef0ee64ad5e4029a6
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              894b09e5-2a87-476b-8dd2-ff4a00f7fce3.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\894b09e5-2a87-476b-8dd2-ff4a00f7fce3.tmp
                                                                              • Size 14KB
                                                                              • SHA256 1a3e45721b7d296a16bad766220ad3e071952fd0e3f09b74cdc1b25054a2004d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              903868ad-1a02-42e6-a700-8041556f8766.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\903868ad-1a02-42e6-a700-8041556f8766.tmp
                                                                              • Size 18KB
                                                                              • SHA256 e35d58cdef9b7b1282abe685546c30937da0b9f994f0912aaca3722e91eaaa9c
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00005f

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                              • Size 27KB
                                                                              • SHA256 f517e3c6facb8c02c6d4598e03aa12e148a20d36c7913b9bbbaeae9289b1569d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000060

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000060
                                                                              • Size 120KB
                                                                              • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000061

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000061
                                                                              • Size 119KB
                                                                              • SHA256 f246344adf88d0117ef128df566d6aab96b5895e05ad2133ad2c61749db225e3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000062

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000062
                                                                              • Size 31KB
                                                                              • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000063

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000063
                                                                              • Size 240KB
                                                                              • SHA256 b56ada64ba1ae6589055623c7b2f41dc13ff422e6b4d26b15aee8dcd7e84c6c8
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000064

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                                              • Size 101KB
                                                                              • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000065

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                              • Size 611KB
                                                                              • SHA256 b2fbb06e4e66d483fcf61dc52c1f1b6fd8de10b6e722f6fb12f52f63a3eced47
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000066

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                              • Size 45KB
                                                                              • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000067

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                              • Size 102KB
                                                                              • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000068

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000068
                                                                              • Size 20KB
                                                                              • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000069

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                              • Size 16KB
                                                                              • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00006a

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                              • Size 36KB
                                                                              • SHA256 587d759e0bef559fad4ccf0ee6bedd2eec6e5ed728f4a617d81de910d05aa648
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00006c

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
                                                                              • Size 71KB
                                                                              • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000071

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071
                                                                              • Size 16KB
                                                                              • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000072

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072
                                                                              • Size 24KB
                                                                              • SHA256 61a68bab33afe5cc259bd17756c574217b61a01fef044f233e0edadba5af04b2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000073

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
                                                                              • Size 16KB
                                                                              • SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000074

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
                                                                              • Size 34KB
                                                                              • SHA256 f6863799bd577d21fa60f1cae27e16366eb899e212934eb69736019a0c3287fa
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000075

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                              • Size 33KB
                                                                              • SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00007c

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                                                              • Size 50KB
                                                                              • SHA256 83681ad4609335f61713a32a50c648d609f11257fa30b8ed46c924838c48630e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000080

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                              • Size 20KB
                                                                              • SHA256 4433076939bd87e83d9910dfec4cba297c7dbf3881626fda3eb8e66dc5de6866
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000081

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
                                                                              • Size 17KB
                                                                              • SHA256 d09667ffe824b8499ff3afc42aee7f8de12778109f62dd7277a719870e9e12db
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000088

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                              • Size 39KB
                                                                              • SHA256 a3a6b80605e30311dcb005105df72e46ccfafc0e376efcfa142e602017868fad
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_00008a

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                              • Size 44KB
                                                                              • SHA256 ddb2a6ab6783263a91b2a070d51421c1cb61ef5a24f575ba91e03ae61056904e
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000093

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                              • Size 60KB
                                                                              • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000094

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                              • Size 19KB
                                                                              • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000095

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                              • Size 68KB
                                                                              • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000096

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                              • Size 63KB
                                                                              • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              f_000097

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                              • Size 45KB
                                                                              • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                              • Size 5KB
                                                                              • SHA256 b3bc0c6ec322f9d0e2655537ed82738fb570355301b9373b4eefc8c546d4f47b
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                              • Size 2KB
                                                                              • SHA256 4110a13e37ff58bbd3555b24c844af0846be01b2e79d0a7fff97a9c74219ddca
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              30b2fd10-06c4-45c5-b3cf-37d829cb38c8.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\30b2fd10-06c4-45c5-b3cf-37d829cb38c8.tmp
                                                                              • Size 2B
                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                              • MD5 SHA1 SHA512

                                                                              LOG.old

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
                                                                              • Size 343B
                                                                              • SHA256 a5c7f147f7524b5f408c3e768b72053715fb9921c38d6e41f6ac2eab5e551da4
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                              • Size 23B
                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                              • MD5 SHA1 SHA512

                                                                              0c9dc38e-11d7-475b-8517-d7bd6991b884.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\0c9dc38e-11d7-475b-8517-d7bd6991b884.tmp
                                                                              • Size 10KB
                                                                              • SHA256 9f8acffe607033d0db2a416c1cba74232aad6da81a5d784e2e1f1188f3e1be11
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              2384669c-ddbc-40bc-89bd-c709efe3c2bc.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2384669c-ddbc-40bc-89bd-c709efe3c2bc.tmp
                                                                              • Size 2B
                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                              • MD5 SHA1 SHA512

                                                                              27eed9a4-d38d-4575-a4a7-152cbe5d5fc9.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\27eed9a4-d38d-4575-a4a7-152cbe5d5fc9.tmp
                                                                              • Size 208B
                                                                              • SHA256 91dad135be4b9e6faa61e7b1074b5ced5905190b28a87ed2db741da64cb401fc
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              2930b539-977b-4af5-9591-5f4976a201aa.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2930b539-977b-4af5-9591-5f4976a201aa.tmp
                                                                              • Size 11KB
                                                                              • SHA256 0a857168575cee0c82b847b44b2fba101340e9a92ceb431981d29b1e465978e2
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              577235a5-5e19-4bfc-952d-8ade43d63cbe.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\577235a5-5e19-4bfc-952d-8ade43d63cbe.tmp
                                                                              • Size 209B
                                                                              • SHA256 ddea831fd015b5833ea7f346474337eb25272ef6628ff57c47dc1f009b5f5429
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              Sdch Dictionaries

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                              • Size 40B
                                                                              • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                              • MD5 SHA1 SHA512

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5e71fea8-543a-42ef-9f62-494a5ab107a7\index-dir\temp-index
                                                                              • Size 72B
                                                                              • SHA256 5ff3ebf789ecec88c3c6ecf3f8e0d63297bdc5e873f1c8868b8daadb2cca0683
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5e71fea8-543a-42ef-9f62-494a5ab107a7\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 5dc22eb322951598daed021f6ec90b96349efa5c991ec211428e0820b31dac1b
                                                                              • MD5 SHA1 SHA512

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8b47dd11-9671-445a-8372-cbb7214fd4b6\index-dir\temp-index
                                                                              • Size 120B
                                                                              • SHA256 bc2615d22d3ff617675678db211db007a4d1d15fd2264582c0f6d780cc0980cf
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\8b47dd11-9671-445a-8372-cbb7214fd4b6\index-dir\the-real-index
                                                                              • Size 120B
                                                                              • SHA256 0aa60652305194ac3a976983ad5e2a8ad7057b0438dc82c28b7815518589a3fa
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\961a2d12-97d9-4fd3-80bb-27f7194ace45\index-dir\temp-index
                                                                              • Size 2KB
                                                                              • SHA256 4df29b23d2e076a470f43cf9199457b133e1906b6e38adc0984a5ba40e24f3e2
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\961a2d12-97d9-4fd3-80bb-27f7194ace45\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 26a523d08c8b7ff11e8e7265d165f3824eba4bdd62d8024e53929d6e80107905
                                                                              • MD5 SHA1 SHA512

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\temp-index
                                                                              • Size 72B
                                                                              • SHA256 4d62208c8cd50d1bfb42eba3924a5fd78f02db623c99eb028da2d4359718fc4b
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ad720378-3157-4ca5-920b-a853e74af7cb\index-dir\the-real-index
                                                                              • Size 72B
                                                                              • SHA256 87080e6d8f639988891d5ed4809fcac394371d08603b88ed544a5d70bc862e20
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca41f3d8-f2c1-4afc-9291-56e5daf5b231\index-dir\temp-index
                                                                              • Size 72B
                                                                              • SHA256 5214d31639ce7f2b0eee422b2931667264aac99eef5c7bfe0b18c5b9107a4848
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\ca41f3d8-f2c1-4afc-9291-56e5daf5b231\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 3242b4aa416a76b83bd97346f234380289417b34c9629004195c2a311e1a95d2
                                                                              • MD5 SHA1 SHA512

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 161B
                                                                              • SHA256 54fba0229528887631ae84223e305953e459510cd45ef7797a2c6afeee11c6b6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 487B
                                                                              • SHA256 950843055f449bf31ffef2d40c7241e51f0c41720d161769f7ff5f803e1c6b58
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 281B
                                                                              • SHA256 153f874dca1e3c3c85ae438c9d2bd283f43a3d96156ef05de36b6cae350ab2c6
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 385B
                                                                              • SHA256 8356196f71d4a72925bd85f0cd4bd6edc335fe0158abf4b6692fab6098514fa1
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 399B
                                                                              • SHA256 99d2d733dff37981225df1ae09c38e4ae10ab233200067ba8c9c6199d1e25491
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 258B
                                                                              • SHA256 e62350c82dcdf4883a0bf222d4ca61f52190f16f83a02451344d8dac64cecc6a
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              index.txt.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                              • Size 394B
                                                                              • SHA256 9a5130b909e71b98101f95bac9a09befbc5943376d8059b33ad2f8908c7d8927
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              temp-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                              • Size 72B
                                                                              • SHA256 215e997128b44d880d04d40e7a6bff102ed8333ba1602e287c85b187c99832b7
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              the-real-index

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                              • Size 48B
                                                                              • SHA256 23e3a34557800607f72244781e054df3e3dcd410536f81b033d7c75d117965c5
                                                                              • MD5 SHA1 SHA512

                                                                              CURRENT

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                              • Size 16B
                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                              • MD5 SHA1 SHA512

                                                                              MANIFEST-000001

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                              • Size 41B
                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                              • MD5 SHA1 SHA512

                                                                              OperationConfig

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                              • Size 3KB
                                                                              • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              e21f073d-a791-4db5-ba23-1c02cfd46993.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\e21f073d-a791-4db5-ba23-1c02cfd46993.tmp
                                                                              • Size 22KB
                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              Local State

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                              • Size 33KB
                                                                              • SHA256 88400874b64c3991226deac371e48d3130378326485b9692dc6022341dd1877d
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              RevisitationBloomfilter

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                              • Size 392B
                                                                              • SHA256 b6539131e672b28ebff44e650e541a187c01c0d7b039106b273e3b26c043d317
                                                                              • MD5 SHA1 SHA512

                                                                              a4bafbbb-9756-4a8f-b9ba-11c23e485687.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a4bafbbb-9756-4a8f-b9ba-11c23e485687.tmp
                                                                              • Size 33KB
                                                                              • SHA256 609514d122a6d52a8dbd7c61c8a0502eb0454e26e3b5fe569507ba814426f5e7
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              c6c4a7d5-7647-47b0-9007-41ec8de60bb1.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c6c4a7d5-7647-47b0-9007-41ec8de60bb1.tmp
                                                                              • Size 392B
                                                                              • SHA256 6ab4387bb2770493a2c834d1cefb1b7d1085b78de8f03f5eee1ac2c68946b79f
                                                                              • MD5 SHA1 SHA512 TLSH

                                                                              d8f53595-1a29-49ef-a0a7-45406f78e0ba.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d8f53595-1a29-49ef-a0a7-45406f78e0ba.tmp
                                                                              • Size 38KB
                                                                              • SHA256 c5bbfc273f60b8a35dd668c1d7f0f3cbec276b7c9f5914312d07dda722c468f0
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                              eccc75bb-bb01-48c7-88d5-d37f1b3ef540.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\eccc75bb-bb01-48c7-88d5-d37f1b3ef540.tmp
                                                                              • Size 13B
                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                              • MD5 SHA1 SHA512

                                                                              f4a79cfe-9722-4266-8b7e-3b37ff06bbd7.tmp

                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f4a79cfe-9722-4266-8b7e-3b37ff06bbd7.tmp
                                                                              • Size 41KB
                                                                              • SHA256 32ce6045d701720a0fd73b3d8e0a0699a44b7574b62f8e97e6d42e49691dad12
                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH