Resubmissions

27/10/2026, 03:48

261027-ec7qsa1vct3

27/10/2026, 03:45

261027-ebct1s1vaz3

Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 03:48

General

  • Target
    sample.html
  • Size 233KB
  • Sample261027-ec7qsa1vct
  • SHA256 e1bbbf2e0499dfbab8ae0c4da463c9fbf137b34203c0bee858b2504f6afd7005
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: LoadsDriver 5 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 18 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1072
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x270,0x7ff806adc188,0x7ff806adc194,0x7ff806adc1a0
      2⤵
        PID:1144
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1976,i,1579013007686125774,10190300899948420614,262144 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=2484 /prefetch:2
        2⤵
          PID:4108
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,15257168278347073001,9351715020050538885,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=2524 /prefetch:11
          2⤵
          • System Time Discovery
          PID:4764
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3528,i,11040142836464015925,8365920014800360041,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
          2⤵
            PID:2852
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3532,i,5502153465945409515,14154611414161333401,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:1
            2⤵
              PID:6108
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2596,i,10087825432999450041,17010164735487776526,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=3164 /prefetch:13
              2⤵
                PID:1600
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4308,i,1603868548344449129,5223634876731375829,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:1
                2⤵
                  PID:1592
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4320,i,9749996844781999305,5358085699285217240,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:9
                  2⤵
                    PID:1296
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,12321579109699132958,5122141523302176919,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:14
                    2⤵
                      PID:1820
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5372,i,5727290309634563078,8009611884342972842,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
                      2⤵
                        PID:2704
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,18007209868295614994,11241510923550624025,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
                        2⤵
                          PID:1696
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5992,i,18007209868295614994,11241510923550624025,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6008 /prefetch:14
                          2⤵
                            PID:3076
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3652,i,11793593281135535166,12017509679960830327,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=4808 /prefetch:1
                            2⤵
                              PID:4736
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6720,i,11889504523584817307,8436836492319208001,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
                              2⤵
                                PID:4664
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6740,i,6576322096602715787,4962274372599977022,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:1
                                2⤵
                                  PID:5752
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6524,i,623681196522383983,11385147660994873298,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
                                  2⤵
                                    PID:4136
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7080,i,5138584676825116249,8378578611792592009,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:14
                                    2⤵
                                      PID:4252
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,8383296253491799125,5722363844581702297,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=1412 /prefetch:14
                                      2⤵
                                        PID:6096
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1256,i,5857027123264203378,14615149157264894228,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=1248 /prefetch:14
                                        2⤵
                                          PID:2064
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1260,i,16876970279866913341,8026165617887181643,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:14
                                          2⤵
                                            PID:5964
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=1256,i,2493802945317111540,208746454935740970,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6888 /prefetch:1
                                            2⤵
                                              PID:4276
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=4964,i,4055563456941710191,7933592599064144387,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=4988 /prefetch:1
                                              2⤵
                                                PID:6064
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6268,i,11497196960171689110,6759755536111827643,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:1
                                                2⤵
                                                  PID:1436
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5008,i,17529685329248237481,11054935501125053969,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:1
                                                  2⤵
                                                    PID:5912
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6516,i,5309422221903954060,9468893647507130573,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:1
                                                    2⤵
                                                      PID:4160
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6904,i,13682954462003625515,3831089999677658243,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:14
                                                      2⤵
                                                        PID:5644
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7300,i,9577367215220317447,12343966178277577949,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7332 /prefetch:1
                                                        2⤵
                                                          PID:1020
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7512,i,8048028047028187097,6445906216993870825,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=1392 /prefetch:1
                                                          2⤵
                                                            PID:2588
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7672,i,16993849705953642509,4243459008471923689,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:1
                                                            2⤵
                                                              PID:4340
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7356,i,14042702425188521103,1601083564301215496,2097152 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                                              2⤵
                                                                PID:4896
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7848,i,5626712834268407909,1846621728406980305,524288 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7844 /prefetch:12
                                                                2⤵
                                                                  PID:2288
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=7708,i,7010403691110660706,1354357099367490710,262144 --field-trial-handle=2492,i,8657566074250703778,748922046845883918,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:10
                                                                  2⤵
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  PID:1920
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                1⤵
                                                                  PID:1188
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                  1⤵
                                                                    PID:3720

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        03a3cdde-9d9d-4702-a4c6-e68197f91dd5.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\03a3cdde-9d9d-4702-a4c6-e68197f91dd5.tmp
                                                                        • Size 392B
                                                                        • SHA256 7b7c3fa6f1a7ba907aff735b2b65a388898f84e4b1e8669a54d5ee3063f5efe8
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        1787427f-99e0-4ba4-95fb-f51f7e0e2e8a.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1787427f-99e0-4ba4-95fb-f51f7e0e2e8a.tmp
                                                                        • Size 37KB
                                                                        • SHA256 fc343f732d7dda811aa2f0aecd45fd6ac7feb86e1e58efa9014e92ed45763f14
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        2db22e9c-9dc8-4021-9c20-2ccc085dd48f.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\2db22e9c-9dc8-4021-9c20-2ccc085dd48f.tmp
                                                                        • Size 392B
                                                                        • SHA256 b105f56a5ba802e06af5ba5f26429b769b2b622ff375ef6666cdb8d5ad7772bb
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        3aac825f-2bec-4680-b18f-a24dfb8c799f.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3aac825f-2bec-4680-b18f-a24dfb8c799f.tmp
                                                                        • Size 392B
                                                                        • SHA256 9c9491661c650165eb7f2de4f86948ca083cf17bbd08893b7115c68c879f85b2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        4056f1fb-47ef-4b95-8587-f2436c6f4752.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4056f1fb-47ef-4b95-8587-f2436c6f4752.tmp
                                                                        • Size 392B
                                                                        • SHA256 2d2ba13030f7d37f87849e99b42a2794abb7fd5d19a1bd40f08ec0e4a3e671f2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        58ff0a71-ccb6-4eb3-b982-92840ef1b0f4.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\58ff0a71-ccb6-4eb3-b982-92840ef1b0f4.tmp
                                                                        • Size 41KB
                                                                        • SHA256 9d3f6750884a334eba69da4396219c301e1068a27969d1b587c486b409f3b494
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        7af0f529-6b37-44bf-a695-8efc48dee3c2.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\7af0f529-6b37-44bf-a695-8efc48dee3c2.tmp
                                                                        • Size 33KB
                                                                        • SHA256 343c183bc02cf0c94eeb4fcbc451f53b27ce0657ab3ac7575a9dae46ae6b21bb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        8ee895e4-5666-456f-853d-efec28a75468.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ee895e4-5666-456f-853d-efec28a75468.tmp
                                                                        • Size 392B
                                                                        • SHA256 80470ad4f9870ad2561fab2dc4d5d0eda28896ce56e486b2b6d7a329b42b54e7
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 932f01682de6215b2c3b5faeb96a07b886e28db2ff6f8242a36da556c4292464
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 a0b193400a27c0cdf94ac11f5fb5b0747828b5b461169cefeffb96191b9e4834
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        2b9b5339-068f-49e2-816c-4c47884d4117.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b9b5339-068f-49e2-816c-4c47884d4117.tmp
                                                                        • Size 14KB
                                                                        • SHA256 04776ccba19df56145d649bee835a98ea303b32a781093f6ed699b438a2483b2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        393a0f73-018c-4873-8b14-1bf4e35fdfa7.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\393a0f73-018c-4873-8b14-1bf4e35fdfa7.tmp
                                                                        • Size 11KB
                                                                        • SHA256 f00ab6901ad7b5973626ad6cb48dcfcddb37c3596deb628c3d9135f566694c56
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        5f6fe4ef-fba8-4a7f-a2ed-55d9aa1b1532.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f6fe4ef-fba8-4a7f-a2ed-55d9aa1b1532.tmp
                                                                        • Size 16KB
                                                                        • SHA256 a75c3fc64b9522a2b049d33e728ab3215bb6dbb53a7aeaf3b85d63bc15a796e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        917483d3-f9d7-4f98-b485-b48cabc87930.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\917483d3-f9d7-4f98-b485-b48cabc87930.tmp
                                                                        • Size 23KB
                                                                        • SHA256 e8a11a2c7a0c46965c23112bbdbbd98cff99bff5d402b2dc1802af49e767b14d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000034

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000034
                                                                        • Size 27KB
                                                                        • SHA256 f517e3c6facb8c02c6d4598e03aa12e148a20d36c7913b9bbbaeae9289b1569d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000035

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000035
                                                                        • Size 120KB
                                                                        • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000036

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000036
                                                                        • Size 119KB
                                                                        • SHA256 6507ca4fdd64e0dd4e4c28c6d1dfbff5144d5b567dc282b0699e7753590855c9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000037

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000037
                                                                        • Size 31KB
                                                                        • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000038

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000038
                                                                        • Size 101KB
                                                                        • SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000039

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000039
                                                                        • Size 240KB
                                                                        • SHA256 b56ada64ba1ae6589055623c7b2f41dc13ff422e6b4d26b15aee8dcd7e84c6c8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003a

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003a
                                                                        • Size 45KB
                                                                        • SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003b

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003b
                                                                        • Size 611KB
                                                                        • SHA256 b2fbb06e4e66d483fcf61dc52c1f1b6fd8de10b6e722f6fb12f52f63a3eced47
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003c

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003c
                                                                        • Size 102KB
                                                                        • SHA256 20bce100e19acab922d5019ee55c6dca965b584b716e0e3479990bb99ca89aef
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003d
                                                                        • Size 20KB
                                                                        • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003e
                                                                        • Size 16KB
                                                                        • SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00003f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00003f
                                                                        • Size 36KB
                                                                        • SHA256 587d759e0bef559fad4ccf0ee6bedd2eec6e5ed728f4a617d81de910d05aa648
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000041

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000041
                                                                        • Size 71KB
                                                                        • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000046

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000046
                                                                        • Size 16KB
                                                                        • SHA256 ebcc0081f9761bb207ec35209d268f723a058c168013f15b1a401c92e25934ec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000047

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000047
                                                                        • Size 34KB
                                                                        • SHA256 f6863799bd577d21fa60f1cae27e16366eb899e212934eb69736019a0c3287fa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000048

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000048
                                                                        • Size 16KB
                                                                        • SHA256 71560d451ec7c26865bd311c2dd866bd589cd7c8db7249bb4da38c88c95f79ea
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000049

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000049
                                                                        • Size 24KB
                                                                        • SHA256 61a68bab33afe5cc259bd17756c574217b61a01fef044f233e0edadba5af04b2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00004a

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004a
                                                                        • Size 33KB
                                                                        • SHA256 e8e5b597f340afda078bdbd677a57db88a7531e95c9504aa65560678fc2aa023
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00004f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00004f
                                                                        • Size 43KB
                                                                        • SHA256 f6cadc4c6606502d17d13f92020fe235bd42de2839dc26144b9f02482e7f23a8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000050

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000050
                                                                        • Size 50KB
                                                                        • SHA256 83681ad4609335f61713a32a50c648d609f11257fa30b8ed46c924838c48630e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000051

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000051
                                                                        • Size 46KB
                                                                        • SHA256 f6457580bb82788151956b476f4b89596646d6c0103f44c07146b5779a463220
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000053

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000053
                                                                        • Size 137KB
                                                                        • SHA256 4934664d9a7b8f85496eb7f5cfe049dea55d40ab2f4c49fbedfdfc1538526c06
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000056

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000056
                                                                        • Size 114KB
                                                                        • SHA256 059cf1831e3f50e63377e1f0a95a4a5b73efe5503671c7e83247ace15ce87f69
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00005b

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005b
                                                                        • Size 40KB
                                                                        • SHA256 b0cf791a4cc0f57006c51e143f0f5580b35be88109d01cd4c0bb60a2d307d939
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00005d

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                        • Size 17KB
                                                                        • SHA256 d09667ffe824b8499ff3afc42aee7f8de12778109f62dd7277a719870e9e12db
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00005e

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                        • Size 39KB
                                                                        • SHA256 a3a6b80605e30311dcb005105df72e46ccfafc0e376efcfa142e602017868fad
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00005f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                        • Size 20KB
                                                                        • SHA256 4433076939bd87e83d9910dfec4cba297c7dbf3881626fda3eb8e66dc5de6866
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000065

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                        • Size 83KB
                                                                        • SHA256 5dcece7048429ad1156e503bdb92ed75f4fc294cbcc8c7218f077724c81a9344
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000066

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                        • Size 22KB
                                                                        • SHA256 a45832b8e10d9ea89050ff05f8a6c8fa6409d4be74b54ae578e17b053352163d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00006a

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                        • Size 46KB
                                                                        • SHA256 85d96a5ce16e0772ca2c1fca484b3eeafa9f56632b3760e2a1fd5cf91f083d2a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_00006f

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
                                                                        • Size 115KB
                                                                        • SHA256 982920be7de71f647f543c3e847cc8f3051affd2e2d81d1d058790b05d4afc7b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000070

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
                                                                        • Size 18KB
                                                                        • SHA256 87712e6c74752d00beaab73015134b3604b3b38eda21ac2a5543b34e17251d82
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000082

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082
                                                                        • Size 60KB
                                                                        • SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000083

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083
                                                                        • Size 19KB
                                                                        • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000084

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084
                                                                        • Size 68KB
                                                                        • SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000085

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                        • Size 63KB
                                                                        • SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        f_000086

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                        • Size 45KB
                                                                        • SHA256 940e937d624dff1d92f851eb934d25d8f553b21ece4ea0cd28ce09a9c26d42a3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                        • Size 3KB
                                                                        • SHA256 9cc229666fe5f9d86731e467c8f5f8ba2ab4d697236c652617a54e1925745b57
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 5KB
                                                                        • SHA256 57a49d51de7605315bb9d9b85fa392d319d3569606cc447543d847f42964eaec
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d1113c89-d814-4015-8479-f1c9907181ce.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\d1113c89-d814-4015-8479-f1c9907181ce.tmp
                                                                        • Size 2B
                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                        • MD5 SHA1 SHA512

                                                                        LOG.old

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG.old
                                                                        • Size 343B
                                                                        • SHA256 a34169f00830a9c342ab9c5edfead4c5717867d7651108a0c443b5f58cbfb356
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                        • Size 23B
                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                        • MD5 SHA1 SHA512

                                                                        3e2b34f7-ac6f-4fe1-8c4c-763ba99371d6.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\3e2b34f7-ac6f-4fe1-8c4c-763ba99371d6.tmp
                                                                        • Size 11KB
                                                                        • SHA256 2fdcb0697361b745e26d0b68387f79ae81aa4b76c2dcce9636f559be82e0dace
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        4303ab3a-0edb-45f8-8a0c-9318f5b3ce96.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4303ab3a-0edb-45f8-8a0c-9318f5b3ce96.tmp
                                                                        • Size 9KB
                                                                        • SHA256 d70164a45e9980cc53dbd99102f3d0ddeb4db17e2877698e60fd81c50bdd48af
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        9d636122-920d-42d1-af06-6c179054d50a.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9d636122-920d-42d1-af06-6c179054d50a.tmp
                                                                        • Size 40B
                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                        • MD5 SHA1 SHA512

                                                                        d0e2c138-5355-4520-84a5-0fe8fea6d5a2.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\d0e2c138-5355-4520-84a5-0fe8fea6d5a2.tmp
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        e7eb2f8b-0ebf-4064-b5e6-b5fdbb49b9bd.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\e7eb2f8b-0ebf-4064-b5e6-b5fdbb49b9bd.tmp
                                                                        • Size 210B
                                                                        • SHA256 dfbd1d0f9ec19644f04c988c4a4b6132071eaef35ddda9befb564e656aa3ea0f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\86215a73-2f1b-4a69-aa89-0a764105e5cb\index-dir\temp-index
                                                                        • Size 2KB
                                                                        • SHA256 866bfe50feed2dcc9f33edea895c88ced3e6e80c842da2134df8cf9b5ae797ab
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\86215a73-2f1b-4a69-aa89-0a764105e5cb\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 6cf32134b83a5648317e78e99ab90534d4535b48088dd17e99b41dbfbd3ed6ed
                                                                        • MD5 SHA1 SHA512

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ab7f86b-43d0-4515-966b-f79ad1212cb2\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 7a27f78a18e471780b1e2f38cb1da08a5ca7e9167ce0bf506bb668563f17560a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ab7f86b-43d0-4515-966b-f79ad1212cb2\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 040b7dada157b41160514749aa6c9641e1fec12e133d045ac3cbec45f96be4c3
                                                                        • MD5 SHA1 SHA512

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8500e5f-e5e0-4acf-8973-1b8aabc079c0\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 11fbb84cbf0f22521e15ff5b635c0f5aa0dac281e6d6c20d68a03e42fdbe001f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8500e5f-e5e0-4acf-8973-1b8aabc079c0\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 a94e795ee8fe8153da10f35a91147f2c8a5e7e0745d151be18f00158c01dfd0c
                                                                        • MD5 SHA1 SHA512

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 388B
                                                                        • SHA256 2c362b57df5fc1ef7d7d051fe0bf147867a99ca8bba34e9d0a47754ab3bfa62c
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 161B
                                                                        • SHA256 cafabe40e1d0113694e061240460aa4d5c845fd17d69b05fe8dcac5cc8f28428
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 399B
                                                                        • SHA256 fcdec9a499657297070bea5ced8a45d5c770ab02a84317c9e0ce93e614f4da4d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 394B
                                                                        • SHA256 337665de2fcbdfb78b63433262a4a20f6b7afbdcbdeb2c4eb22ad430bc6cf970
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 286B
                                                                        • SHA256 9d936009407a02e4d61d91a720f406609936f65a0c2971342a779ff44db2cf67
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        index.txt.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                        • Size 281B
                                                                        • SHA256 ad0ff739218dcdb0d93ccfd88815725a0434eb8c90a4a8af13b577888d7c325f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        temp-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                        • Size 72B
                                                                        • SHA256 88284109d808d6b0acb0ff49ea4fee001d8c09084d81b97e54b4999e0f2efce5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                        • Size 48B
                                                                        • SHA256 1017942e570d89a71674d8aba2a8161bd1cbaa4870bd540e569736c94f1308a3
                                                                        • MD5 SHA1 SHA512

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 4KB
                                                                        • SHA256 af45c920f524389c3401d93095d7123da199904e7a152ad6303a2c173120ad43
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                        • Size 41B
                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                        • MD5 SHA1 SHA512

                                                                        b2dae468-e107-4679-a18d-1b4e34a9e9b2.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b2dae468-e107-4679-a18d-1b4e34a9e9b2.tmp
                                                                        • Size 14KB
                                                                        • SHA256 3d98545feb2b384fc9a3fc549af0dd26c91ffcad6da3f3fa92402a3ae60a3650
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        bf6157d9-da4d-4c1d-9390-b8aa066e5bec.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bf6157d9-da4d-4c1d-9390-b8aa066e5bec.tmp
                                                                        • Size 70KB
                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e0df8f36-33d5-401b-9862-66878faf4300.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0df8f36-33d5-401b-9862-66878faf4300.tmp
                                                                        • Size 13KB
                                                                        • SHA256 0bc0105293013eab05c513678c5ba6f4ab9c5f2897bdde0bf99d39b6941eee78
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e6f2b31e-f4f0-469d-b1da-ce513159f56e.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e6f2b31e-f4f0-469d-b1da-ce513159f56e.tmp
                                                                        • Size 6B
                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                        • MD5 SHA1 SHA512

                                                                        f4909f3c-f36e-4f80-afa1-55a91005e4c0.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f4909f3c-f36e-4f80-afa1-55a91005e4c0.tmp
                                                                        • Size 13KB
                                                                        • SHA256 30c48236770afae27e1f32bdce0490c274f9c39ac434502ae53f1f99c6e740ed
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        OperationConfig

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                        • Size 3KB
                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        fc8915e5-6206-4846-8d66-28fcd90cd57c.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\fc8915e5-6206-4846-8d66-28fcd90cd57c.tmp
                                                                        • Size 22KB
                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        RevisitationBloomfilter

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                        • Size 392B
                                                                        • SHA256 d6c7f2e4100f7351a4655f696455c836512eb5093af384e89ffb9ba1fb4431cd
                                                                        • MD5 SHA1 SHA512

                                                                        a69a75a2-6220-4e76-9ccf-c2f5bd7b53ad.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a69a75a2-6220-4e76-9ccf-c2f5bd7b53ad.tmp
                                                                        • Size 38KB
                                                                        • SHA256 e2fce0bf9304f40fa87bf27e2d6bbe4130196712140277ec01d3a3fe3e939ecd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        db677577-246c-4193-af93-c52add7e7000.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\db677577-246c-4193-af93-c52add7e7000.tmp
                                                                        • Size 33KB
                                                                        • SHA256 10ecc23861cc013555efdca72c50da78573799b12647b98e0da5cd507408e2ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        e50ffa47-23e1-4a18-8de5-90a1b476272d.tmp

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e50ffa47-23e1-4a18-8de5-90a1b476272d.tmp
                                                                        • Size 13B
                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                        • MD5 SHA1 SHA512