Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    02/11/2026, 12:33

General

  • Target
    https://q1wq0z.datadevfuture.buzz/?eqwWAnFXmMjKJ3ufi2XBlPfXwXeqRm
  • Sample261102-prjmlstwas
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 45 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://q1wq0z.datadevfuture.buzz/?eqwWAnFXmMjKJ3ufi2XBlPfXwXeqRm
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3032
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffc9189c188,0x7ffc9189c194,0x7ffc9189c1a0
      2⤵
        PID:4272
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1864,i,7498744221482824538,11461767428011704518,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
        2⤵
        • System Time Discovery
        PID:1812
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1764,i,2616764589442303944,4914662337377459037,262144 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:2
        2⤵
          PID:4544
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,12185356427201842625,9065288296983813228,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=2424 /prefetch:8
          2⤵
            PID:4644
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3416,i,17444183928622537976,14996148336867729904,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
            2⤵
              PID:1676
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3420,i,14925890540213390155,18079741152753178034,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
              2⤵
                PID:3208
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4284,i,5485334554744973940,15621478023756841600,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:1
                2⤵
                  PID:2896
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4348,i,11245176390225619764,16875212021170964439,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4316 /prefetch:2
                  2⤵
                    PID:1416
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,18374718035726814689,13283568814222316651,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5164 /prefetch:8
                    2⤵
                      PID:4720
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,3942512192775610873,8155375330662334455,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
                      2⤵
                        PID:3148
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5548,i,11892218319947735775,3480448503599367034,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:1
                        2⤵
                          PID:1008
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,12709782437155791854,9381145422426690628,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                          2⤵
                            PID:1424
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,12709782437155791854,9381145422426690628,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5868 /prefetch:8
                            2⤵
                              PID:4132
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6432,i,1766983927038829895,13790461052976481189,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6416 /prefetch:8
                              2⤵
                                PID:1544
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6552,i,16961438816559428044,14590222711283338381,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:1
                                2⤵
                                  PID:5404
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6684,i,17305568129579513060,2277093376397503387,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6604 /prefetch:1
                                  2⤵
                                    PID:5412
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6728,i,5082931969811257754,969813138607481095,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6748 /prefetch:1
                                    2⤵
                                      PID:5420
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4308,i,16733051923794729989,17171735457418881906,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
                                      2⤵
                                        PID:5584
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=6960,i,15575999581893126275,5478677324636670964,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:1
                                        2⤵
                                          PID:5644
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6612,i,14721576685762979979,662284540746524617,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
                                          2⤵
                                            PID:5768
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6564,i,2678998403748215926,13793620367714064952,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
                                            2⤵
                                              PID:5832
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6820,i,3847082807262304540,1757208645921644050,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
                                              2⤵
                                                PID:5916
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7112,i,1860469057949121859,16904218660960613024,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
                                                2⤵
                                                  PID:6036
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7448,i,10602620049142094561,3490229647524334317,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7420 /prefetch:1
                                                  2⤵
                                                    PID:5052
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7496,i,1797542604553990684,18382850462116744414,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7516 /prefetch:8
                                                    2⤵
                                                      PID:2544
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7464,i,5958583801152393539,909495448836081891,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:8
                                                      2⤵
                                                        PID:1528
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7492,i,16001187848120308559,6857916390027433931,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:8
                                                        2⤵
                                                          PID:4908
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7520,i,4658109888700662667,18365944119814456635,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:1
                                                          2⤵
                                                            PID:5228
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=2924,i,17357633693388956902,16388917234593774326,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=3632 /prefetch:1
                                                            2⤵
                                                              PID:3308
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5096,i,17255869148229897973,3015519175263124757,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5160 /prefetch:8
                                                              2⤵
                                                                PID:4796
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=7724,i,6971521674613038965,12576799458130512112,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=1984 /prefetch:1
                                                                2⤵
                                                                  PID:4656
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6808,i,16767093470706981733,11196221486839762922,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5312 /prefetch:8
                                                                  2⤵
                                                                    PID:5524
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7256,i,6875088003829775438,15816870481381102408,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:1
                                                                    2⤵
                                                                      PID:5588
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7052,i,16916722387658338976,6773843333099683536,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:1
                                                                      2⤵
                                                                        PID:5700
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6916,i,38236582092636270,15662739259243833637,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
                                                                        2⤵
                                                                          PID:5544
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7012,i,12023859885856695886,16012982971801272723,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
                                                                          2⤵
                                                                            PID:5940
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4884,i,3843648019070443421,10885946872655246050,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7976 /prefetch:8
                                                                            2⤵
                                                                              PID:6004
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5880,i,532078587110619598,1385163105200418507,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
                                                                              2⤵
                                                                                PID:5888
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7184,i,9470963968719021011,12395746504375462897,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7924 /prefetch:1
                                                                                2⤵
                                                                                  PID:984
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=5112,i,8053500367571970940,12683098339502108708,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4340 /prefetch:1
                                                                                  2⤵
                                                                                    PID:5668
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=4896,i,11144808368020274639,15223655145312425551,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7896 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5776
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=6592,i,1568789508180792377,11833805739010405903,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5920
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=7048,i,16783932729642360320,1350674139386204748,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7012 /prefetch:1
                                                                                        2⤵
                                                                                          PID:2952
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=6992,i,10291304298196213525,3129019431894826537,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7948 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4144
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=7124,i,7101183462482864549,12573308090447741332,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6980 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5616
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=4268,i,4676399270756291147,17880358363738238658,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:1
                                                                                              2⤵
                                                                                                PID:6096
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4512,i,286842580294069784,1348403340206037193,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
                                                                                                2⤵
                                                                                                  PID:5932
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=8076,i,4557737560382960153,12875042507933783832,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:5836
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7184,i,1238595835769942474,1316769483532485892,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6924 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5136
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=6736,i,9782392529990952895,5948792908690685665,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7192 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4288
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7180,i,17750381066677720313,7466156217447999183,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:2544
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=5264,i,8817168935294232417,17314511409064042892,2097152 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=7104 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5604
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5960,i,12998449669019116530,2179528373884799202,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:8
                                                                                                            2⤵
                                                                                                              PID:4912
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,4424383445613370799,17234039584586080662,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:8
                                                                                                              2⤵
                                                                                                                PID:5384
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,4424383445613370799,17234039584586080662,524288 --field-trial-handle=2388,i,12968209558957303267,9827007830314475841,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:5332
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                1⤵
                                                                                                                  PID:3768
                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                                                                                                                  1⤵
                                                                                                                  • Checks processor information in registry
                                                                                                                  • Enumerates system info in registry
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                  PID:6104
                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffc914fc728,0x7ffc914fc734,0x7ffc914fc740
                                                                                                                    2⤵
                                                                                                                      PID:5720
                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1748,i,13605346088215942404,3713901162437222387,262144 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1888 /prefetch:2
                                                                                                                      2⤵
                                                                                                                        PID:5152
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2076,i,12743701228638345200,3158184171273735315,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2188 /prefetch:3
                                                                                                                        2⤵
                                                                                                                        • System Time Discovery
                                                                                                                        PID:4316
                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2392,i,13722245569669563061,3003367961779396416,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2588 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:4432
                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3236,i,7341805879587910978,10274025298852594118,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3252 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:5360
                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3432,i,2648447452838917719,8455852077476424967,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3504 /prefetch:1
                                                                                                                            2⤵
                                                                                                                              PID:1044
                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3924,i,17330687651099195565,4327246044998981336,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4472 /prefetch:2
                                                                                                                              2⤵
                                                                                                                                PID:5112
                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4736,i,11102503253926968767,10495593962593495931,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4772 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:6132
                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5552,i,4950302003306033527,13951564384858348772,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5544 /prefetch:8
                                                                                                                                  2⤵
                                                                                                                                    PID:4224
                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5804,i,5186717732760340488,11804487736480014454,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5492 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:1728
                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=4888,i,3244900716431620419,17058482614866187513,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5792 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:220
                                                                                                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3064,i,8149409394742893828,5666749550448572837,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6048 /prefetch:1
                                                                                                                                        2⤵
                                                                                                                                          PID:4584
                                                                                                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=4620,i,3759499820744835015,4291715520954391073,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4860 /prefetch:1
                                                                                                                                          2⤵
                                                                                                                                            PID:4160
                                                                                                                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=3716,i,7104447539039704021,16210018818294741044,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5624 /prefetch:1
                                                                                                                                            2⤵
                                                                                                                                              PID:2336
                                                                                                                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5948,i,8700291870386062926,8578724062645994921,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3936 /prefetch:1
                                                                                                                                              2⤵
                                                                                                                                                PID:4112
                                                                                                                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3248,i,12795591756371924704,4438157726232912806,2097152 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=6088 /prefetch:1
                                                                                                                                                2⤵
                                                                                                                                                  PID:4236
                                                                                                                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5944,i,907421960654296710,18198753675227008044,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5740 /prefetch:8
                                                                                                                                                  2⤵
                                                                                                                                                    PID:2044
                                                                                                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3672,i,16607163795518232689,1679341334544496972,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4684 /prefetch:8
                                                                                                                                                    2⤵
                                                                                                                                                      PID:1008
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6556,i,8962689853958961066,5537336960832086155,524288 --field-trial-handle=1892,i,9921106489632215952,5818158810112955871,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5916 /prefetch:8
                                                                                                                                                      2⤵
                                                                                                                                                        PID:1624
                                                                                                                                                    • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                                                                                                                      "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                                                                                                                      1⤵
                                                                                                                                                        PID:808
                                                                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                        1⤵
                                                                                                                                                          PID:4324

                                                                                                                                                        Network

                                                                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                                                                              Replay Monitor

                                                                                                                                                              Loading Replay Monitor...

                                                                                                                                                              Downloads

                                                                                                                                                              1f1831ce-04c1-40e1-aa89-76ecf2101c17.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\1f1831ce-04c1-40e1-aa89-76ecf2101c17.tmp
                                                                                                                                                              • Size 269KB
                                                                                                                                                              • SHA256 6f0c355f105a2cbf8a733378025df64b70431f22d0c7b190f54e4e7c263e6a65
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              70fbe6af-67d7-474c-9baa-4e5c57a69dd7.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\70fbe6af-67d7-474c-9baa-4e5c57a69dd7.tmp
                                                                                                                                                              • Size 269KB
                                                                                                                                                              • SHA256 5ff07417291f3a5fd470fc0d68aca5f4561e8a4d6721471a46b0fd89722ebfb8
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              9c06ca95-583c-452b-aa45-64baabb9f0d6.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\9c06ca95-583c-452b-aa45-64baabb9f0d6.tmp
                                                                                                                                                              • Size 130KB
                                                                                                                                                              • SHA256 df7ca3a5863d07166291475797f579382a918f2b790c43fce1833a78e0baa9f9
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              69438e22-3bcf-40ac-88fa-0d28594a8da2.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\69438e22-3bcf-40ac-88fa-0d28594a8da2.tmp
                                                                                                                                                              • Size 13KB
                                                                                                                                                              • SHA256 f79a04cfe6fb1cdf039c2c0b79238b1d63a896ce93f8d84a99e5c82fd7054d95
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              9885b833-8a35-4414-ab38-8e791d0fddf5.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9885b833-8a35-4414-ab38-8e791d0fddf5.tmp
                                                                                                                                                              • Size 6B
                                                                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              f_000015

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000015
                                                                                                                                                              • Size 27KB
                                                                                                                                                              • SHA256 4de61186107bcc9b9310af7e12466b2312c5d0bea1191451c234304d7a7ad021
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_00001c

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
                                                                                                                                                              • Size 28KB
                                                                                                                                                              • SHA256 ec1f8a2425701f82ed5299d043292c431b6eac08cae43d1b8cb02440519a77b1
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                              • Size 120B
                                                                                                                                                              • SHA256 0155aef6cb257b058c720e8501865fb3e848925c15de55240b4eb5e7897b5c92
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                              • Size 96B
                                                                                                                                                              • SHA256 b9fe467f976f74b7a66b42745452608397b40b915a3533d3452a6f0e9091a77f
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              c0cf1456-6f8f-425a-9363-4d5b42480272.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\c0cf1456-6f8f-425a-9363-4d5b42480272.tmp
                                                                                                                                                              • Size 414B
                                                                                                                                                              • SHA256 48cbb9fd208e978f219d69319fef31fa86f51719816fe64d3403d571aacddab4
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              e3ea06af-0482-490d-8489-ed876ba8fac7.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e3ea06af-0482-490d-8489-ed876ba8fac7.tmp
                                                                                                                                                              • Size 12KB
                                                                                                                                                              • SHA256 1e309fa9b90da0af6f3f48c84c373806ff50dedc7773e41b63fb0b551a3c5983
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              eb5dfcb4-9ebc-4bb1-bec6-f4f2cdb11f52.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\eb5dfcb4-9ebc-4bb1-bec6-f4f2cdb11f52.tmp
                                                                                                                                                              • Size 17KB
                                                                                                                                                              • SHA256 1f54a63591e6dde1b69486f2c8df6aaa98f633d0dd8c27d42b25af96f2f70962
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              14e11214-89e1-44dd-a9d3-d46e27490198.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\14e11214-89e1-44dd-a9d3-d46e27490198.tmp
                                                                                                                                                              • Size 18KB
                                                                                                                                                              • SHA256 7f43169a47e1635deb9ee4ff2de1f8af1d646df461329d7e90ef5bcc2365ecb6
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              1d340f94-5ad3-46e5-8f33-1e3f6fcf9ed3.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1d340f94-5ad3-46e5-8f33-1e3f6fcf9ed3.tmp
                                                                                                                                                              • Size 8KB
                                                                                                                                                              • SHA256 287dc0e188c10ec595382b9309efb10517365613e3ccead16c39eeb3d923ac80
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              4aa37a15-d162-4633-b78e-20234e03af0b.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4aa37a15-d162-4633-b78e-20234e03af0b.tmp
                                                                                                                                                              • Size 32KB
                                                                                                                                                              • SHA256 719ee3007a18abb43f939bedbab4a4d474548d678025d5eb62e2ca3060a632c0
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              8ac8390c-ac03-4b87-919e-116b6d5e7de3.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8ac8390c-ac03-4b87-919e-116b6d5e7de3.tmp
                                                                                                                                                              • Size 392B
                                                                                                                                                              • SHA256 12bdbe7973c55377f7127afe10db27ce2d9f932e55bca0bd7997a1bd52023de2
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              911b594d-01fa-45a0-b81d-f55600f88d9b.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\911b594d-01fa-45a0-b81d-f55600f88d9b.tmp
                                                                                                                                                              • Size 26KB
                                                                                                                                                              • SHA256 efab85ae7a4209d587f301e9631d2af8cb83ebe2702541a33ec625c39f550929
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              settings.dat

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                              • Size 280B
                                                                                                                                                              • SHA256 5421c8b0bf6e5f37422a05b412b233cde63f1db63aa71d65c91c5b31275595c0
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              settings.dat

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                              • Size 280B
                                                                                                                                                              • SHA256 b91e3727687be39cebe936de501a7606deb2d9d1374b180005979b21b9a9b78a
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              settings.dat

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                              • Size 280B
                                                                                                                                                              • SHA256 daf8c1243ee20a2e95a6bd65ee87f94e97a213f1bc26473da181514314bf0e5e
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              21650b64-90eb-4f17-8e03-8d77ad676430.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\21650b64-90eb-4f17-8e03-8d77ad676430.tmp
                                                                                                                                                              • Size 20KB
                                                                                                                                                              • SHA256 6f8738a5851ce64fe45546c57b84b1d239615cde52d45df85a42e363831aabf2
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              2879bccf-7b1b-4415-a45a-4443b994624b.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2879bccf-7b1b-4415-a45a-4443b994624b.tmp
                                                                                                                                                              • Size 70KB
                                                                                                                                                              • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              8c0dc19f-9e2c-47aa-b399-5469acd1c39d.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8c0dc19f-9e2c-47aa-b399-5469acd1c39d.tmp
                                                                                                                                                              • Size 17KB
                                                                                                                                                              • SHA256 3a80b420a6529ab25ea3482028322da6bf3fda040a6d10380f7ca2c46963e17d
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              90510c86-e15e-4651-ab8b-e75326c921f3.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90510c86-e15e-4651-ab8b-e75326c921f3.tmp
                                                                                                                                                              • Size 15KB
                                                                                                                                                              • SHA256 7d5ceef0b0327ab7351557aba9ed88a94c9edf87c34d8a68ee2b797e2e72db39
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              9d2063fd-4c36-412b-be03-43ff037502f0.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9d2063fd-4c36-412b-be03-43ff037502f0.tmp
                                                                                                                                                              • Size 11KB
                                                                                                                                                              • SHA256 6e3f5978e95b08deb81b30272c1a07e77ce7aa1c1832c6cdf55cd8dbf0cbd58f
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              LOG.old

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                              • Size 331B
                                                                                                                                                              • SHA256 98d33c49626f5daaf94c80ca0e282643b63518a0ee19964c50abf952ef969964
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              LOG.old

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                              • Size 334B
                                                                                                                                                              • SHA256 5a20ff6d55f512dd241d3249b56c1a1b84ff6f73660d0d4f4388cc38ca142539
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              f_000075

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                                              • Size 120KB
                                                                                                                                                              • SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_000076

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076
                                                                                                                                                              • Size 31KB
                                                                                                                                                              • SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_000077

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077
                                                                                                                                                              • Size 122KB
                                                                                                                                                              • SHA256 cb5738c33b9eabc95da3a2b77e8de311ab002545a76385306be6a60c3d6d9d40
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_000078

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078
                                                                                                                                                              • Size 102KB
                                                                                                                                                              • SHA256 68507cd63ba31b475df24e72126efa6f876ed08070edf9bc061370fa6d6236a1
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_000079

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079
                                                                                                                                                              • Size 247KB
                                                                                                                                                              • SHA256 c209d08247c1d8b19f781882aa5f13d6c1182f0aaf8f50794cc2af975769e0a6
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_00007d

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                                                                                              • Size 20KB
                                                                                                                                                              • SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_00007e

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                                                                                              • Size 36KB
                                                                                                                                                              • SHA256 d881a7861279ea1fcdf0b4030c1714c7ed4c2e1560990051bae800df70fbcb1b
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_00008c

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                                                                              • Size 39KB
                                                                                                                                                              • SHA256 9bac2d0c95117c1e92351897b0548cc184941c6b9edffce4510542d443e87ebe
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000ba

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ba
                                                                                                                                                              • Size 350KB
                                                                                                                                                              • SHA256 7cf60efe182c0c85b02ff13cbad26b1836c1798bd9a5f3a0b85bf89ff047c5aa
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000bc

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bc
                                                                                                                                                              • Size 27KB
                                                                                                                                                              • SHA256 8e31fecc4e3bcf5eb0b6bcdb3c77657a1e8f46a1bdc579dbbcd5be37d129ccd7
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000bd

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bd
                                                                                                                                                              • Size 30KB
                                                                                                                                                              • SHA256 1636e15b320d5032702d99b0ed52abafba808e92e08ecdb139e9099099e41029
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000be

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000be
                                                                                                                                                              • Size 41KB
                                                                                                                                                              • SHA256 ec9234f93ee00969e13312238e621e90013cde913616e8d0030f743f23b8428d
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000bf

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000bf
                                                                                                                                                              • Size 66KB
                                                                                                                                                              • SHA256 48f608b43a17fa17067d589267fe54a7316a0d8191a8cc264bddc2728fa6ee40
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c0

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c0
                                                                                                                                                              • Size 20KB
                                                                                                                                                              • SHA256 31f7d94e7cc2959ee252e3ac438982e02de8a16cef72cd2054e63fad195aa52f
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c1

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c1
                                                                                                                                                              • Size 137KB
                                                                                                                                                              • SHA256 e9830f1244107cb661e502dc79dde628f1b83337850ad5af5657ae889150df37
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c2

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                                                                                                                              • Size 511KB
                                                                                                                                                              • SHA256 f68848afda706ce1531d9ba7c782ccf6167dcfd36c4eb037332790b7e8ccea57
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c5

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c5
                                                                                                                                                              • Size 25KB
                                                                                                                                                              • SHA256 64baf3e7015ef20df6cbe0d08a457aa722d19c86cd643217a5e077ae769de4dd
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c6

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                                                                                                              • Size 31KB
                                                                                                                                                              • SHA256 a807d90a116031ce0af3bb5df08e7c156d7242ebf1d2006717511671ec718470
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c7

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c7
                                                                                                                                                              • Size 47KB
                                                                                                                                                              • SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c8

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c8
                                                                                                                                                              • Size 55KB
                                                                                                                                                              • SHA256 8f81d7259254836d9948660373b8a2d6fdd4361379c43090e255316eafb82908
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000c9

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c9
                                                                                                                                                              • Size 177KB
                                                                                                                                                              • SHA256 108c41b0ac21bf0e95d7c5aa293cc606b35d33b869873e0153bc7d6d5aeb2cd2
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000ca

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ca
                                                                                                                                                              • Size 117KB
                                                                                                                                                              • SHA256 3c9825c652317cd4d95a305e9ee6594ff647a6898dd49efc1927861e3c4006dd
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000cb

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cb
                                                                                                                                                              • Size 26KB
                                                                                                                                                              • SHA256 4dda272b3c971b81e87cc856f7c2cca4fba3d79567e7e98552fe7594191cec68
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000cc

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cc
                                                                                                                                                              • Size 25KB
                                                                                                                                                              • SHA256 fef2269fe2802f5d079cc572e092ef6736ec6c3381b62ab94b950839cb1cd766
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000cd

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cd
                                                                                                                                                              • Size 26KB
                                                                                                                                                              • SHA256 c4166721460d0b8aab65fc33ef1b1304aa89710cde598348aa11860c717b9f5b
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000ce

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ce
                                                                                                                                                              • Size 22KB
                                                                                                                                                              • SHA256 2b5bec7c12931cdbb2b5c1d4ea5ac8abe93d9de29011878a64775ba2817a1817
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000cf

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000cf
                                                                                                                                                              • Size 23KB
                                                                                                                                                              • SHA256 118ac990be2f652512b0e17edf7f194778602cb5e9f157cfec2a50ba3006fab2
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000d0

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                                                                              • Size 23KB
                                                                                                                                                              • SHA256 f90f6ed01d1b1bb505b28d56bc3c3979bf2e8cd358c914aa73b6f9c0d6a7075e
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000d1

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d1
                                                                                                                                                              • Size 25KB
                                                                                                                                                              • SHA256 4ff331b2172037817b704e50366c0776ca734bcc0c781aa9c121aa28ed985b23
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000d4

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d4
                                                                                                                                                              • Size 164KB
                                                                                                                                                              • SHA256 96e254b76cc765d2c7bfa7042e58908aa3f352c726e01a88171906471538facf
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000d5

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d5
                                                                                                                                                              • Size 104KB
                                                                                                                                                              • SHA256 8d8fcd5d6aa51294cca4fe69f328210337f798787f523e2cfbaf0398f8fb9361
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000d9

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d9
                                                                                                                                                              • Size 35KB
                                                                                                                                                              • SHA256 d408f18b6a4000ed6cfbded71c9ffdc1be2ed3cf5b73ddd0b0f7b7263feff07a
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000df

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000df
                                                                                                                                                              • Size 39KB
                                                                                                                                                              • SHA256 bb8de331cfc4d2a37463862865698c8fa0910e6aa96cee3b91311ae8b1c322ad
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              f_0000e0

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000e0
                                                                                                                                                              • Size 31KB
                                                                                                                                                              • SHA256 abc2f490026dd4d30030d54ed67e0a77a9ba7ab56d81790490835c7c4e2ff5d0
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                              • Size 5KB
                                                                                                                                                              • SHA256 b4ab87cee459f30a8894ee0af3e7f03e424760733137c441daf1d22084c2b2fd
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                              • Size 5KB
                                                                                                                                                              • SHA256 7643f62d95281721d82b5dd0b712ecdb14bb7fa9c10d67bf9cf620bf55c3e918
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                              • Size 3KB
                                                                                                                                                              • SHA256 d41fa397ecd0ad229ae5978593dcb5a6a71a3cfe42990d54ef870947ee51457c
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              b461b586-87d4-43d3-b0a1-811f7d59dbda.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\b461b586-87d4-43d3-b0a1-811f7d59dbda.tmp
                                                                                                                                                              • Size 2B
                                                                                                                                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              CURRENT

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\CURRENT
                                                                                                                                                              • Size 16B
                                                                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              DevToolsPlugin.html

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3032_1106296470\CRX_INSTALL\DevToolsPlugin.html
                                                                                                                                                              • Size 220B
                                                                                                                                                              • SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              manifest.json

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3032_1106296470\CRX_INSTALL\manifest.json
                                                                                                                                                              • Size 766B
                                                                                                                                                              • SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              manifest.json

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir3032_570104700\CRX_INSTALL\manifest.json
                                                                                                                                                              • Size 658B
                                                                                                                                                              • SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              5fd1745f-710c-47f5-acaf-c24ea8e2cd2d.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\JumpListIconsRecentClosed\5fd1745f-710c-47f5-acaf-c24ea8e2cd2d.tmp
                                                                                                                                                              • Size 25KB
                                                                                                                                                              • SHA256 2119ec2c549963272f2071a64ac185abb7f6abd95231cc3aed4589ff9147989a
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              1c69813f-25fa-448b-8240-1571d3fa036c.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\1c69813f-25fa-448b-8240-1571d3fa036c.tmp
                                                                                                                                                              • Size 2B
                                                                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              5bc32777-bf2d-4785-96e4-ed3286d29630.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5bc32777-bf2d-4785-96e4-ed3286d29630.tmp
                                                                                                                                                              • Size 13KB
                                                                                                                                                              • SHA256 1688a9a19e27ee55a24c1ec438e4c063c40d5e0d30fd0a45d86d015f146377fe
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              7df2a1ca-dabd-4bd0-9079-203df82dc5ce.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7df2a1ca-dabd-4bd0-9079-203df82dc5ce.tmp
                                                                                                                                                              • Size 111B
                                                                                                                                                              • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\temp-index
                                                                                                                                                              • Size 744B
                                                                                                                                                              • SHA256 dc2c3bff604dcb1a101945b700dbd0361cc717d721bd966bc2349ab8d7bc8129
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\4f3a185e-5bc2-4345-ae38-581f252b2759\index-dir\the-real-index
                                                                                                                                                              • Size 744B
                                                                                                                                                              • SHA256 709486b7e316e647088dd521ccdad2e817ec3ba398f1ad212f73f177571f99bb
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a54f6f44-5155-40df-bbaf-5ba8cb84d61f\index-dir\the-real-index
                                                                                                                                                              • Size 72B
                                                                                                                                                              • SHA256 3207f0e95e8e26ca9aac136d5407b17410fa5c03a0e02309c097aea54eb0210d
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cedd400b-83be-43b9-839e-cd04039e734b\index-dir\temp-index
                                                                                                                                                              • Size 2KB
                                                                                                                                                              • SHA256 bd1c76f95556dad90d434bf03b6ba37621453d5cf5c9b66e7bcb249fed9ec3b0
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\cedd400b-83be-43b9-839e-cd04039e734b\index-dir\the-real-index
                                                                                                                                                              • Size 48B
                                                                                                                                                              • SHA256 dd3c9da448358b8e5e812d67b1ba9586dc805baf0e1a18d7e5dab17a3c59d78b
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              index.txt.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                              • Size 259B
                                                                                                                                                              • SHA256 0d2fac350859189a363d583be2974c8862b2ba3fed7fe44739fcae3d628aaafe
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              index.txt.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                              • Size 161B
                                                                                                                                                              • SHA256 df53cee2d976b881aeade2e7198b71c049b4f4dfb41c9c901780f2888096dbae
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              index.txt.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                              • Size 488B
                                                                                                                                                              • SHA256 9f32a76137355242734dc98fc4191c41991ec6bd41b3a6b6989cfa9fa6961cf1
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              index.txt.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
                                                                                                                                                              • Size 386B
                                                                                                                                                              • SHA256 d438f2fb54f430c450d58df9de69722b1bd36b24efa2e6bd4d72fd33ade1eada
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              temp-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                              • Size 72B
                                                                                                                                                              • SHA256 cf25364bbf3454a5ff5303bb5cdafcc092fdc4111d30a5623f55b564c757adf7
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              the-real-index

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                              • Size 48B
                                                                                                                                                              • SHA256 62308970f5f4725a0595938bc628adc86e22c2cb5daac3732abc6b0104703323
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              c1173701-7e6c-4e4f-ae20-2f42d2084ad6.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c1173701-7e6c-4e4f-ae20-2f42d2084ad6.tmp
                                                                                                                                                              • Size 30KB
                                                                                                                                                              • SHA256 5a45b5816cc8d7d721a400cfec1bd9624e1db1f6cc3463001b8a5936dd89b826
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              cfd74eaa-4d3c-483e-a908-0a1a82532aee.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cfd74eaa-4d3c-483e-a908-0a1a82532aee.tmp
                                                                                                                                                              • Size 13KB
                                                                                                                                                              • SHA256 1aba94064d0a508acaa3895bf8042cb1eff34d670d89d0dd8bb1211b34ae68d8
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              d811fcfe-dc15-43dd-a3d7-0ad96b3f5463.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d811fcfe-dc15-43dd-a3d7-0ad96b3f5463.tmp
                                                                                                                                                              • Size 27KB
                                                                                                                                                              • SHA256 12adf994846cad4289eb286747bc125151d5415dc90ff13edfadb1e1e3e37b99
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              dd414871-2045-4881-92a9-2f416a510697.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\dd414871-2045-4881-92a9-2f416a510697.tmp
                                                                                                                                                              • Size 19KB
                                                                                                                                                              • SHA256 c414ce58b5fff74146f2a4787d6a7a5a6a464df6dffefc191eb0d1da8dffc1f7
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              7cab7e32-4c2d-4489-a67c-e843bf258748.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\7cab7e32-4c2d-4489-a67c-e843bf258748.tmp
                                                                                                                                                              • Size 22KB
                                                                                                                                                              • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              data_1

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
                                                                                                                                                              • Size 264KB
                                                                                                                                                              • SHA256 5b718a9fa5abc15db49593d31532818ad28a1e202f785cf580e54b7bb6e8718d
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                              RevisitationBloomfilter

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                              • Size 392B
                                                                                                                                                              • SHA256 2d82f6bd0ddb63020d06bddad6b47d1315c23cb83e20f82fa6520423f2a07cbc
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              d404238e-b5cc-4ced-91a2-53aafec22f01.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d404238e-b5cc-4ced-91a2-53aafec22f01.tmp
                                                                                                                                                              • Size 392B
                                                                                                                                                              • SHA256 009acfdb95cecace45a636a22eb81d7a05bef44d8ce4fb5dac42c297ed842ca7
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              de187ae4-182b-48c3-9d94-320c2d2fa906.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\de187ae4-182b-48c3-9d94-320c2d2fa906.tmp
                                                                                                                                                              • Size 18KB
                                                                                                                                                              • SHA256 36568c1ca7839c89da65363156c3bdbfbb07247f7591f9c2c662aeb9df8fe92b
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              ed4b1efb-e491-47a9-98f1-a0374d8d1e84.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ed4b1efb-e491-47a9-98f1-a0374d8d1e84.tmp
                                                                                                                                                              • Size 8KB
                                                                                                                                                              • SHA256 a1a87f8c00bf791193d79638c9e9e69b0f912f95c392535964d7ab8c3244c662
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              8f2afb25-580f-494a-8066-3d188d712614.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\8f2afb25-580f-494a-8066-3d188d712614.tmp
                                                                                                                                                              • Size 13B
                                                                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                              • Size 2KB
                                                                                                                                                              • SHA256 0837cd2b77515d1733e92618b57201ac0945b3424263658a61507d4ed0397ad0
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              366dbb5b-98c6-4f30-8e76-8ba8ddb24a3a.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\366dbb5b-98c6-4f30-8e76-8ba8ddb24a3a.tmp
                                                                                                                                                              • Size 3.0MB
                                                                                                                                                              • SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              b4c69fda-65c1-42af-b079-2ba5be407cac.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\b4c69fda-65c1-42af-b079-2ba5be407cac.tmp
                                                                                                                                                              • Size 1B
                                                                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                              • MD5 SHA1 SHA512

                                                                                                                                                              4d3c4d4d-3476-472f-9617-e8971706267f.tmp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\4d3c4d4d-3476-472f-9617-e8971706267f.tmp
                                                                                                                                                              • Size 2.1MB
                                                                                                                                                              • SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              verified_contents.json

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                              • Size 2KB
                                                                                                                                                              • SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              filelist.txt

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\filelist.txt
                                                                                                                                                              • Size 134B
                                                                                                                                                              • SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              LICENSE.md

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\third_party\babylon\LICENSE.md
                                                                                                                                                              • Size 9KB
                                                                                                                                                              • SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              babylon.js

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\third_party\babylon\babylon.js
                                                                                                                                                              • Size 1.2MB
                                                                                                                                                              • SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              LICENSE.txt

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\third_party\typescript\LICENSE.txt
                                                                                                                                                              • Size 9KB
                                                                                                                                                              • SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              typescript.js

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_1311406804\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                              • Size 10.4MB
                                                                                                                                                              • SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              DevToolsPlugin.js

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\DevToolsPlugin.js
                                                                                                                                                              • Size 8KB
                                                                                                                                                              • SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              DevToolsPlugin.js.map

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\DevToolsPlugin.js.map
                                                                                                                                                              • Size 16KB
                                                                                                                                                              • SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              NamedFunctionRange.js

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\NamedFunctionRange.js
                                                                                                                                                              • Size 1023B
                                                                                                                                                              • SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              NamedFunctionRange.js.map

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\NamedFunctionRange.js.map
                                                                                                                                                              • Size 2KB
                                                                                                                                                              • SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              verified_contents.json

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                              • Size 2KB
                                                                                                                                                              • SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              typescript-tsconfig.json

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
                                                                                                                                                              • Size 91B
                                                                                                                                                              • SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
                                                                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                                                                              typescript.d.ts

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\third_party\typescript\typescript.d.ts
                                                                                                                                                              • Size 486KB
                                                                                                                                                              • SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              typescript.js

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                              • Size 9.2MB
                                                                                                                                                              • SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              typescript.js.map

                                                                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3032_812694888\CRX_INSTALL\third_party\typescript\typescript.js.map
                                                                                                                                                              • Size 6.0MB
                                                                                                                                                              • SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              01UGB4E828PKGO0KN47X.temp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\01UGB4E828PKGO0KN47X.temp
                                                                                                                                                              • Size 8KB
                                                                                                                                                              • SHA256 47e7f19ac89ebdaec4a4352ceb25d7186156845f2b2bb2bd4a44dd56296ffc50
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              0XC6PTMM0THX6LF1TK13.temp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\0XC6PTMM0THX6LF1TK13.temp
                                                                                                                                                              • Size 10KB
                                                                                                                                                              • SHA256 64054a1f4315ff6ce4d14163329d003bdcc05d4b1b83625967f4de591f18c1cb
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              FHYMG2OGDOYP27H1MMAG.temp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\FHYMG2OGDOYP27H1MMAG.temp
                                                                                                                                                              • Size 10KB
                                                                                                                                                              • SHA256 75a2cee2e453d6574e28ad2ff31b5e61768fb5741dd12d6275689c3d9b69dbb6
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              M4I8HPMOV4HAH8ALMLDN.temp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M4I8HPMOV4HAH8ALMLDN.temp
                                                                                                                                                              • Size 10KB
                                                                                                                                                              • SHA256 9bcdc8a84ab95284c42bd8b73e712fc9bb9582cdcf35abcea7e38320eabee23b
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                              ZGP297P442XBR89QO56F.temp

                                                                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ZGP297P442XBR89QO56F.temp
                                                                                                                                                              • Size 10KB
                                                                                                                                                              • SHA256 86e9d450135df9bc22bfe50c506630322a5ffa9e5f1f1c0780a25c03a7d749fe
                                                                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH