Analysis

  • max time kernel
    2692s
  • max time network
    2683s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    24/09/2024, 23:30

General

  • Target
    4d438fc90b83b63a7e664cf28ba6aeb3bc0e519a.jpg
  • Size 1.9MB
  • Sample240924-3g356avbrc
  • SHA256 efef23678df10b005718f25f66d392355c9734640173f38b716ebe281f0e41f3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Detected google phishing page
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 8 IoCs
  • Suspicious behavior: EnumeratesProcesses 13 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 47 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 27 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\4d438fc90b83b63a7e664cf28ba6aeb3bc0e519a.jpg
    1⤵
      PID:8
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
      1⤵
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3804
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea0e546f8,0x7ffea0e54708,0x7ffea0e54718
        2⤵
          PID:4064
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
          2⤵
            PID:5072
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            PID:1620
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
            2⤵
              PID:1208
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
              2⤵
                PID:2908
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
                2⤵
                  PID:1324
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:1
                  2⤵
                    PID:5092
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1
                    2⤵
                      PID:728
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8
                      2⤵
                        PID:4452
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:1352
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
                        2⤵
                          PID:4780
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
                          2⤵
                            PID:1624
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5600 /prefetch:8
                            2⤵
                              PID:1416
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4900 /prefetch:8
                              2⤵
                              • Modifies registry class
                              • Suspicious behavior: EnumeratesProcesses
                              PID:5108
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2312 /prefetch:1
                              2⤵
                                PID:3084
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
                                2⤵
                                  PID:3028
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
                                  2⤵
                                    PID:1588
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
                                    2⤵
                                      PID:5284
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
                                      2⤵
                                        PID:5792
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
                                        2⤵
                                          PID:5800
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
                                          2⤵
                                            PID:5960
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
                                            2⤵
                                              PID:5968
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4524 /prefetch:1
                                              2⤵
                                                PID:3084
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
                                                2⤵
                                                  PID:5480
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
                                                  2⤵
                                                    PID:5672
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
                                                    2⤵
                                                      PID:5868
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3452 /prefetch:1
                                                      2⤵
                                                        PID:3832
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1
                                                        2⤵
                                                          PID:968
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6140 /prefetch:2
                                                          2⤵
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:6068
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
                                                          2⤵
                                                            PID:3224
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
                                                            2⤵
                                                              PID:5656
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
                                                              2⤵
                                                                PID:4576
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
                                                                2⤵
                                                                  PID:1340
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
                                                                  2⤵
                                                                    PID:5876
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1
                                                                    2⤵
                                                                      PID:5916
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
                                                                      2⤵
                                                                        PID:5436
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
                                                                        2⤵
                                                                          PID:4696
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
                                                                          2⤵
                                                                            PID:6012
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6608 /prefetch:1
                                                                            2⤵
                                                                              PID:2856
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
                                                                              2⤵
                                                                                PID:2000
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1912 /prefetch:1
                                                                                2⤵
                                                                                  PID:5260
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
                                                                                  2⤵
                                                                                    PID:224
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
                                                                                    2⤵
                                                                                      PID:4000
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
                                                                                      2⤵
                                                                                        PID:3104
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
                                                                                        2⤵
                                                                                          PID:652
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1
                                                                                          2⤵
                                                                                            PID:4284
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3028 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4364
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6764 /prefetch:1
                                                                                              2⤵
                                                                                                PID:4308
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:4300
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7512 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1044
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7856 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:216
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1340 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:4660
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7640 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:3380
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6612 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:5024
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=8172 /prefetch:8
                                                                                                            2⤵
                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                            PID:2340
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:1872
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,18438160415517169051,2984537460361366222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:6108
                                                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                              1⤵
                                                                                                                PID:1416
                                                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                1⤵
                                                                                                                  PID:4428
                                                                                                                • C:\Windows\system32\AUDIODG.EXE
                                                                                                                  C:\Windows\system32\AUDIODG.EXE 0x4e8 0x2d4
                                                                                                                  1⤵
                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                  PID:5988

                                                                                                                Network

                                                                                                                      MITRE ATT&CK Enterprise v15

                                                                                                                      Replay Monitor

                                                                                                                      Loading Replay Monitor...

                                                                                                                      Downloads

                                                                                                                      settings.dat

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                      • Size 152B
                                                                                                                      • SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      settings.dat

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                      • Size 152B
                                                                                                                      • SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      5f551665-d9bb-4251-ac85-357ae15c8894.tmp

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5f551665-d9bb-4251-ac85-357ae15c8894.tmp
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 82d38f0cd9c1019b4841c1cd1eb0d758c798774f1881bc921b566b9162b43b01
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000002

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
                                                                                                                      • Size 62KB
                                                                                                                      • SHA256 eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000003

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
                                                                                                                      • Size 70KB
                                                                                                                      • SHA256 5addbdd4fe74ff8afc4ca92f35eb60778af623e4f8b5911323ab58a9beed6a9a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000004

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
                                                                                                                      • Size 41KB
                                                                                                                      • SHA256 ee5d25df51e5903841b499f56845b2860e848f9551bb1e9499d71b2719312c1b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000005

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
                                                                                                                      • Size 19KB
                                                                                                                      • SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000006

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
                                                                                                                      • Size 63KB
                                                                                                                      • SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000007

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
                                                                                                                      • Size 88KB
                                                                                                                      • SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000008

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
                                                                                                                      • Size 1.2MB
                                                                                                                      • SHA256 38d0230d427946b2db194d3ef03f39b829d562b44e9c2559e7cfe7d739f1c041
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00000a

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
                                                                                                                      • Size 43KB
                                                                                                                      • SHA256 9b02f8fe6810cacb76fbbcefdb708f590e22b1014dcae2732b43896a7ac060f3
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00000b

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
                                                                                                                      • Size 73KB
                                                                                                                      • SHA256 e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00000d

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
                                                                                                                      • Size 27KB
                                                                                                                      • SHA256 b3b355f7ae6902d546436864f69c20e50ef07a43477109c5bd2afd5f0f06e954
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00001f

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f
                                                                                                                      • Size 99KB
                                                                                                                      • SHA256 8dd2d96eb579fa0a19769397b6f8416d03ebcc4ebce0807a4e912ed791e2f673
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000020

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020
                                                                                                                      • Size 425KB
                                                                                                                      • SHA256 7797e6ff95678a5e1f404e56dbc596bd18dae2b174f5c2e9bb959ee10d06ad8a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000030

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030
                                                                                                                      • Size 27KB
                                                                                                                      • SHA256 2c5cf54dfe536ff32ac1852f999a5dfc76ac39654587a7b85416f0f054912142
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000031

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
                                                                                                                      • Size 65KB
                                                                                                                      • SHA256 2b262e1106f98a9ccc6981b98b3a9532e3bd3795e05f64be1b11841194913784
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000032

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032
                                                                                                                      • Size 82KB
                                                                                                                      • SHA256 1b03efa2079baaa91a86edad5e5272e2021b55c5172614c7b7206f8845a561bc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000033

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033
                                                                                                                      • Size 36KB
                                                                                                                      • SHA256 22de5e30581bae29ba36f0a045e9901d996880838619b2af86d16a9a2c055111
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000034

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034
                                                                                                                      • Size 27KB
                                                                                                                      • SHA256 884dabceac2ebcad41546273ce55f3dbf334a7c82eea8e0bdb17cd2bb63e3d89
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000035

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035
                                                                                                                      • Size 29KB
                                                                                                                      • SHA256 346cbe6774bf3bf9f3a5aacf287f859103045b0dcd4a32839b00be9f391259fc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000036

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036
                                                                                                                      • Size 29KB
                                                                                                                      • SHA256 c26c6ece208c7920353ad0faa8e1d48cec2d2142ff8d6105d66f3b9e7fe40790
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000048

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000048
                                                                                                                      • Size 31KB
                                                                                                                      • SHA256 13709ea2afd8972c2177b0fa3a86e35d241f0b8b62eab4f45948229fe51e1d37
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000049

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049
                                                                                                                      • Size 101KB
                                                                                                                      • SHA256 a0213abedf8359b23c36078f9db6b35bc2ae9fb04a4e45337f9fc3c2dedcd398
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00004c

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 6e9be773031b3234fb9c2d6cf3d9740db1208f4351beca325ec34f76fd38f356
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00004d

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d
                                                                                                                      • Size 29KB
                                                                                                                      • SHA256 4b0beec41cb9785652a4a3172a4badbdaa200b5e0b17a7bcc81af25afd9b2432
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_00004e

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e
                                                                                                                      • Size 60KB
                                                                                                                      • SHA256 4b285731dab9dd9e7e3b0c694653a6a74bccc16fe34c96d0516bf8960b5689bc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000058

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058
                                                                                                                      • Size 20KB
                                                                                                                      • SHA256 84234bc202cd90772c3dad4cca1b2e1330d811546ed6574be8a6dd8706356d80
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f_000061

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061
                                                                                                                      • Size 16KB
                                                                                                                      • SHA256 860b9234e2b53eec4228be7c877bff6086be3f2cdf69b950b77a249f13139afa
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      02240a9606ba9e05_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02240a9606ba9e05_0
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 8c5c1605bf55c837ad59d1abeccdc66bb197d7ee67d9143fb61c1da92785a39b
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      0ef075775c69ab20_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ef075775c69ab20_0
                                                                                                                      • Size 265B
                                                                                                                      • SHA256 d743a28b90d99fdd4750af1b0d61d195f7e51e60efe1a7c4f62dc40fd916dece
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      17dba824f46807ab_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\17dba824f46807ab_0
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 2e6ca1601260e4e471243cba54872a6e23529d2bd07fe2ec74b5c676344befc2
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      2512e0b75615c57b_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2512e0b75615c57b_0
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 6ffdcc9a8dd7adb1d7803e08be0e5bf9d6e4ffa8c448ae95f6dbba3c75575bee
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      31e798d1157444d6_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\31e798d1157444d6_0
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 f0a353edb7cd74dfcac6655d2c675683b033fe9d804d1ce8183bff1f8fd272e0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      3357bbe6aba41d01_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3357bbe6aba41d01_0
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 9f5ea1ddf18074fb10672a5603848e8c2cf237ebe9485124f7ef3845122cabdf
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      3a0a8343c91414cb_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a0a8343c91414cb_0
                                                                                                                      • Size 29KB
                                                                                                                      • SHA256 8d83f07a4dfb6b4a65b515d3dc648e0d5c63080b29cb2a77e6e86d2f6fb1c79d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      3d3c3fb446694839_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d3c3fb446694839_0
                                                                                                                      • Size 260B
                                                                                                                      • SHA256 348e3e708bafba526feb537c6e26762583f5472f22a37cd04e98d1af7d7fce6c
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      3d6e1a4601df0a0a_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3d6e1a4601df0a0a_0
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 b3bbdc60192ce4b1c0d908f415966efaebc30694947831d8c3af01af4cf06484
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      40e547ccd9e833b0_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40e547ccd9e833b0_0
                                                                                                                      • Size 89KB
                                                                                                                      • SHA256 ed3742f428889a160cde92d8882f37ba74dd20ea00a805429384fee131b92f29
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      4578f491319afbb7_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4578f491319afbb7_0
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 7fdacda06318db4795342a75e6225bcc388b3944b9648fa83098d6ffbe010b70
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      4db4ad1d09cd75f8_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4db4ad1d09cd75f8_0
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 03c303ea1c41f023c6c9487e1e988f3bffc2e64915f8c53a69a8854a0512704d
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      66f675731a632368_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\66f675731a632368_0
                                                                                                                      • Size 446KB
                                                                                                                      • SHA256 bc7772e126c567499446af6fc1fd11391f4eb0221d4815a38f712841d1257e53
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      67d8133ef00dd129_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\67d8133ef00dd129_0
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 d70bc86a3c2dfc3d39cdb0d24e5b0382fd0f333cb0e1615f2f0c479079c2d89b
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      7f878c7420b45bb8_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f878c7420b45bb8_0
                                                                                                                      • Size 30KB
                                                                                                                      • SHA256 9c4e2e06fb8521708feed83f83ebb4dfdc74a5d486bd1921fb60b83f60685725
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      829ea03c500e3fe3_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\829ea03c500e3fe3_0
                                                                                                                      • Size 696KB
                                                                                                                      • SHA256 98bda0f963267a25146a8b494e180bdb06033ae29a02f1ef19bdabaa5d8c7563
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      8c8aaaeb27458965_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8c8aaaeb27458965_0
                                                                                                                      • Size 21KB
                                                                                                                      • SHA256 fee23b535f28bf1e93f7453626a7ee4071a9ade45770d2060ec4a9e9ce403ebe
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      8e7f2e73dfb8c090_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e7f2e73dfb8c090_0
                                                                                                                      • Size 249KB
                                                                                                                      • SHA256 93f29b4967ad6f53b772522eb8cf1b273f4c8a86ffe37610da2848322b86b8f0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      9ff4003bcb27ed5d_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9ff4003bcb27ed5d_0
                                                                                                                      • Size 134KB
                                                                                                                      • SHA256 8e63cd9c2a486e7746d7940256ec0a2576e1a47f4b7f615dbac25347402404a0
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      a10a720a1bb4ca6a_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a10a720a1bb4ca6a_0
                                                                                                                      • Size 61KB
                                                                                                                      • SHA256 1300ca5be9988d6074a1c4610da820e15385c5c9cf9a4bbbfc4d63c784db0ab9
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      a721d4233127b284_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a721d4233127b284_0
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 375208f85706c393a70aaf7bcd51b5878920db6366cc39783cc608553fd49775
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      b57c78baf0829aca_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b57c78baf0829aca_0
                                                                                                                      • Size 279B
                                                                                                                      • SHA256 89da9e56cbfa4802f2c5edc02b166406760f3a4cb19b0184b2fdd11dfaa94f3b
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      d3e06f5af569ce76_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3e06f5af569ce76_0
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 5e9ba4c96adcea82d0d6d42061c2240dabc77048bb3241dfc44ec9ca1958174f
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      db041e16606a5083_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\db041e16606a5083_0
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 dedcedebe45e6708ffda38404e0fdc81e1e03cd798dd56ba65852efa1aa584f7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f16d641ec0e30056_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f16d641ec0e30056_0
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 fdddfab75dc55a7602b296f93ae2a4f22a3bb58ac4e26378bcaae479da7de9be
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      f39752e2a6b60dfe_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f39752e2a6b60dfe_0
                                                                                                                      • Size 269B
                                                                                                                      • SHA256 16991d6d1d9d0c2e1cdd05b81735bb1d567484211a90aaf97d77a154e3800dbb
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      fa9bd3034500c8c7_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fa9bd3034500c8c7_0
                                                                                                                      • Size 311B
                                                                                                                      • SHA256 eaf2c78464925ad5aab7188b4735e3e9a3e352b7cf059e3f2c211aac38960e3a
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      temp-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 98019c4baed20b871ea4692e3d8ecf30319d2b45c525abe183a46a3b2cee0f90
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 ebc8aca902ffdce0a369ca5d7fe967c9c1aee592389820fc59e7401240cbecf2
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 a0c62445d6c4e722138fc7f4daf09edcc85a713b8cdff4617afb208e17e74094
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 52c4b0ba59d4547e63a5eef46d4960ae7728c2636ec98107dd37aac2dc826610
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 1fc524498981b3b99ada37887768b075eb4666bfe29f025f540c947971226acc
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 36df350aa069dbc5e289d431030ef1c333d94e46fc0381ed799462b73a24d532
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 293dacb2737f7b24699f168444a46ae782c5a4dabac14084a2a78ff80a89c013
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 4763737bdba8a38300c73723334519290fa369d026c3fe0277ef43e8534d2ea0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 ab11c1d4bc66c13047fa246edbf1a0819e1d95e5fe014d51aa74d0ce81883689
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 2ee98b0ced536992ca2163507b57610087e5d46cb533749988a053e50bbc5602
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 5f100777a8c9ab74859597ef7a0e23375eef247f5235efc713aa7c0178e37b90
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 4300ed339d5041a73aa2423ff417d98c812e0b2022bcb55d838429b305bcd765
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      CURRENT

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
                                                                                                                      • Size 16B
                                                                                                                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 695B
                                                                                                                      • SHA256 3ebfd5ebb156787067f4d20f41a749c7f9a47e065f6bb7f2c64287ab4af05cee
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 44281e0d64997b6f9da5b0a99e70cec21f4c20c6746d28f4285581dfd2d422df
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 75b30367c594d9b0086132da8d48700f711059359dc09f2a722d0b47703cdd3b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 f6ba93d8149b1fdcefb96adee0d15387649304fac5fbc99b367c83039ce0ee95
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 991265f55e2c1d511d242f03309d0c2d75451e28858ac20793e8aa726cbeddb8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 31befc1620ec1f91a5448d262fc05693dca147bed29118002f654ca73d29a42f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 f5ffd0c95cc52f785801f927ff310cd2f20587685b7a6b8de8a7fc887473ebbb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 bb894a4d83f3e32c52de47ec3e280d5aef99b891b46e7392c765307531a5792f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 4b8f8540535704a8e2be99ddee61096cd4f503b82a39e3587b00137b0c129ca5
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 a46d9fa47def1874e52d874a28db7c733f8f786d73d3dc41bed0751cd113cdd8
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 a63794f4d5839a36fb863b6240d69f103fc262721c8d37411187de4378b914bc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 6242520f787b8e6b39f47269cc417063272091dd479458b48b2695b89c0ad208
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Network Persistent State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 c80c96a213bdf9f03b532d43bedca9d3f6123f3cfb7be2e5eda98b0a9295e7ff
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 5KB
                                                                                                                      • SHA256 0d1ad3d130caec367846964a4350dce6c8a2f5e0e39ade0bc9d022790d81447f
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 218a0a63e38b175dd37a990852e3f575d5373dccaae0c24b0f67dcc68e45678e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 3b80122801d8252789303ca8a0017ff13370409add34ceb98466ac65e6b4f2dc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 87470e8079be175d29af789b8f1746d43cee80293d4d3763a73e07e805186a66
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 8KB
                                                                                                                      • SHA256 380aeea480f0d8ebadc358bd26995b3d220500d4b24e65c3f3d25add135ee9ba
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 ebc315eb69c82eb1126c597d6ab8ec22c15333725667df193b36f2c0387689c8
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 b0a886b75850c1421b5eecd2d87dd6f68611abde77553c2990575709f37ed4f1
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 2eebf7eced8d26736511bd4a77fa05015e81d56695e694c8cb73ebbb42e5e137
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 20acf2cad89ea47a52f57656fcbd1f4267e3f852cc90eabc9370216e726f65b7
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 48c8314b13e4c558613885cd9a17007b02c00ce353dc3837526d132dbf787a0d
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 9KB
                                                                                                                      • SHA256 216ecd9feac489134f62eed7aeae518a5843d0534b2f90d283eaa642e15b0871
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 b328315ea036e5dd45d29b228dc29b0a0cfe2b4e587d75ed7124fd434532a82e
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 6KB
                                                                                                                      • SHA256 0ad134469767d49362e83dcb52c817137489577e653aa05ef856fdabc0affd2a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 7KB
                                                                                                                      • SHA256 238f307a6112724100e40f31209363cd3e328196de64a52dacde9415e40f7fcb
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      Preferences

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                      • Size 7KB
                                                                                                                      • SHA256 e99ff57dab8d9441e4662f651bd1ebc2e26793a4f3dda8fcada302c29f67459a
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      2cc80dabc69f58b6_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0
                                                                                                                      • Size 4KB
                                                                                                                      • SHA256 c97068a16f41c7638af119c9d7bc602719a670f2faa86724a23047da136ca1dc
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      4cb013792b196a35_0

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 06f827fe321b48c0414f797224c5e16db0d4d485b109141974bc500d33e1434a
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      4cb013792b196a35_1

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 9b07fe4436a01afdb383f6d02fd328aacdd0d717a8e9b09c10dc3f4cc555f84f
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                      • Size 96B
                                                                                                                      • SHA256 5808db3576d72d18a9db812c63865b45a754d438055b5c75b3911ccf949f0c56
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      the-real-index~RFe5acfb5.TMP

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5acfb5.TMP
                                                                                                                      • Size 48B
                                                                                                                      • SHA256 3fc6347c82939a3affb970962e91cff47bf72d80532781d08c19105dd70d9d1c
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 280eaa992851e5b724ad54904c5670db39ee61233f4bb9c7010ba636be447af4
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 691c615bd8d22d340f91808794d129b0ad7268eb8eed361324aef12050537e5e
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 9195a9577aeb4aeca001f4fef287483520f37792dd0098f1635f0e5e5dae7d1c
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 fd99324f36dcb7fe7ce2def69abd9e529986ded0c4c87ab18848625f0bad59ea
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 3c820d1ead36ce58f76d4917f20a9e6bcece02f238541b370321c5f0b92dae94
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 f57d8b8eafa4b8412af95d576dc4890423b94511533b41f45e676929536200a3
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 cc71eb5314603a065e69d6f2942cfa9625ec2d2d04c0727144b6c36d71c73e9b
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 b03223efc8139ee26e548e0a858fecac4cee572f7c9b2f152ac7933ff87f57a0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 87c802833c77af658512995c0e4ca3668912598aa72063a39ca7cb6f7b2465c5
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 3cb8b0987f8a15105e93a22d7e3b28886ffc39c1aa8cd743cb1c7e2ab159cbc8
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 256747b01859477d34ab650b4b6fb9243f343e90f91891f2b6d111c5efb625f7
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 8b4e32b0bbf9f03c485cf9bcda8ef253da263a13449e5343913b1043dc78a54d
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 2752d9391ce47796bf9a18b37c538b17cc9c8478c3c68efb57bf988ff74e0166
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 de1fd92541d6404fffbc588976b65bd59771ed9f0831821827172f8239723188
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 4f62cba5126204c53fa2e0821d159ed9590776ae5001496ff0a6bb74ea6bbcc3
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 32b60b33f0a73445b5dbc592f399b88d847f04dd7aec6150b70f35c3c1b40975
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 8f1588c78b0cb938ab2bd9a94d0e5378edb0ff821d499701d68f2cf6b0ae4fa0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 2f4689f5564dea4a615252bec5562ac916da354eb642aff6a31a4f5535e7c399
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 8b48542f1770e3601e39e34d70449732acd4f0050bebe952336e9e9ccee29aed
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 cdd76b26536f3a36cbaf1e96fa231509ff2c6e55e802265ffe0b2500ff147f0e
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 10ee8ab5947c9da0e0bdda295e486be7c4fe6d9cae2234de164b8fd0886af123
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 d354ea981c7524ee681b53e38c5277634e06a23b8911cc621e9d7949812190dd
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 f94121247df76bf79bf4f73bc516c8638a1667e03b4b90c8a4902bfaf97eedc3
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 65dfd585e32b130c5fbd23b835f7cc41dfec0ee2f88b44306649b93ff51657b0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 fa559fcaec205ceb6c95530bc0f7b8ba66c8d4af2f1ac24428f83ce94f69c3f8
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 65c73ea7fe066ef237879b914e10b92f8e2949bce5169d5bba219d2524bb3536
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 2KB
                                                                                                                      • SHA256 3185a1d720669a2a57ed80defb755df8e2c141eedd7b837ca891bcb5c7617a1c
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 8d24f35aeb480b691efa7557cacfb8dcdeb50582466c9625b5c4beaf96f1dab0
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 27394670133a21f0afb12c3c84b355dc30c182af26f6bc762b7c63b2cacf83c1
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 1b3f5e77de4d18aaa2ddd7fee7d7ffaea1a055fb583fd3c5231110948f7165ac
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 ef7d84d1c84a7a53fd3035a4e77cd10482cda1c68873d8a43beff38891e46bcd
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 f87f767ae047c255814a4f2b31f67cec374a41de8ba4db4fc4ce6201d4937a27
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 3KB
                                                                                                                      • SHA256 75796af352d63582a3a39cca57ddc85adace0080164a46f3e1c1e8c8f15ca954
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 a678a04d7e9537c053fe91e5f17dfc66452e9c06f3fbe170a9b5962bd62f32c3
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      TransportSecurity~RFe5887b9.TMP

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5887b9.TMP
                                                                                                                      • Size 1KB
                                                                                                                      • SHA256 e28038619cfe758c12583d6ac21ceb6358cf86c417b3091bd569e1a294af6b64
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      CURRENT

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                                                                                                      • Size 16B
                                                                                                                      • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                                                                                                      • MD5 SHA1 SHA512

                                                                                                                      Local State

                                                                                                                      • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                      • Size 10KB
                                                                                                                      • SHA256 898cdbded74b08afd6038c2e9b446e3063768e40c936113cd66a0b4597be338b
                                                                                                                      • MD5 SHA1 SHA512 SSDEEP

                                                                                                                      default.dic

                                                                                                                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                      • Size 2B
                                                                                                                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                      • MD5 SHA1 SHA512