Overview

overview

8

Static

static

1

URLScan

urlscan

1

http://google.com

windows11-21h2-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    899s
  • max time network
    886s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    15/04/2026, 19:24

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    http://google.com
  • Sample260415-x4tmcabv2w
Score
8/10
discoverypersistenceransomware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Loads dropped DLL 2 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 50 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 34 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4944
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7fff3be9c188,0x7fff3be9c194,0x7fff3be9c1a0
      2⤵
        PID:4916
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1832,i,10232137024274645470,5502185537561089401,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=2152 /prefetch:11
        2⤵
        • System Time Discovery
        PID:1028
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,342024275584192879,9605693776956036841,262144 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:2
        2⤵
          PID:652
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2380,i,16077800982599100081,6750317778359776505,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=2664 /prefetch:13
          2⤵
            PID:5028
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3468,i,13903504511107305573,14376142770442131652,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
            2⤵
              PID:4132
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3472,i,15130448068653933385,11702847746078797790,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
              2⤵
                PID:3180
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4156,i,3362224024497094979,11598580816995175910,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:1
                2⤵
                  PID:3884
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,17365150843306117210,10019291718214844889,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4212 /prefetch:9
                  2⤵
                    PID:4112
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4192,i,15912782197963246642,9936601688355820802,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4188 /prefetch:1
                    2⤵
                      PID:572
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4284,i,16088179783467923292,7999753717139826277,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:9
                      2⤵
                        PID:656
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4576,i,3706908432055436037,11706966023392783546,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4628 /prefetch:14
                        2⤵
                          PID:2652
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=4576,i,8499093116921285964,1806710750875287208,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:1
                          2⤵
                            PID:3600
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3620,i,4536481595857723807,412092302718153097,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
                            2⤵
                              PID:2456
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3912,i,11762517952779006445,7660839382188368802,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3980 /prefetch:14
                              2⤵
                                PID:5808
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3900,i,1737097831447251704,5472856523380640759,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=5340 /prefetch:14
                                2⤵
                                  PID:5824
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6008,i,10576073006271387458,14217731841181274545,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:14
                                  2⤵
                                  • Suspicious use of WriteProcessMemory
                                  PID:1080
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                    cookie_exporter.exe --cookie-json=1128
                                    3⤵
                                      PID:5920
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,3412103233223454646,8765777903438444215,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
                                    2⤵
                                      PID:4820
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6128,i,3412103233223454646,8765777903438444215,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6136 /prefetch:14
                                      2⤵
                                        PID:3240
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,15667324931457451947,9260380972236765282,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
                                        2⤵
                                          PID:5788
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6344,i,1109955829570313463,8282940081950920919,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:14
                                          2⤵
                                            PID:5672
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6664,i,9113500961964162587,14191715692037241441,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6448 /prefetch:14
                                            2⤵
                                              PID:4032
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6412,i,7459884549273634337,2225739217798133582,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6620 /prefetch:14
                                              2⤵
                                                PID:4312
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6400,i,11992189772008501518,13915303642034556689,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6832 /prefetch:14
                                                2⤵
                                                  PID:2652
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,9969226467335869814,982220573429297307,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:14
                                                  2⤵
                                                    PID:4272
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=4556,i,2500450660572376281,276474811905193790,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:1
                                                    2⤵
                                                      PID:3036
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,1892251058643271192,2548251095143647103,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6572 /prefetch:14
                                                      2⤵
                                                        PID:2796
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,6289848970806174635,11633154635808857427,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:14
                                                        2⤵
                                                          PID:2260
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6396,i,8452349305530446613,5482543333038857838,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
                                                          2⤵
                                                            PID:4080
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5432,i,15098399450266310313,1936826203760436129,2097152 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
                                                            2⤵
                                                              PID:2940
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,11192435958435959255,2794660078660875398,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4652 /prefetch:12
                                                              2⤵
                                                                PID:5788
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,16877929286819722000,16245434831940648855,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:14
                                                                2⤵
                                                                  PID:2864
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,4917381015504510825,16354962561125207388,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:14
                                                                  2⤵
                                                                    PID:5764
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6280,i,14089970596001814685,1465605285491406538,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6432 /prefetch:14
                                                                    2⤵
                                                                      PID:3316
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,4711341336742303757,14978140478471929406,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
                                                                      2⤵
                                                                        PID:5212
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6004,i,8543370643385666107,16153766774470808888,262144 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:10
                                                                        2⤵
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        PID:5368
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3700,i,13559572290742940732,5786563625592699326,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:14
                                                                        2⤵
                                                                          PID:240
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6084,i,3178977114590267821,887149876156459753,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:14
                                                                          2⤵
                                                                            PID:5844
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4052,i,16367828708918220199,15972230841744256552,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
                                                                            2⤵
                                                                              PID:5864
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4840,i,1080088274710919019,7316776769479206500,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3384 /prefetch:14
                                                                              2⤵
                                                                                PID:4356
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,6283047741592454372,2481275412151568982,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:14
                                                                                2⤵
                                                                                  PID:3144
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4148,i,15735005497702317389,17248444956428675322,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7100 /prefetch:14
                                                                                  2⤵
                                                                                    PID:1424
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,14982897446251462264,532941556928112586,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:14
                                                                                    2⤵
                                                                                      PID:3668
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,563085524691167045,5521898717880632001,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:14
                                                                                      2⤵
                                                                                        PID:2464
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5556,i,1703201577245313242,15080152330726630953,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=3964 /prefetch:14
                                                                                        2⤵
                                                                                          PID:5412
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3896,i,8598849306176634390,15068577933338055617,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6444 /prefetch:14
                                                                                          2⤵
                                                                                            PID:5108
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7368,i,9199071519181081183,2437677389796231935,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:14
                                                                                            2⤵
                                                                                              PID:2300
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,222217724454630240,4863956578185979370,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:14
                                                                                              2⤵
                                                                                                PID:2356
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6924,i,3104912341087206753,10208210762037707685,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=6896 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:4604
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7008,i,7165270508485252600,1514131569709959944,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7136 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:1688
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7360,i,5337622597541308827,17328366853993445930,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:5224
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,17466739132414440710,5622891542771564138,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7208 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:2712
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,16301007982378335644,8169507667976473621,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:6076
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7004,i,3573452022771687998,12891657674799974807,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:14
                                                                                                          2⤵
                                                                                                            PID:1744
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5952,i,498294727822128930,16150666496513637987,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:14
                                                                                                            2⤵
                                                                                                              PID:4516
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,2691722239409807525,18285627196145223773,524288 --field-trial-handle=2124,i,9122376410180546293,10546385623070252502,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:4020
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                              1⤵
                                                                                                                PID:5020
                                                                                                              • C:\Windows\system32\sihost.exe
                                                                                                                sihost.exe
                                                                                                                1⤵
                                                                                                                • Suspicious use of FindShellTrayWindow
                                                                                                                PID:916
                                                                                                                • C:\Windows\explorer.exe
                                                                                                                  explorer.exe /LOADSAVEDWINDOWS
                                                                                                                  2⤵
                                                                                                                  • Boot or Logon Autostart Execution: Active Setup
                                                                                                                  • Enumerates connected drives
                                                                                                                  • Checks SCSI registry key(s)
                                                                                                                  • Modifies registry class
                                                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                                                  • Suspicious use of AdjustPrivilegeToken
                                                                                                                  • Suspicious use of FindShellTrayWindow
                                                                                                                  • Suspicious use of SendNotifyMessage
                                                                                                                  • Suspicious use of SetWindowsHookEx
                                                                                                                  PID:3976
                                                                                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                1⤵
                                                                                                                • Enumerates system info in registry
                                                                                                                • Modifies registry class
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:1580
                                                                                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                1⤵
                                                                                                                • Modifies registry class
                                                                                                                • Suspicious use of SetWindowsHookEx
                                                                                                                PID:4392

                                                                                                              Network

                                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                                    Replay Monitor

                                                                                                                    Loading Replay Monitor...

                                                                                                                    Downloads

                                                                                                                    blocklist
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                    • Size 105KB
                                                                                                                    • SHA256 f00ccd228daef1e7764629352f6409e7c411bd43dff6a14e6176681c9e065b7d
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    protocols.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    autofill_bypass_cache_forms.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                    • Size 161B
                                                                                                                    • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    edge_autofill_global_block_list.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                    • Size 6KB
                                                                                                                    • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    v1FieldTypes.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                    • Size 509KB
                                                                                                                    • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    crl-set
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                    • Size 22KB
                                                                                                                    • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    settings.dat
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                    • Size 280B
                                                                                                                    • SHA256 e365308021ade71cd7fd8bcb77743afa8328c70101415bb9b419c11ce7afa8b2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    settings.dat
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                    • Size 280B
                                                                                                                    • SHA256 6a6727a0a4fa4cb1a57a4c321f756d9dd6f44ea45d205327c5e7e5f18c2f6950
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LOG.old
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                    • Size 352B
                                                                                                                    • SHA256 a5fc6f2a203d0e79e225ad3d72bec8ea2387b3d0fbc35d9bc190fd39ef0b39cc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LOG.old
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                    • Size 357B
                                                                                                                    • SHA256 471969dc0872deef133a3560c4e0237ba9524f214faecfc92151eb8723869f79
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    MANIFEST-000001
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                    • Size 391B
                                                                                                                    • SHA256 b8fc4cff1e6fe3fe5c28d28b1d016f8be1af2e6d09a26ca52e63813e2159bbc7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    BookmarkMergedSurfaceOrdering
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                    • Size 6B
                                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                    • Size 5KB
                                                                                                                    • SHA256 14350fe53d6adfb053d560701477ff86039db58761d900cc1fa4f83882d2c5e3
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe594656.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe594656.TMP
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 5b6e2218d48897fd259c2f5bc2225ef7fe98d8825078bc7f33c3e2fa5813c817
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    SiteList-Enterprise.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Edge Profile.ico
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                    • Size 70KB
                                                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    HubApps
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                    • Size 106KB
                                                                                                                    • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 6KB
                                                                                                                    • SHA256 de1e1553155b790fb33e6370fa45e4fd49329f9f955cd4ec026f8a589699a8b7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 f6e094eab16350b5e73f3d702568efaf9a3f3bb29bdaa34e0992a45deeba37f7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Network Persistent State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                    • Size 111B
                                                                                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    SCT Auditing Pending Reports
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                    • Size 2B
                                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Sdch Dictionaries
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                    • Size 211B
                                                                                                                    • SHA256 986932d4037aaaa3fd8e7f82e6b44572f652fd4f726861043cc8581a56433420
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Sdch Dictionaries
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                    • Size 40B
                                                                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 13KB
                                                                                                                    • SHA256 7ca35304315efbf78124193cd38a4d324c3b112fa3599660499fe6b17b9ea677
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 8b404281ca017fdc699f1149ad71de64a97f21b114ec7cc2e08c1b21e54ca391
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 da656e4dda8910dec84483f4bdd86dee7749a3bea06513e72a14ac07734b0b6a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                    • Size 31KB
                                                                                                                    • SHA256 6fb78b4c3a221c26511e04c4cd52ca74cd44992e1636f2987f7868489638a4de
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Secure Preferences
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                    • Size 36KB
                                                                                                                    • SHA256 a411f9efb7c2b4b21ddc814087e1591ff9635937ddbcaa119c3b887ff5028eca
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a79fcb8f-822d-4962-8b2f-1c13b8ddcfb6\index-dir\the-real-index
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 75d85eb84bc0d8e1d34324d20722d50f12e1287935a83292524717959cf9b82d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index~RFe5d2e66.TMP
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a79fcb8f-822d-4962-8b2f-1c13b8ddcfb6\index-dir\the-real-index~RFe5d2e66.TMP
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 481e7f064df3acd3fe79e170bb8544412a9fef41e0735400a1f73cd349c71875
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    index.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                    • Size 474B
                                                                                                                    • SHA256 8b50cfb482eaf6f945327daafc701f3bcb3c770b8364d7e1daa3a65e2ce7a32a
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    the-real-index
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 624c3474ee126a0562c72332687051d485dac0612605400954baa9daa5c925f2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    sync_diagnostic.log
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 5446b14b0ba532d9a62f57357ae1c46cdaa65f869be64bb54c1215d6e2331051
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    CURRENT
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                    • Size 16B
                                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    MANIFEST-000001
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                    • Size 41B
                                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    domain_actions.dll
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.16\domain_actions.dll
                                                                                                                    • Size 64KB
                                                                                                                    • SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    data.txt
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
                                                                                                                    • Size 145KB
                                                                                                                    • SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    720ea966-c5e2-4c1d-930d-e952552d0874.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\720ea966-c5e2-4c1d-930d-e952552d0874.tmp
                                                                                                                    • Size 22KB
                                                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    office_endpoints_list.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 18KB
                                                                                                                    • SHA256 99fbf17b21f7708808b5dadb3d141f1c9abb0d70b7d82e5aafd76f94678c9ea7
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 29KB
                                                                                                                    • SHA256 1a83f54ec3c4f4b640ca88571ad9283dc1e81408c4afba53676be82f760cf73e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 28KB
                                                                                                                    • SHA256 8343a585d256a9803d2f5ad63db1911a803d3efc318529b378cac1db2e0f9083
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 18KB
                                                                                                                    • SHA256 0d2f0441c8422a65e1023b727ec2b6197b466204daab96b6f24c7687a42bfcb6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 ca80b0119c2a15d8c0e4f90474903c850800ea074bdd9e387b85cd48e2f08413
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Local State
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 bd1bd3496b1eb8904bbd014163968e64c02a3738f95158daefe571cf0e018046
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    crs.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\crs.pb
                                                                                                                    • Size 251KB
                                                                                                                    • SHA256 576d77d3085ff9156298e60dee868364cabab7911edf6f9a4d3ad5f351d5059f
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    ct_config.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\ct_config.pb
                                                                                                                    • Size 16KB
                                                                                                                    • SHA256 dfc86083d2fa2463f12d1d096db6084c860cb8bfddc3d2cf8e818f65353241d6
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    kp_pinslist.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\29.0.0.0\kp_pinslist.pb
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 9314218dc6642ea1980d504ec45e23aa2b4e7775ef13f7c7121271dbd60b1df4
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    safety_tips.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                    • Size 163KB
                                                                                                                    • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    typosquatting_list.pb
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Advertising
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                    • Size 19KB
                                                                                                                    • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Analytics
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    CompatExceptions
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                    • Size 689B
                                                                                                                    • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Content
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                    • Size 4KB
                                                                                                                    • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Cryptomining
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                    • Size 668B
                                                                                                                    • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Entities
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                    • Size 68KB
                                                                                                                    • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Fingerprinting
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LICENSE
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                    • Size 34KB
                                                                                                                    • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Other
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                    • Size 34B
                                                                                                                    • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Social
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                    • Size 754B
                                                                                                                    • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    TransparentAdvertisers
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                    • Size 105B
                                                                                                                    • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Advertising
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                    • Size 20KB
                                                                                                                    • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Analytics
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Content
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                    • Size 5KB
                                                                                                                    • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Cryptomining
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                    • Size 32B
                                                                                                                    • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    Entities
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                    • Size 106KB
                                                                                                                    • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    Fingerprinting
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LICENSE
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                    • Size 66B
                                                                                                                    • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Other
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                    • Size 198B
                                                                                                                    • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Social
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                    • Size 3KB
                                                                                                                    • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    keys.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                    • Size 8KB
                                                                                                                    • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    well_known_domains.dll
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                    • Size 572KB
                                                                                                                    • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    nav_config.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    4798308d-4935-4404-a747-d0a4cd33ab98.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\4798308d-4935-4404-a747-d0a4cd33ab98.tmp
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 252B
                                                                                                                    • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 372B
                                                                                                                    • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 b3dcdcd6b2e9c81c76a63ec2591bcb0f840a13f6a1a8511425a6ffaa3aaa155b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 732B
                                                                                                                    • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 e99505afb93835d433016fc3c7e586e3643594914a27f111da3f4057a400bab1
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 492B
                                                                                                                    • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 612B
                                                                                                                    • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 852B
                                                                                                                    • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 972B
                                                                                                                    • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 f932e2485ac808efdae0f6f6b8cd67b48083a5dfde941b3a31f8d72306c93321
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 132B
                                                                                                                    • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 7fdab2897cbea5aab8f8927b53544c76138542d28015efbef37e179ec8c308f6
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 f7cc07f561a3ab8babb617dcc30d7978cb816f0bff26da3c0b37978c192e4667
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 2KB
                                                                                                                    • SHA256 d6556657588457a04d4dc0b29a3005674c011f754203aa50dc58780d298c2137
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    metadata.json
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 18cd51fca26e4ed40a839f7e87eee395843ee3921c88afef4c904971ee8e55cb
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    e263e1c6-773f-4a64-8662-46d173bbc614.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\e263e1c6-773f-4a64-8662-46d173bbc614.tmp
                                                                                                                    • Size 13B
                                                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    0af72952-9f99-44ea-bb51-4036b6c1a801.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\0af72952-9f99-44ea-bb51-4036b6c1a801.tmp
                                                                                                                    • Size 1B
                                                                                                                    • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    2bad9b88-9807-44d2-8bc5-6e465acd7370.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\2bad9b88-9807-44d2-8bc5-6e465acd7370.tmp
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    e4476685-cd4a-4316-ba6c-a2db64d24fa3.tmp
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4944_680331938\e4476685-cd4a-4316-ba6c-a2db64d24fa3.tmp
                                                                                                                    • Size 147KB
                                                                                                                    • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    content_new.js
                                                                                                                    • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4944_835559203\CRX_INSTALL\content_new.js
                                                                                                                    • Size 10KB
                                                                                                                    • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1054642513\manifest.json
                                                                                                                    • Size 160B
                                                                                                                    • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1288602723\manifest.json
                                                                                                                    • Size 102B
                                                                                                                    • SHA256 0b11bc370854bd2e625deb04fdfc53ba444e4af63ba831f9de785b44464b59b9
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1533005\manifest.json
                                                                                                                    • Size 160B
                                                                                                                    • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1709733279\manifest.json
                                                                                                                    • Size 113B
                                                                                                                    • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1796976181\manifest.json
                                                                                                                    • Size 141B
                                                                                                                    • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1833165922\manifest.json
                                                                                                                    • Size 135B
                                                                                                                    • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1838031650\manifest.json
                                                                                                                    • Size 165B
                                                                                                                    • SHA256 605fad4274a41aa5139f0339fd3f0ca2483c9507cad75df8269c01c0d75aeb4d
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_1838896859\manifest.json
                                                                                                                    • Size 177B
                                                                                                                    • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_384878800\manifest.json
                                                                                                                    • Size 238B
                                                                                                                    • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_492631649\manifest.json
                                                                                                                    • Size 135B
                                                                                                                    • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    Staging
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_510331831\Sigma\Staging
                                                                                                                    • Size 36B
                                                                                                                    • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_510331831\manifest.json
                                                                                                                    • Size 132B
                                                                                                                    • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_577350094\manifest.json
                                                                                                                    • Size 72B
                                                                                                                    • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    LICENSE
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_596193591\LICENSE
                                                                                                                    • Size 1KB
                                                                                                                    • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_596193591\manifest.json
                                                                                                                    • Size 79B
                                                                                                                    • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_744385297\manifest.json
                                                                                                                    • Size 119B
                                                                                                                    • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_747382643\manifest.json
                                                                                                                    • Size 85B
                                                                                                                    • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_768036688\manifest.json
                                                                                                                    • Size 43B
                                                                                                                    • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                    • MD5 SHA1 SHA512
                                                                                                                    Submit Download

                                                                                                                    manifest.json
                                                                                                                    • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4944_979388197\manifest.json
                                                                                                                    • Size 52B
                                                                                                                    • SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
                                                                                                                    • MD5 SHA1 SHA512 TLSH
                                                                                                                    Submit Download

                                                                                                                    memory/916-1382-0x0000017F61900000-0x0000017F6196F000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1580-1208-0x0000018DFB040000-0x0000018DFB060000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1580-1391-0x00000184D6130000-0x00000184D619F000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1580-1232-0x0000018DFB570000-0x0000018DFB590000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1580-1231-0x0000018DFBE00000-0x0000018DFBF00000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/1580-1209-0x0000018CFA9A0000-0x0000018CFA9C0000-memory.dmp
                                                                                                                    Download

                                                                                                                    memory/5920-118-0x00000142A43D0000-0x00000142A443F000-memory.dmp
                                                                                                                    Download