Analysis

  • user interaction
    yes
  • max time kernel
    1800s
  • max time network
    1803s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    20/04/2026, 09:46

General

  • Target
    https://hyperbeam.com/i/2UKH4LPy
  • Sample260420-lr2lmsbs3s

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

  • Loads dropped DLL 2 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Windows directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks SCSI registry key(s) 3 TTPs 58 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 5 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 53 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: LoadsDriver 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://hyperbeam.com/i/2UKH4LPy
    1⤵
    • Loads dropped DLL
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1820
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7fff6590c188,0x7fff6590c194,0x7fff6590c1a0
      2⤵
        PID:4576
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1748,i,800280240538951289,17873191002631862801,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=2092 /prefetch:11
        2⤵
        • System Time Discovery
        PID:3712
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,7482595388383819806,3706799912332211450,262144 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=2052 /prefetch:2
        2⤵
          PID:3092
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,15557511681759791102,448503633776622389,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=2436 /prefetch:13
          2⤵
            PID:2936
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3508,i,6254348012607969017,1209499138685908410,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=3584 /prefetch:1
            2⤵
              PID:4960
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3512,i,8527936077068965945,7662806013116457312,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=3588 /prefetch:1
              2⤵
                PID:3700
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4124,i,15493195854493461183,1880571620825931664,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:1
                2⤵
                  PID:3520
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4136,i,149920878434017492,16500689635870339664,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:9
                  2⤵
                    PID:5036
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4152,i,10633041160405154655,16019347545677167485,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:1
                    2⤵
                      PID:5108
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4164,i,3128552215653043113,13619456785768276936,2097152 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4632 /prefetch:9
                      2⤵
                        PID:4280
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,17346817648484630319,579079410826193102,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:14
                        2⤵
                          PID:4420
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4556,i,15463238073225825005,9520050103080396714,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:14
                          2⤵
                            PID:2452
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3680,i,15212812385616651882,11314933201351167705,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:14
                            2⤵
                              PID:4972
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,12964028880562800037,1526666542398679891,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:14
                              2⤵
                                PID:2436
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,3244611430821683740,17673503264873290223,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                                2⤵
                                  PID:4876
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6004,i,12888623266974172713,12138120952011724783,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5980 /prefetch:14
                                  2⤵
                                  • Suspicious use of WriteProcessMemory
                                  PID:2352
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                    cookie_exporter.exe --cookie-json=1144
                                    3⤵
                                      PID:3572
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,3244611430821683740,17673503264873290223,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5968 /prefetch:14
                                    2⤵
                                      PID:3416
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6320,i,6305252779658959076,3103971111107733165,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:14
                                      2⤵
                                        PID:4784
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6416,i,3662012803222138,17554730908302677773,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6400 /prefetch:14
                                        2⤵
                                          PID:4872
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6488,i,12598864986454909332,18339935093186799815,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6004 /prefetch:14
                                          2⤵
                                            PID:804
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6816,i,4643299354401618078,17610590988580810676,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:14
                                            2⤵
                                              PID:2608
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,3116141796148879292,15402191678180863484,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:14
                                              2⤵
                                                PID:4872
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4916,i,7708130978150747964,8201100911800105306,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:14
                                                2⤵
                                                  PID:2452
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4720,i,12420951311215021554,14032409946965597063,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:14
                                                  2⤵
                                                    PID:320
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4636,i,12383327766817810199,9874005006133647069,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5068 /prefetch:14
                                                    2⤵
                                                      PID:2652
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5648,i,12190842840187128050,13403538969530197028,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:14
                                                      2⤵
                                                        PID:3036
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5980,i,2213849574018878136,18099706638096728055,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6808 /prefetch:14
                                                        2⤵
                                                          PID:4352
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,4917895421068517653,5612227481950476714,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:14
                                                          2⤵
                                                            PID:1896
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6404,i,7717320688319576409,14547539020105038858,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:14
                                                            2⤵
                                                              PID:2548
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6284,i,7170609530630618383,9395999135855495197,262144 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6672 /prefetch:10
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:5032
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3076,i,8881397120824151715,17297931171473864147,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=3728 /prefetch:14
                                                              2⤵
                                                                PID:4012
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5076,i,2008144989521880725,7805202749211258397,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
                                                                2⤵
                                                                  PID:4188
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4736,i,17855763898603963026,16753123562175945775,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
                                                                  2⤵
                                                                    PID:4888
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5524,i,275751808004869371,6111264112133523619,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:14
                                                                    2⤵
                                                                      PID:424
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3452,i,13233049793435865851,1445406228329004818,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5792 /prefetch:14
                                                                      2⤵
                                                                        PID:3972
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4868,i,9872991461905769636,16588416311853684811,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
                                                                        2⤵
                                                                          PID:1220
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,867532623913279902,6763587722338950542,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4164 /prefetch:14
                                                                          2⤵
                                                                            PID:2764
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5776,i,1632933884866104734,11773944331443857441,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:12
                                                                            2⤵
                                                                              PID:1256
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5056,i,13551895961482117385,10814772503557347895,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4832 /prefetch:14
                                                                              2⤵
                                                                                PID:3864
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6936,i,961014697996752544,4242635622798163036,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6940 /prefetch:14
                                                                                2⤵
                                                                                  PID:1204
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6812,i,9537442171706730819,13975099512182492525,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:14
                                                                                  2⤵
                                                                                    PID:4032
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6160,i,14225879665107716459,7644552040630403932,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6192 /prefetch:14
                                                                                    2⤵
                                                                                      PID:3028
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5724,i,10351073646826812373,17640052417027959072,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:14
                                                                                      2⤵
                                                                                        PID:3960
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1048,i,12024881107753642456,5741567826484641717,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4836 /prefetch:14
                                                                                        2⤵
                                                                                          PID:936
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,1991228916802567766,16939748690771069432,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
                                                                                          2⤵
                                                                                            PID:4752
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6920,i,772046020991199014,9108582508687727513,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=3388 /prefetch:14
                                                                                            2⤵
                                                                                              PID:3180
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3384,i,18172623157297255281,246556688382574865,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4044 /prefetch:14
                                                                                              2⤵
                                                                                                PID:760
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6156,i,17241193255314791830,8366337148163419027,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=5524 /prefetch:14
                                                                                                2⤵
                                                                                                  PID:3284
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5480,i,7356230600009123331,2387467951854012550,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6724 /prefetch:14
                                                                                                  2⤵
                                                                                                    PID:4240
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6180,i,5436379430891946800,5627452382656768728,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6860 /prefetch:14
                                                                                                    2⤵
                                                                                                      PID:3604
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3372,i,1444987947572239139,6239215055440016541,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4664 /prefetch:14
                                                                                                      2⤵
                                                                                                        PID:4504
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6440,i,1419554283766571769,12927047921769246722,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:14
                                                                                                        2⤵
                                                                                                          PID:3704
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4644,i,8518918823884604078,9629464761910098057,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6424 /prefetch:14
                                                                                                          2⤵
                                                                                                            PID:4516
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,15004961056520936751,5491347858035848211,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
                                                                                                            2⤵
                                                                                                              PID:2892
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4132,i,6276829244046791913,9553660671211533056,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6852 /prefetch:14
                                                                                                              2⤵
                                                                                                                PID:760
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3380,i,13899842298803938158,4647231016295922079,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:14
                                                                                                                2⤵
                                                                                                                  PID:3504
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,14979897136493900016,16082432334796191433,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6336 /prefetch:14
                                                                                                                  2⤵
                                                                                                                    PID:3524
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6200,i,3992890929512488627,15940318529896553374,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=4656 /prefetch:14
                                                                                                                    2⤵
                                                                                                                      PID:3212
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6712,i,14006571119946889681,1206674719430312600,524288 --field-trial-handle=2056,i,2462599682918273346,14089598412706081548,262144 --variations-seed-version --mojo-platform-channel-handle=6976 /prefetch:14
                                                                                                                      2⤵
                                                                                                                        PID:6640
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                      1⤵
                                                                                                                        PID:3708
                                                                                                                      • C:\Windows\system32\sihost.exe
                                                                                                                        sihost.exe
                                                                                                                        1⤵
                                                                                                                        • Suspicious use of FindShellTrayWindow
                                                                                                                        PID:3880
                                                                                                                        • C:\Windows\explorer.exe
                                                                                                                          explorer.exe /LOADSAVEDWINDOWS
                                                                                                                          2⤵
                                                                                                                          • Boot or Logon Autostart Execution: Active Setup
                                                                                                                          • Enumerates connected drives
                                                                                                                          • Checks SCSI registry key(s)
                                                                                                                          • Modifies registry class
                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                          • Suspicious use of AdjustPrivilegeToken
                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                          • Suspicious use of SendNotifyMessage
                                                                                                                          • Suspicious use of SetWindowsHookEx
                                                                                                                          PID:3892
                                                                                                                      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                                                                                        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                                                                                        1⤵
                                                                                                                        • Modifies registry class
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:4604
                                                                                                                      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                                                                                        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                                                                                        1⤵
                                                                                                                        • Enumerates system info in registry
                                                                                                                        • Modifies registry class
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:1960
                                                                                                                      • C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe
                                                                                                                        "C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.2104.12721.0_x64__8wekyb3d8bbwe\LocalBridge.exe" /InvokerPRAID: Microsoft.MicrosoftOfficeHub notifications
                                                                                                                        1⤵
                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                        PID:952

                                                                                                                      Network

                                                                                                                            MITRE ATT&CK Enterprise v16

                                                                                                                            Replay Monitor

                                                                                                                            Loading Replay Monitor...

                                                                                                                            Downloads

                                                                                                                            blocklist

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                            • Size 105KB
                                                                                                                            • SHA256 3181581ff9a1d358cbc13c4b5b51ac0d60650b41933ed6f6b59bddd8d0e5ebcd
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            protocols.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            autofill_bypass_cache_forms.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                            • Size 161B
                                                                                                                            • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            edge_autofill_global_block_list.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            v1FieldTypes.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                            • Size 509KB
                                                                                                                            • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            crl-set

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                            • Size 22KB
                                                                                                                            • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                            • Size 280B
                                                                                                                            • SHA256 eacd218daf22fcefbc23ae70ce919d8ac95b89c3f7d038f647296c47a218fc46
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            settings.dat

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                            • Size 280B
                                                                                                                            • SHA256 7173f2853e3b591f142ed047bb6a2ea62d5d817f9016fdd31efbebd88f820e91
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LOG.old

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                            • Size 347B
                                                                                                                            • SHA256 0fb60aba6b39055867f253dc188d3a57b6011467bd6ddfd11574daee91eb5fd2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LOG.old

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                            • Size 331B
                                                                                                                            • SHA256 41ca355b7e001ac6fc3f990bd5c93883a6f5f4cb00ced4d2a3526975fead40d9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LOG.old

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                            • Size 352B
                                                                                                                            • SHA256 65b8565c294eb1629e4ceb89539088563e3a21f3f9060c17c5c451560687b0f8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                                            • Size 391B
                                                                                                                            • SHA256 b8fc4cff1e6fe3fe5c28d28b1d016f8be1af2e6d09a26ca52e63813e2159bbc7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            BookmarkMergedSurfaceOrdering

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                            • Size 6B
                                                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            f_00007a

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a
                                                                                                                            • Size 54KB
                                                                                                                            • SHA256 abd5536fb794002e30b8eb2a3b69f033a3e944f6a88bfcaa5be0757f63083859
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 0ac6d9aea7248ddfd0618485c498f082c447848ed798e99114a973d3cd673072
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index~RFe582dc2.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe582dc2.TMP
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 19b2042116223fd59bf9c2402ea4f61bd840683cfa9f8d9e6aa846acc16b3511
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            SiteList-Enterprise.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                            • Size 2B
                                                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Edge Profile.ico

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                            • Size 70KB
                                                                                                                            • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            HubApps

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                            • Size 106KB
                                                                                                                            • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 8cf78f8f5e267bdd0375951e8bcaeff97a8162e7c3d0976006b1f7f8df5b1de9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 d4a7725caf1e055d039950ea3a65b7e32c71e1bc916c40815195d627012176c5
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Network Persistent State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                            • Size 111B
                                                                                                                            • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            SCT Auditing Pending Reports

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                            • Size 2B
                                                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                            • Size 14KB
                                                                                                                            • SHA256 d76512cfeb1d37a9a8d9d96ba554a29c969ed5204f94dcc7d134b9fc8098f48e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                            • Size 13KB
                                                                                                                            • SHA256 c6ae5e98177ad012fd79d48921e01e32342306c44649b9111d3ec987b3151026
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                            • Size 14KB
                                                                                                                            • SHA256 dea5dbc7081a4cbff4ebb30428baede003af89272f61299fbfdf52864026a43a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                            • Size 29KB
                                                                                                                            • SHA256 b0934e00830f67a05890c9bf6b7a8802f438934bfb3f6fb1dc0c15cab575b4dc
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Secure Preferences

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                            • Size 36KB
                                                                                                                            • SHA256 3c085ba0cfb48eef3c02daeb7407a24ea7b11335a34de38672310ff41b7b7e13
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3a3ef770bfb7ff7305a15868ae01c49399715c03\6b5f287b-3c11-4f0b-86a1-4f7603ddd043\index-dir\the-real-index
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 a383b05011915b5d890276bbd22e693e2dc1f6e2352207d8eeccd7b6e8ee8277
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index~RFe584476.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3a3ef770bfb7ff7305a15868ae01c49399715c03\6b5f287b-3c11-4f0b-86a1-4f7603ddd043\index-dir\the-real-index~RFe584476.TMP
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 75b9f3f89a291c25787cc409ea8ebc750fc7aa3c54e39efc35779f498b7eeab4
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            index.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3a3ef770bfb7ff7305a15868ae01c49399715c03\index.txt
                                                                                                                            • Size 244B
                                                                                                                            • SHA256 d4cc9d696509664c58120d3bf4328b6b6c19207664dc485c62572fc82d7c2eb3
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            index.txt~RFe5844a5.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3a3ef770bfb7ff7305a15868ae01c49399715c03\index.txt~RFe5844a5.TMP
                                                                                                                            • Size 248B
                                                                                                                            • SHA256 49c206b34280fdec4bbb0e2ed61b5e8db5a1624be702568d191cd95fad5bca83
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\48166f30-78f6-4da5-98a5-a0ff368b9888\index-dir\the-real-index
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 e2c7c06043ca4c7a643ca16c6538b1a3ba5325a3c5c08d5482ebb9f0545a0fc6
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index~RFe5c7269.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\48166f30-78f6-4da5-98a5-a0ff368b9888\index-dir\the-real-index~RFe5c7269.TMP
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 0e2a0c150afe0662a824ba6179b9292391730cf8a7e16c19294af8c3970078b5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            index.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                            • Size 371B
                                                                                                                            • SHA256 0295f7754a049def409ba9bd8026a095367d9d5470490934d044d1f0687306a9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 be13316f6a9fd7c68d11bc1ca629c7bd099de1b2821d871380e47a7a40fa8330
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            the-real-index~RFe582d45.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582d45.TMP
                                                                                                                            • Size 48B
                                                                                                                            • SHA256 624809c5c320cb13f5e125bd77c1f269009acaed12603b4052995ee1a6080169
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            sync_diagnostic.log

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                            • Size 6KB
                                                                                                                            • SHA256 5c3cddebbd6758ae9b9e3520674f428e94885aa2a31bc5795cf40be819468ec6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            CURRENT

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                            • Size 16B
                                                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            MANIFEST-000001

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                            • Size 41B
                                                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            domain_actions.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.16\domain_actions.dll
                                                                                                                            • Size 64KB
                                                                                                                            • SHA256 cd4e81ff9db4c6b086b70b09919b9426ca1f2c05ec43c477e9ce99156be66399
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            data.txt

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.4\data.txt
                                                                                                                            • Size 145KB
                                                                                                                            • SHA256 7dd75cb36b4cc7c5f2df67bac823b9d9d2c3653172ff73ce6cccd39683970a08
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            OperationConfig

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                            • Size 22KB
                                                                                                                            • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            OperationConfig~RFe58c232.TMP

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe58c232.TMP
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            office_endpoints_list.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            wallet-checkout-eligible-sites.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
                                                                                                                            • Size 23KB
                                                                                                                            • SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            wallet-notification-config.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
                                                                                                                            • Size 804B
                                                                                                                            • SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            wallet-stable.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
                                                                                                                            • Size 81KB
                                                                                                                            • SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            wallet-tokenization-config.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
                                                                                                                            • Size 34KB
                                                                                                                            • SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 18KB
                                                                                                                            • SHA256 bb3d0f935ee5bf54aa6e4f08cdec72dfed759cdc0cde79fdc407a2c8d52dbf3b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 28KB
                                                                                                                            • SHA256 87df6d51c5fe3c9372e6007fdd0405e9e1c4a8bf81408e8081cff1e080b1e550
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 18KB
                                                                                                                            • SHA256 65854d08356b07d13373b46abc4d79bf8770ff9cff8c33f83ddbbf789dee7985
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 29KB
                                                                                                                            • SHA256 004d6ccb8a0851d12644600529cd280fe698c6eb1b6d5833100b17c90123ce23
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 841ebe0f13dfb8368f4e74323162b03b688c97c478ad81cc6adf1a7dabc62e1a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 770ef89e9870a721489eb2afe470ac6ea763d5c43b8c23b1534f3530c7ac04fb
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Local State

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                            • Size 18KB
                                                                                                                            • SHA256 5414146af12cf8d60491f7f910a239338555ebd491f061e18d7f843db723bcf4
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            crs.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
                                                                                                                            • Size 233KB
                                                                                                                            • SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            ct_config.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
                                                                                                                            • Size 16KB
                                                                                                                            • SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            kp_pinslist.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            safety_tips.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                            • Size 163KB
                                                                                                                            • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            typosquatting_list.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Filtering Rules

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                                                            • Size 2.1MB
                                                                                                                            • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                                                            • Size 24KB
                                                                                                                            • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Advertising

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                            • Size 19KB
                                                                                                                            • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Analytics

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            CompatExceptions

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                            • Size 689B
                                                                                                                            • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Content

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                            • Size 4KB
                                                                                                                            • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Cryptomining

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                            • Size 668B
                                                                                                                            • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Entities

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                            • Size 68KB
                                                                                                                            • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Fingerprinting

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                            • Size 34KB
                                                                                                                            • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Other

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                            • Size 34B
                                                                                                                            • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Social

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                            • Size 754B
                                                                                                                            • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            TransparentAdvertisers

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                            • Size 105B
                                                                                                                            • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Advertising

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                            • Size 20KB
                                                                                                                            • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Analytics

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Content

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                            • Size 5KB
                                                                                                                            • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Cryptomining

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                            • Size 32B
                                                                                                                            • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            Entities

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                            • Size 106KB
                                                                                                                            • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            Fingerprinting

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                            • Size 66B
                                                                                                                            • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Other

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                            • Size 198B
                                                                                                                            • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Social

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                            • Size 3KB
                                                                                                                            • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            keys.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                            • Size 8KB
                                                                                                                            • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            typosquatting_list.pb

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                                                                            • Size 1.6MB
                                                                                                                            • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            well_known_domains.dll

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                            • Size 572KB
                                                                                                                            • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            nav_config.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            ranked_dicts

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
                                                                                                                            • Size 865KB
                                                                                                                            • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 372B
                                                                                                                            • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 732B
                                                                                                                            • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 132B
                                                                                                                            • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 492B
                                                                                                                            • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 852B
                                                                                                                            • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 612B
                                                                                                                            • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 252B
                                                                                                                            • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 d0ee26536528a5767082e551baa73a4a5485daebf60654dacd14f4281c75ee13
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 e99505afb93835d433016fc3c7e586e3643594914a27f111da3f4057a400bab1
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 d8df03854fa23c4c861eda4c9a045557afb804cfedf8da66201c153b7d14e3d0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 b3dcdcd6b2e9c81c76a63ec2591bcb0f840a13f6a1a8511425a6ffaa3aaa155b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 972B
                                                                                                                            • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f932e2485ac808efdae0f6f6b8cd67b48083a5dfde941b3a31f8d72306c93321
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 808005f9eb9bcfa4ef532d6fe05e58362ff43e04982e812b2f01a35409fd454a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 8290028485790449ced45660aae9603a4f302d974dfd4f04c49ed54b5b4b3d61
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 a4d1290bce468760eb6986853c2acb57a4198ddf02522c8c17ab333ae24a07c4
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 795bac5bb1a34a4b175275dc9b55f7178bb739947313dac3271ebd3dfa9f6483
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 75752d6bd2932709cf9e4de577782d7d6565ac6e404dcea6c90e06abc598e6a5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 18cd51fca26e4ed40a839f7e87eee395843ee3921c88afef4c904971ee8e55cb
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 f7cc07f561a3ab8babb617dcc30d7978cb816f0bff26da3c0b37978c192e4667
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 2cf663b45293110165cf64834a5b22b02f3b8a7a07227229fccd8751f552319a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 b81aca28969e5689d1a61edc3f9c6f9b37cd4a36c10c3038a5a25682f09d94b0
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            metadata.json

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 afbb2239b1e01f58ae9d2608c059d40eee6d7943b1223f1856d1f0169759a38e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            7153b3fd-da46-46ed-8189-c0220dfe0d21.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\7153b3fd-da46-46ed-8189-c0220dfe0d21.tmp
                                                                                                                            • Size 13B
                                                                                                                            • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            0b18e740-7892-40ec-b24e-1052b2b12c0d.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\0b18e740-7892-40ec-b24e-1052b2b12c0d.tmp
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            8657f5b0-b4af-45a4-95c7-5a0a312c1e27.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\8657f5b0-b4af-45a4-95c7-5a0a312c1e27.tmp
                                                                                                                            • Size 1B
                                                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            73e2a2b0-1156-4a29-9e2e-e74b1ca3b450.tmp

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1820_2064021462\73e2a2b0-1156-4a29-9e2e-e74b1ca3b450.tmp
                                                                                                                            • Size 147KB
                                                                                                                            • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            content_new.js

                                                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1820_2133208930\CRX_INSTALL\content_new.js
                                                                                                                            • Size 10KB
                                                                                                                            • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            default.dic

                                                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                            • Size 2B
                                                                                                                            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1077332252\manifest.json
                                                                                                                            • Size 1001B
                                                                                                                            • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            LICENSE

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1138381320\LICENSE
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1138381320\manifest.json
                                                                                                                            • Size 79B
                                                                                                                            • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1142424713\manifest.json
                                                                                                                            • Size 85B
                                                                                                                            • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1183880549\manifest.json
                                                                                                                            • Size 102B
                                                                                                                            • SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1207952069\manifest.json
                                                                                                                            • Size 118B
                                                                                                                            • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1439238290\manifest.json
                                                                                                                            • Size 238B
                                                                                                                            • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1489137827\manifest.json
                                                                                                                            • Size 72B
                                                                                                                            • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            edge_checkout_page_validator.js

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1584651383\edge_checkout_page_validator.js
                                                                                                                            • Size 990KB
                                                                                                                            • SHA256 217a62797b59bdfc667227a422876ccd0f782b2ea41d33fc93c36a6a0db35b09
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1584651383\manifest.json
                                                                                                                            • Size 146B
                                                                                                                            • SHA256 d864d826358b5a17c17818c4beb06143f6059377079f0a576764e29f92635145
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1623943353\manifest.json
                                                                                                                            • Size 52B
                                                                                                                            • SHA256 36565d2ebd6c48537cb3e6fe24ac74ca68dda18b3f0f8be13f47d01aec181d62
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1637403739\manifest.json
                                                                                                                            • Size 177B
                                                                                                                            • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1638906694\manifest.json
                                                                                                                            • Size 76B
                                                                                                                            • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1791215067\manifest.json
                                                                                                                            • Size 69B
                                                                                                                            • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            notification_fast.bundle.js.LICENSE.txt

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1875807274\Notification\notification_fast.bundle.js.LICENSE.txt
                                                                                                                            • Size 551B
                                                                                                                            • SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            tokenized-card.bundle.js.LICENSE.txt

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1875807274\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
                                                                                                                            • Size 1KB
                                                                                                                            • SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            strings.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1875807274\json\i18n-tokenized-card\fr-CA\strings.json
                                                                                                                            • Size 2KB
                                                                                                                            • SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1875807274\manifest.json
                                                                                                                            • Size 121B
                                                                                                                            • SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1880498589\manifest.json
                                                                                                                            • Size 135B
                                                                                                                            • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1972306168\manifest.json
                                                                                                                            • Size 165B
                                                                                                                            • SHA256 605fad4274a41aa5139f0339fd3f0ca2483c9507cad75df8269c01c0d75aeb4d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_1972465937\manifest.json
                                                                                                                            • Size 160B
                                                                                                                            • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_250669517\manifest.json
                                                                                                                            • Size 141B
                                                                                                                            • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_290606782\manifest.json
                                                                                                                            • Size 113B
                                                                                                                            • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            Staging

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_426904349\Sigma\Staging
                                                                                                                            • Size 36B
                                                                                                                            • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_426904349\manifest.json
                                                                                                                            • Size 132B
                                                                                                                            • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_447184588\manifest.json
                                                                                                                            • Size 116B
                                                                                                                            • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_584039689\manifest.json
                                                                                                                            • Size 119B
                                                                                                                            • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_64586055\manifest.json
                                                                                                                            • Size 43B
                                                                                                                            • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                            • MD5 SHA1 SHA512

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_708130940\manifest.json
                                                                                                                            • Size 160B
                                                                                                                            • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-as.hyb

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_814830254\hyph-as.hyb
                                                                                                                            • Size 703B
                                                                                                                            • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-hi.hyb

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_814830254\hyph-hi.hyb
                                                                                                                            • Size 687B
                                                                                                                            • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            hyph-nb.hyb

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_814830254\hyph-nb.hyb
                                                                                                                            • Size 141KB
                                                                                                                            • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_814830254\manifest.json
                                                                                                                            • Size 82B
                                                                                                                            • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            manifest.json

                                                                                                                            • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1820_913022899\manifest.json
                                                                                                                            • Size 135B
                                                                                                                            • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                                                            memory/952-2532-0x000001E467490000-0x000001E4674BC000-memory.dmp

                                                                                                                            memory/952-2538-0x000001E469AD0000-0x000001E469AE4000-memory.dmp

                                                                                                                            memory/952-2537-0x000001E469AF0000-0x000001E469B12000-memory.dmp

                                                                                                                            memory/952-2536-0x000001E46B0B0000-0x000001E46B158000-memory.dmp

                                                                                                                            memory/952-2533-0x000001E4679E0000-0x000001E4679EA000-memory.dmp

                                                                                                                            memory/952-2534-0x000001E4679F0000-0x000001E4679F8000-memory.dmp

                                                                                                                            memory/1960-1313-0x0000020D234F0000-0x0000020D235F0000-memory.dmp

                                                                                                                            memory/1960-1250-0x0000020D01E50000-0x0000020D01F50000-memory.dmp

                                                                                                                            memory/1960-1315-0x0000020D25330000-0x0000020D25350000-memory.dmp

                                                                                                                            memory/1960-1316-0x0000020D252D0000-0x0000020D252F0000-memory.dmp

                                                                                                                            memory/1960-1338-0x0000020D36A20000-0x0000020D36B20000-memory.dmp

                                                                                                                            memory/1960-1339-0x0000020D36780000-0x0000020D367A0000-memory.dmp

                                                                                                                            memory/1960-1493-0x0000020D01890000-0x0000020D018FF000-memory.dmp

                                                                                                                            memory/1960-1510-0x0000020D01890000-0x0000020D018FF000-memory.dmp

                                                                                                                            memory/3572-159-0x0000021BF2330000-0x0000021BF239F000-memory.dmp

                                                                                                                            memory/3880-1387-0x0000018DDAA00000-0x0000018DDAA6F000-memory.dmp