Analysis

  • geolocation tags

    eueuropefrfrance
  • user interaction
    yes
  • max time kernel
    898s
  • max time network
    896s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    01/05/2026, 08:51

General

  • Target
    https://www.youtube.com/shorts/2Vj4hyWf1PA
  • Sample260501-kshpgshw2r
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs
  • Suspicious use of FindShellTrayWindow 36 IoCs
  • Suspicious use of SendNotifyMessage 34 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.youtube.com/shorts/2Vj4hyWf1PA
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ffa58aec188,0x7ffa58aec194,0x7ffa58aec1a0
      2⤵
        PID:2128
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,17720516927675312384,520727842702638645,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=2276 /prefetch:3
        2⤵
        • System Time Discovery
        PID:3500
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,12777667853377187103,4081904429763893727,262144 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:2
        2⤵
          PID:2328
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,10787925586441067821,14017258419780221009,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:8
          2⤵
            PID:4028
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3460,i,11344001736633796924,656457852457511057,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3488 /prefetch:1
            2⤵
              PID:1696
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,5732934390969469042,12394483727332222543,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
              2⤵
                PID:3476
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4264,i,8523888668950529676,9670620097171797761,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=4352 /prefetch:1
                2⤵
                  PID:3000
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,10351810245393552677,15184130547206072491,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:2
                  2⤵
                    PID:2956
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3644,i,10316966563207341231,2559937507632916477,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:8
                    2⤵
                      PID:4564
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5268,i,55561847678142944,4876452214521365879,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:1
                      2⤵
                        PID:2032
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,15002307028136271872,16124367336167825488,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
                        2⤵
                          PID:4112
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3552,i,2127082171484383536,3575241247631685051,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
                          2⤵
                            PID:3880
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3536,i,10406906324153595303,7751509523781717510,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
                            2⤵
                              PID:4152
                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7408094903798808204,13621526495546338573,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                              2⤵
                                PID:1812
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5948,i,7408094903798808204,13621526495546338573,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5960 /prefetch:8
                                2⤵
                                  PID:3340
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6124,i,5092774644453403789,9642145385192357838,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6120 /prefetch:8
                                  2⤵
                                    PID:2992
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,16430218654570344451,7063521034861423147,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6268 /prefetch:8
                                    2⤵
                                      PID:2548
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,8449685750109940509,7152896225830415254,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:8
                                      2⤵
                                        PID:3100
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,12385395568256599804,6246646099388244721,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:8
                                        2⤵
                                          PID:2312
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6308,i,13714580565414214349,12333404763647422852,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6696 /prefetch:8
                                          2⤵
                                            PID:4864
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6188,i,16518629586771501382,17883084718615536552,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:1
                                            2⤵
                                              PID:2368
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6248,i,17829502078988225729,15604922766109464781,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6236 /prefetch:8
                                              2⤵
                                                PID:2548
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6328,i,18433202035510650275,17302969722144910863,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
                                                2⤵
                                                • Modifies registry class
                                                PID:1076
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6888,i,10649235984749089495,1818270717021378900,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:8
                                                2⤵
                                                  PID:4544
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4368,i,1963097024209170182,12098017136478349613,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:8
                                                  2⤵
                                                    PID:2312
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,17187841390335058241,15118966562833580748,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
                                                    2⤵
                                                      PID:4376
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3784,i,8045854494564758596,7879559995563496563,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:8
                                                      2⤵
                                                        PID:5600
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=2176,i,3063688082680547065,17182159733657396629,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:1
                                                        2⤵
                                                          PID:5608
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5500,i,15576049082011034783,4074121747291555455,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
                                                          2⤵
                                                            PID:5860
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5476,i,9065077216004081384,16236113284334205161,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6716 /prefetch:8
                                                            2⤵
                                                              PID:5952
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3036,i,13960727662647999291,8478071688141725635,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=2040 /prefetch:8
                                                              2⤵
                                                                PID:3232
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7068,i,9607876420498165560,11833198699683920766,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3764 /prefetch:1
                                                                2⤵
                                                                  PID:5188
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,17563859289468878284,7292702687111616150,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:8
                                                                  2⤵
                                                                    PID:3280
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6736,i,15398718112765526040,1211756622782411579,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6884 /prefetch:8
                                                                    2⤵
                                                                      PID:5732
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4572,i,3154471640977748482,1370594013803990901,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6736 /prefetch:8
                                                                      2⤵
                                                                        PID:4680
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6960,i,11161665967815868794,4362926924284134674,262144 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:8
                                                                        2⤵
                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                        PID:5656
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,3686180177989469305,15833984092606554281,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7164 /prefetch:8
                                                                        2⤵
                                                                          PID:5668
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=3588,i,9683763674237242358,14212447293075649321,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3396 /prefetch:1
                                                                          2⤵
                                                                            PID:5876
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=6044,i,15435456326882584235,15340834258299839347,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3688 /prefetch:1
                                                                            2⤵
                                                                              PID:5516
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3528,i,14869931544903834624,15272160293610755065,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:8
                                                                              2⤵
                                                                                PID:5844
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=5988,i,18414199998836255446,4130504926937356163,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
                                                                                2⤵
                                                                                  PID:656
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=4344,i,8208174841936623779,13355879835796635057,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7172 /prefetch:1
                                                                                  2⤵
                                                                                    PID:4684
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=7188,i,11275356413891866906,784908931356617174,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:1
                                                                                    2⤵
                                                                                      PID:5236
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=3132,i,4317466423626151471,9353074797918023950,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=1304 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5256
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7364,i,15788620258994084597,13511299462970716931,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:8
                                                                                        2⤵
                                                                                          PID:5480
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5572,i,14807194529284468412,12281866640333650640,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:8
                                                                                          2⤵
                                                                                            PID:4344
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6884,i,7793990567980202565,10965949608706016500,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7228 /prefetch:8
                                                                                            2⤵
                                                                                              PID:2704
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7176,i,5232427473180851788,11217825252186528023,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:8
                                                                                              2⤵
                                                                                                PID:3280
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=7224,i,3818501155813012654,8908887172769481355,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:2644
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=6352,i,4043903937565406694,13308051853310009371,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7920 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:1444
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6980,i,3058322655811334084,14789944646746918516,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:8
                                                                                                    2⤵
                                                                                                      PID:4308
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7248,i,7111578080213076508,8871050378562400995,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:4252
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7248,i,7111578080213076508,8871050378562400995,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:8
                                                                                                        2⤵
                                                                                                          PID:2820
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6116,i,10593828398386076546,3053265191731217346,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
                                                                                                          2⤵
                                                                                                            PID:6012
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=5064,i,6200832903306429755,10999429838146678163,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7488 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:5540
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=3688,i,4499222644519062557,3325946453871525366,2097152 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3132 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:2428
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7024,i,7168362844504130269,17266671997381826317,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3744 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:5412
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3780,i,2145244147605202631,5343351563092244752,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8320 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:4264
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8472,i,15835525149993518531,15748531262444679918,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8488 /prefetch:8
                                                                                                                    2⤵
                                                                                                                      PID:5764
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8480,i,14413801506954076179,4028051478911380457,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5076 /prefetch:8
                                                                                                                      2⤵
                                                                                                                        PID:1200
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8516,i,10380948253986284910,10656881027161603923,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
                                                                                                                        2⤵
                                                                                                                          PID:4892
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5584,i,8155577089149562792,15491245444737978960,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3752 /prefetch:8
                                                                                                                          2⤵
                                                                                                                            PID:5628
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7288,i,8503186387415988444,3929839245011538324,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
                                                                                                                            2⤵
                                                                                                                              PID:3424
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,7453198633384532356,12813843224009302141,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8520 /prefetch:8
                                                                                                                              2⤵
                                                                                                                                PID:2096
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7480,i,17611387198399400642,1526466351690289856,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:8
                                                                                                                                2⤵
                                                                                                                                  PID:4204
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5536,i,10058547496666441758,1188312476300176152,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7508 /prefetch:8
                                                                                                                                  2⤵
                                                                                                                                    PID:5464
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7288,i,15144004136552843840,16762526859816477289,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:8
                                                                                                                                    2⤵
                                                                                                                                      PID:5496
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3800,i,10416220018598975386,9780892066258839007,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8556 /prefetch:8
                                                                                                                                      2⤵
                                                                                                                                        PID:5852
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7164,i,13565329488326639807,13431247530627446154,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8616 /prefetch:8
                                                                                                                                        2⤵
                                                                                                                                          PID:4744
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2176,i,9032706697117706820,112775845380294151,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
                                                                                                                                          2⤵
                                                                                                                                            PID:5480
                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8524,i,9109586779361948308,4471954937633872207,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3772 /prefetch:8
                                                                                                                                            2⤵
                                                                                                                                              PID:4916
                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3616,i,2678053837209232503,11565082105267328678,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
                                                                                                                                              2⤵
                                                                                                                                                PID:2944
                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7136,i,3391947248240269699,8782666312243635675,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=8608 /prefetch:8
                                                                                                                                                2⤵
                                                                                                                                                  PID:5512
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8472,i,9653397125198040546,13962281483637895808,524288 --field-trial-handle=2248,i,9059746829588539210,10268229431061681887,262144 --variations-seed-version --mojo-platform-channel-handle=3392 /prefetch:8
                                                                                                                                                  2⤵
                                                                                                                                                    PID:224
                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                                                  1⤵
                                                                                                                                                    PID:3116

                                                                                                                                                  Network

                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                        Replay Monitor

                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                        Downloads

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1478105960\manifest.json
                                                                                                                                                        • Size 135B
                                                                                                                                                        • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1497115270\manifest.json
                                                                                                                                                        • Size 119B
                                                                                                                                                        • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1560689523\manifest.json
                                                                                                                                                        • Size 118B
                                                                                                                                                        • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1703998990\manifest.json
                                                                                                                                                        • Size 85B
                                                                                                                                                        • SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_171687750\manifest.json
                                                                                                                                                        • Size 165B
                                                                                                                                                        • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LICENSE

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1717365859\LICENSE
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1717365859\manifest.json
                                                                                                                                                        • Size 79B
                                                                                                                                                        • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Staging

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_175717668\Sigma\Staging
                                                                                                                                                        • Size 36B
                                                                                                                                                        • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_175717668\manifest.json
                                                                                                                                                        • Size 132B
                                                                                                                                                        • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_1903018877\manifest.json
                                                                                                                                                        • Size 43B
                                                                                                                                                        • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_196491018\manifest.json
                                                                                                                                                        • Size 113B
                                                                                                                                                        • SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_2002579190\manifest.json
                                                                                                                                                        • Size 238B
                                                                                                                                                        • SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_395442265\manifest.json
                                                                                                                                                        • Size 160B
                                                                                                                                                        • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_45710190\manifest.json
                                                                                                                                                        • Size 177B
                                                                                                                                                        • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_471660094\manifest.json
                                                                                                                                                        • Size 160B
                                                                                                                                                        • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_622104825\manifest.json
                                                                                                                                                        • Size 141B
                                                                                                                                                        • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_622624922\manifest.json
                                                                                                                                                        • Size 102B
                                                                                                                                                        • SHA256 e741cdf9904ddfa667e409e6c84d20225efc506588802ca959e1c6b0926ddfd8
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_731716894\manifest.json
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_947079291\manifest.json
                                                                                                                                                        • Size 52B
                                                                                                                                                        • SHA256 eb3cf0abd2ad7de40910be5f35246574a6de00ce226c6e9cef465ce6691bb937
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping2180_954340646\manifest.json
                                                                                                                                                        • Size 135B
                                                                                                                                                        • SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        blocklist

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                                                                        • Size 105KB
                                                                                                                                                        • SHA256 292255856bfb4d1886ef5501a74f9a8f32029861d1ec4415f70cfee9fe6efca5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        protocols.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        autofill_bypass_cache_forms.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                                                                                        • Size 161B
                                                                                                                                                        • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        edge_autofill_global_block_list.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        v1FieldTypes.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                                                                                        • Size 509KB
                                                                                                                                                        • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        crl-set

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 280B
                                                                                                                                                        • SHA256 499f1baf84ccad9aec7e713f14831c28ec8ef6c26551e081f63481da9e10b787
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 280B
                                                                                                                                                        • SHA256 9a68569752b554830bdaeb1e8a10446a2bf48a5c40d9055644b0ff7d12eb909e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                        • Size 352B
                                                                                                                                                        • SHA256 86f29a2d8e135671841d2f46f939a8179ca548532018f7af9217b90b4900f052
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                                        • Size 352B
                                                                                                                                                        • SHA256 af5dc927a0c1e07fdbe4e34d456c3c2ddb35d95649132700ba8ffedf5244046d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        BookmarkMergedSurfaceOrdering

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                                                                        • Size 6B
                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        f_0000b7

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b7
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 843b3f1b0a72146f062df1e089b868bb7c96c0713c022eb1dc44270dc81a833b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_0000b9

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000b9
                                                                                                                                                        • Size 36KB
                                                                                                                                                        • SHA256 e0e920afa26594e40fe0c697ef989c5c9ee038009d3c3ff0b29a8cc05870cf40
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 1ec2b836919ffcc1ea68a50b24369ec158c3d472cd6a9e69b68db32fe5edb86a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 669ba0f6af757f7141df290e72bbad7c8045746c4331e98a7378f45b7d12bf91
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 e9f56ca3fa95278bc84c1bc4fcb369ee63133e6995fdac635112f3c031a91567
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index~RFe58d4a1.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58d4a1.TMP
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 aa2a79e10736368c521c164e698c1de9cf6930be7d18c79667afbf10a04f473e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        SiteList-Enterprise.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Edge Profile.ico

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                                                                        • Size 70KB
                                                                                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        verified_contents.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1104152321\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 6f64306515428487987fabde07ddf1646f64ad4e3dc4841e982d40ad91459822
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        filelist.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1104152321\CRX_INSTALL\filelist.txt
                                                                                                                                                        • Size 134B
                                                                                                                                                        • SHA256 543c0e50c16159439d3dfb3f1151bc64e2f5b60a0e3824c5f93c4c5c14dd945b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LICENSE.md

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1104152321\CRX_INSTALL\third_party\babylon\LICENSE.md
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 4135d3051e1bfdccf0440f6d8867a6dc1e39587694995479c3e29826e53aff63
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        babylon.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1104152321\CRX_INSTALL\third_party\babylon\babylon.js
                                                                                                                                                        • Size 1.2MB
                                                                                                                                                        • SHA256 b5a426a0769b378e196ab2698c14a326d86ab2443010e16e4ac3cdde06371e6d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typescript.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1104152321\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                        • Size 10.4MB
                                                                                                                                                        • SHA256 986134e07f34257fd85c084441c825d7d8951705a0b8c76b0d7c5499536cc959
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        DevToolsPlugin.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\DevToolsPlugin.js
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 fe217348fd4d7ea4969f563ea9dbfc778e6591098a6fb26f231f859bbcef0128
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        DevToolsPlugin.js.map

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\DevToolsPlugin.js.map
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 1aa1227de1acd3b490b9fc09a2165788cb78afb9e0795a5d0a75f007206f907d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        NamedFunctionRange.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\NamedFunctionRange.js
                                                                                                                                                        • Size 1023B
                                                                                                                                                        • SHA256 aa5606bd8607fbff0998828a2285421f67bf46c986217a23bf54b8b9c62f9e96
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        NamedFunctionRange.js.map

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\NamedFunctionRange.js.map
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 a03e6965ec2315ae26572a646e4477fa341630038a50762149a19978a91a2389
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        verified_contents.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\_metadata\verified_contents.json
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 5b1fc94e2b28caf5ccbea9574de0e42c860401620f0763c10cabe3a05a7154ad
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LICENSE.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\third_party\typescript\LICENSE.txt
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 43692cfafa6a5c09136cfa0138b9c78efeb56ee6b9174553dbf704b888771f6a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typescript-tsconfig.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\third_party\typescript\typescript-tsconfig.json
                                                                                                                                                        • Size 91B
                                                                                                                                                        • SHA256 69500e16f1f9355aee311a80fe52f531ba348bb7f6d4667a2d33c3cd75113759
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        typescript.d.ts

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\third_party\typescript\typescript.d.ts
                                                                                                                                                        • Size 486KB
                                                                                                                                                        • SHA256 2b06ea0beb73119a4294b56961eeb2337c6e706c8f0311de1bb49ca47c92abd5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typescript.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\third_party\typescript\typescript.js
                                                                                                                                                        • Size 9.2MB
                                                                                                                                                        • SHA256 eb27b35a442aab5e5963127d468c1c4ba0009fa67e18b2faf73f5e1bc1ddc6ac
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typescript.js.map

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir2180_1987194894\CRX_INSTALL\third_party\typescript\typescript.js.map
                                                                                                                                                        • Size 6.0MB
                                                                                                                                                        • SHA256 5842f1041fc42ef727b2fee220a55f00bf38eff815920207d8ae560169aef766
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        HubApps

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                                                                                        • Size 106KB
                                                                                                                                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        000003.log

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                                                                        • Size 88KB
                                                                                                                                                        • SHA256 110fcaad31c9383b9f9c659c8a224f8703c95804fcea32c4c79f1b4058b26f50
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        LOG

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                                                                        • Size 351B
                                                                                                                                                        • SHA256 c3540f7c31891ba366798e73cd9e54307af94fff50cb57121dc54df86f5a0142
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                        • Size 23B
                                                                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 7KB
                                                                                                                                                        • SHA256 cc565c55ca3a6765540b00fc9c8613ad41423f98148a2862caa57b6fd302d8ac
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 f9c35bf0c79753c7f09423c315cab789e6f7c4c32649af36f0a2bb751fddcba6
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 3e6908b7ab4053c170aaa05efc8982bec7f33851ae9a0e6369f45f2a3b43255b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 111B
                                                                                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 11KB
                                                                                                                                                        • SHA256 e95a7a4d0d12e1683e8e4d7709acb97af7783c09f7909f586c675bf283b564b5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        SCT Auditing Pending Reports

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Sdch Dictionaries

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                                                                        • Size 211B
                                                                                                                                                        • SHA256 51631bc553a03281ecca24ea694ccf2c2eb9418ed9073081f5eed636624582f9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Sdch Dictionaries~RFe5ab78a.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5ab78a.TMP
                                                                                                                                                        • Size 40B
                                                                                                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 14KB
                                                                                                                                                        • SHA256 2dba78102037a9f60f8e22a5a84e271681b2f86d6d3112dd3a6a8c7e1f7831d3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 17KB
                                                                                                                                                        • SHA256 4392b93cb1475c0484ece56144dffa7d1bd9ebca6233b9b67eb7d3d2913397ca
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 9ef4ec2b89204501655a9a7f625dfd6061877c5547fd1dc468c57e70069dd339
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 0b1861aacecb773500578a1642c3f0722b01b610b2e022db5d7b88c5211dcbaa
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 29KB
                                                                                                                                                        • SHA256 fbcb637f7f940f2c2de9e6f3263c22ddb1971f27c2a4c33a49daab161410168a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 11d628843ed4178fecf8fdaabd87680acb575e024fdf38380552a140c9fbf3da
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 ebff65376081e62e45914749505a174460977ffb7c3f49f4df778d96ef731d94
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                                                                        • Size 44KB
                                                                                                                                                        • SHA256 3b5ba0fcefd65e2f923a9a6c134905ded330684c8261e9daa26060e6b1eff588
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Secure Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                        • Size 35KB
                                                                                                                                                        • SHA256 4bdb6a971bdc5b3d4c9288dac2fb8bd20ffc509fbc5f8a178185401ecff330c4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Secure Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                                                                        • Size 38KB
                                                                                                                                                        • SHA256 3b0ca58527b8eba417a9d5fa5544b9e93e77a22b69d3916c97cf5ca4fb6f5351
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\47a794df-4815-4fbb-8cd3-f25f9d136379\index-dir\the-real-index
                                                                                                                                                        • Size 576B
                                                                                                                                                        • SHA256 25d99fa77db22028490c42d57772685347bc8387a3d9b9ec167fc2c3e6c19437
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe58c752.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\47a794df-4815-4fbb-8cd3-f25f9d136379\index-dir\the-real-index~RFe58c752.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 eab5c3f81b5e05f0be1f112185be53cb39efb06a8e9a68169190d452db79ceac
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e3e1c931-3993-4546-ae7e-1e54f964acea\index-dir\the-real-index
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 b7a8a2861d3aeffae63f81d61373c4d66e3fcddf6c6636bf4cd9978998f94f4b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe58c0f9.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e3e1c931-3993-4546-ae7e-1e54f964acea\index-dir\the-real-index~RFe58c0f9.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 bdaa2f1535e1837198dc990d82833e5ab86d41e1773856cd522c96cdde6124e2
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                        • Size 214B
                                                                                                                                                        • SHA256 aad188e7320249bc78a271014dd15e4df1e8d29eaf7cb38240ea3bad408deb90
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                        • Size 241B
                                                                                                                                                        • SHA256 8bb744618a369254eae39b13f530f8e9f7810924a9893a37aa73808f7f24b16d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                        • Size 130B
                                                                                                                                                        • SHA256 c31d68c10d3654941efade3cba581e64e00dce34d66bcc22df9335c3229415b4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                                                                        • Size 239B
                                                                                                                                                        • SHA256 0cc8ec9fdae19f705f73d6927e0ae051d8ece0ae4b387e401d75e31d3c5740a6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt~RFe586cce.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe586cce.TMP
                                                                                                                                                        • Size 137B
                                                                                                                                                        • SHA256 f3516238f1eba8d1e40b04d00d3fdadabec001770c9b87c0ec870095945f11f7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 bd4046fac5f4d2e6cfb10c5c922e759094639125421e47adb6c6fb5cc994a746
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 87cf80e858edf44c6c4a410e38e891cad7cf2bed788be6c3c43dd316326df92c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe596e70.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1984ab13-19e8-485c-bd56-a8d56b72a44e\index-dir\the-real-index~RFe596e70.TMP
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 2e070e140a66bfb24af2eb1968edd45ae3d4049660b9300052834073a5a9b9f6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 9b012508790c91986b9380ce28fb7d5e8b891b8adf7646c5a71cb41c725db5fa
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a76e37c7-8440-4a48-a1ea-253219d8f42a\index-dir\the-real-index
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 c60b0477d11118140111ae2e35be65acdd9402bdda896a8de57923651ea273bb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        index.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                                                                        • Size 474B
                                                                                                                                                        • SHA256 fab9710e00e10d6753e29d25a4b0e4a6061091c1e6bd06457451010cee46af31
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                        • Size 120B
                                                                                                                                                        • SHA256 1f7678d437164c393a300506dfef0e929a3aba050f6b6b7797983a570289d633
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                        • Size 96B
                                                                                                                                                        • SHA256 e70679995842a2e664e165a135c485b082b48223ec2bc348c58364da7faf5f19
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index~RFe58bc27.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58bc27.TMP
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 6b722fa03a1547238b431255b9ab43521a2b14a4f667312cb81efede39eb0680
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        sync_diagnostic.log

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 16e5a22b42507b37d306882279f2cefd7d56ac50e9a02530f80d22e1c7979116
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        CURRENT

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
                                                                                                                                                        • Size 16B
                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                                                                                        • Size 41B
                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        domain_actions.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                                                                                        • Size 83KB
                                                                                                                                                        • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        data.txt

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.5\data.txt
                                                                                                                                                        • Size 145KB
                                                                                                                                                        • SHA256 8a4065abfc1647d1c28b75bf085aa56548564259e7397c4c69ac8897fe32dfe8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        OperationConfig

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        OperationConfig~RFe59429d.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59429d.TMP
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        office_endpoints_list.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 41f52e81764ac98ec1309a140f9f2c1c495e79ec06654ae9ac8e1312971147d9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 28KB
                                                                                                                                                        • SHA256 9e62899520d4a95ce5ecf32550009f137ddb06df4c537dc273885adbd1e2449b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 ae62961b2f0a1d710ad7a3f75118e595c263ae7e1da200aa5520fc202be5d68b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 86c89c99849cf8923cc77fc7a374113964b263f574da17797a0c79b97e7f3338
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 382ae5f042df5c0d3c792b094bc435e9d19c63d0979c6ea1ab6c222d800386f2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        crs.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\crs.pb
                                                                                                                                                        • Size 233KB
                                                                                                                                                        • SHA256 314199e7ac5f396e6596a1b249daab7a3d4e4fc5534654284a18df65aee1cdd6
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        ct_config.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\ct_config.pb
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 3606e07b5ee09b43a622cd87cee80474679ea4f4c1aa59e5ff33d49da851f1aa
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        kp_pinslist.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\45.0.0.0\kp_pinslist.pb
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 205bed72b527a07310d132616393bac84db775a9bc372559d5182672e376c0e2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 26eb4f642703e3099cc481a8551c79c7b50f7ff79c2346f97d9363f8434e3cd1
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 2540aa409d9e268dc8f897d9f626a697fd2559df96d4cd628ddf4905a46f3087
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        RevisitationBloomfilter~RFe599c46.TMP

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe599c46.TMP
                                                                                                                                                        • Size 392B
                                                                                                                                                        • SHA256 b7af227621f36c70a5c0191cba16a1062b2ec7287925de7ea6501da1aac944b7
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        safety_tips.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
                                                                                                                                                        • Size 163KB
                                                                                                                                                        • SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typosquatting_list.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Advertising

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Analytics

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        CompatExceptions

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                                                                                        • Size 689B
                                                                                                                                                        • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Content

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Cryptomining

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                                                                                        • Size 668B
                                                                                                                                                        • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Entities

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                                                                                        • Size 68KB
                                                                                                                                                        • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Fingerprinting

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LICENSE

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                                                                                        • Size 34KB
                                                                                                                                                        • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Other

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                                                                                        • Size 34B
                                                                                                                                                        • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Social

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                                                                                        • Size 754B
                                                                                                                                                        • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        TransparentAdvertisers

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                                                                                        • Size 105B
                                                                                                                                                        • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Advertising

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                                                                                        • Size 20KB
                                                                                                                                                        • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Analytics

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Content

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Cryptomining

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                                                                                        • Size 32B
                                                                                                                                                        • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Entities

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                                                                                        • Size 106KB
                                                                                                                                                        • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Fingerprinting

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LICENSE

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                                                                                        • Size 66B
                                                                                                                                                        • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Other

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                                                                                        • Size 198B
                                                                                                                                                        • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Social

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        keys.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2026.3.23.1\keys.json
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        typosquatting_list.pb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                                                                                                        • Size 1.6MB
                                                                                                                                                        • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        well_known_domains.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                                                                                        • Size 572KB
                                                                                                                                                        • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        nav_config.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 252B
                                                                                                                                                        • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 372B
                                                                                                                                                        • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 612B
                                                                                                                                                        • SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 132B
                                                                                                                                                        • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 852B
                                                                                                                                                        • SHA256 453a08edb83095062ff59beb4f28403a177007ecdc5b93c88074cf8ae24c9b39
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 732B
                                                                                                                                                        • SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 8dcae07e02c717b0c7e2e86fce7031c6e3557666188b15828e3b5efd9857aa3d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 45a6b06e48cb3eedac93a0d53aa71f535bd43cbf956b7e1b9214bb14d119b498
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 35d2af38796321107e422b9b077dca6d293885e1a2c6b3bf359518f69a787d79
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 83d902c5332a6fdef1cedaec7e8929636b901acf6335eb85ca3a162b34ddaa45
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 33b54581b3cd7004077c0a607bf56966799274b2c161a1665f98c099812af2dd
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 9067b28ebe20c02c9953fff5b0594ef49080bdf69debedc37cf9eb19498d7c06
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 5c220d43256d7b7c14b900fd4eebfd1eca6e209cfec86546e89032558d063e17
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 e8cfa2e9e740edb2634c3e68d4d24c2c0e115509d76a4e12bd2c0ac5285a2d85
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 738bee91d0abca126ef2d6816abb416241bfab97fd1287898a20e2c811c6b65e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 692457b7a9a71da2f86a2d9c00ee5e439ede0bfca8d82ca033d6f592dbfa5469
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 972B
                                                                                                                                                        • SHA256 46c96e720b20237d9768e9cb90aaa62c9c7b0c8f15fddee836a76d41dfa420cd
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                                                                                        • Size 492B
                                                                                                                                                        • SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        metadata.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                                                                                        • Size 13B
                                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 3596841994859e9b8dcc9f7039ecc663ea1790c98da73f192d9a1310889f8441
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        08177a97-29ae-4515-a63e-f2c8cfc07fb4.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\08177a97-29ae-4515-a63e-f2c8cfc07fb4.tmp
                                                                                                                                                        • Size 1B
                                                                                                                                                        • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        64a73837-bc65-430b-a8d3-25b441d2fe8c.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\64a73837-bc65-430b-a8d3-25b441d2fe8c.tmp
                                                                                                                                                        • Size 2.1MB
                                                                                                                                                        • SHA256 efdad7555293ec2d14399c2c2fc9d07228de1f6e3746b27da621b76fe5ceea07
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        9b3c4a89-3371-4ba0-b173-73d197dc6743.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\9b3c4a89-3371-4ba0-b173-73d197dc6743.tmp
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        a53d3a7b-1b59-44cc-9c1e-31526a9c8ecb.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\a53d3a7b-1b59-44cc-9c1e-31526a9c8ecb.tmp
                                                                                                                                                        • Size 3.0MB
                                                                                                                                                        • SHA256 2d69203739eca77886457d27c0df44eca47da02810061a7f5e15288c2e643f23
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        be7caed5-4cbb-4607-b661-58c17ad7a4bb.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\be7caed5-4cbb-4607-b661-58c17ad7a4bb.tmp
                                                                                                                                                        • Size 147KB
                                                                                                                                                        • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        DevToolsPlugin.html

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2180_1187725879\CRX_INSTALL\DevToolsPlugin.html
                                                                                                                                                        • Size 220B
                                                                                                                                                        • SHA256 fd59488175e43bb4713fd621e785b618fc647a3521d305874722bd6b7fd1c649
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2180_1187725879\CRX_INSTALL\manifest.json
                                                                                                                                                        • Size 766B
                                                                                                                                                        • SHA256 072441aff81b94a2d6a4cb7e86c40fe27ae8a9701f7d466f76db124fd3d54330
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2180_1338256463\CRX_INSTALL\manifest.json
                                                                                                                                                        • Size 658B
                                                                                                                                                        • SHA256 fea905b763b26db02673c6ab14f422b21eff64de59351f0818b501dd4e7f9430
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        content_new.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2180_262760230\CRX_INSTALL\content_new.js
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH