Analysis

  • user interaction
    yes
  • max time kernel
    307s
  • max time network
    286s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/05/2026, 01:14

General

  • Target
    https://llaun.ch/es
  • Sample260511-blm6yshs9t
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 1 IoCs
  • Looks up external IP address via web service 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 6 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 34 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://llaun.ch/es
    1⤵
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4756
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2f0,0x7ffdc5d5c188,0x7ffdc5d5c194,0x7ffdc5d5c1a0
      2⤵
        PID:5100
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1756,i,75068197879318918,14815085480105835367,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=2328 /prefetch:3
        2⤵
        • System Time Discovery
        PID:4668
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1628,i,4558876722326831154,14122505263472864257,262144 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
        2⤵
          PID:5280
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,13582125804666587854,6879245504696579158,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=2348 /prefetch:8
          2⤵
            PID:5008
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,6989500460359741930,1404697331660032300,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
            2⤵
              PID:6020
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,7734711805299437289,4185527066088885154,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
              2⤵
                PID:5964
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,2761133305540669737,690006217341512763,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=5032 /prefetch:8
                2⤵
                  PID:2992
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5024,i,10685297664618585887,10611710041158027010,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=5056 /prefetch:8
                  2⤵
                    PID:1132
                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,13980398177794918143,14541700387694161176,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
                    2⤵
                      PID:4988
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5740,i,13980398177794918143,14541700387694161176,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=5756 /prefetch:8
                      2⤵
                        PID:1432
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=6272,i,4450769939508816013,5173224913374152564,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:1
                        2⤵
                          PID:3612
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6516,i,16904587981338763298,1184048849178202109,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=4932 /prefetch:8
                          2⤵
                            PID:2140
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6500,i,17519655622985419553,7544326850571461802,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:1
                            2⤵
                              PID:2868
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6816,i,15227192321234151440,5066915347123148712,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6972 /prefetch:1
                              2⤵
                                PID:1080
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7096,i,12582876193629651311,898065965205171224,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7088 /prefetch:1
                                2⤵
                                  PID:5580
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5768,i,14482053768385006178,5911686565481003137,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6680 /prefetch:1
                                  2⤵
                                    PID:6072
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7356,i,16058212621377581704,4742148464441877239,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7336 /prefetch:1
                                    2⤵
                                      PID:3864
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7200,i,18006377685290075637,17750190905562166409,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7444 /prefetch:1
                                      2⤵
                                        PID:5456
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7284,i,13219374072505905020,354219114680404302,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:8
                                        2⤵
                                          PID:2852
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,2593367893809748133,5330336643721400194,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=6704 /prefetch:8
                                          2⤵
                                            PID:508
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7216,i,3657268359327366529,14913793401696603091,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7544 /prefetch:8
                                            2⤵
                                              PID:608
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7088,i,10383812071205777444,688612368343230890,524288 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:8
                                              2⤵
                                                PID:6000
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=3044,i,10152703570315718149,5347590212365590514,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=2132 /prefetch:1
                                                2⤵
                                                  PID:608
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=7740,i,4281820731464836331,15522323326919689207,2097152 --field-trial-handle=2300,i,12715975997479731529,7630021082227531601,262144 --variations-seed-version --mojo-platform-channel-handle=7720 /prefetch:1
                                                  2⤵
                                                    PID:3720
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                    2⤵
                                                    • Loads dropped DLL
                                                    • Drops file in Program Files directory
                                                    • Checks processor information in registry
                                                    • Enumerates system info in registry
                                                    • Modifies data under HKEY_USERS
                                                    • Modifies registry class
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:224
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffdc5d5c188,0x7ffdc5d5c194,0x7ffdc5d5c1a0
                                                      3⤵
                                                        PID:4160
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,13822623727672173350,10526121189824110577,262144 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:2
                                                        3⤵
                                                          PID:4348
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1888,i,8724070463653059776,11953772649356738336,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:3
                                                          3⤵
                                                          • System Time Discovery
                                                          PID:4336
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2532,i,11853186729091120319,264224615817976398,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=2780 /prefetch:8
                                                          3⤵
                                                            PID:6116
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,4966910702308139815,11046919429959065405,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                            3⤵
                                                              PID:4328
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4532,i,4966910702308139815,11046919429959065405,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4560 /prefetch:8
                                                              3⤵
                                                                PID:4372
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4784,i,10468828714296279594,11550487728507035125,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4568 /prefetch:8
                                                                3⤵
                                                                  PID:5292
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4788,i,17430707972364036977,11188998381506062434,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:8
                                                                  3⤵
                                                                    PID:212
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,10173182914090923414,4688611573702164913,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4840 /prefetch:8
                                                                    3⤵
                                                                      PID:5480
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,3343792768755387290,16321120780719423022,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4780 /prefetch:8
                                                                      3⤵
                                                                        PID:4860
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4124,i,10323763704942046237,17654528307875305522,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4344 /prefetch:8
                                                                        3⤵
                                                                          PID:5464
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=776,i,14594817615372555970,4361980471653501254,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:8
                                                                          3⤵
                                                                            PID:3956
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4784,i,7238789738849986298,2075446635628999239,262144 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
                                                                            3⤵
                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                            PID:5940
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3992,i,3392347380350229732,17478784336279158179,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4100 /prefetch:8
                                                                            3⤵
                                                                              PID:1416
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5020,i,18182433596964050804,15730859621342790091,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4084 /prefetch:8
                                                                              3⤵
                                                                                PID:2504
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4292,i,10533999760244181249,9765713324376357062,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=4084 /prefetch:8
                                                                                3⤵
                                                                                  PID:4556
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,6572496958245106725,6923865275248722391,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=2888 /prefetch:8
                                                                                  3⤵
                                                                                    PID:4996
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4068,i,12746987141815145402,13368153144385074465,524288 --field-trial-handle=2232,i,6028903752364131979,13043995542909062131,262144 --variations-seed-version --mojo-platform-channel-handle=3784 /prefetch:8
                                                                                    3⤵
                                                                                      PID:5376
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                  1⤵
                                                                                    PID:2380
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                                    1⤵
                                                                                      PID:1732
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                      1⤵
                                                                                        PID:5200

                                                                                      Network

                                                                                            MITRE ATT&CK Enterprise v16

                                                                                            Replay Monitor

                                                                                            Loading Replay Monitor...

                                                                                            Downloads

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1195932457\manifest.json
                                                                                            • Size 119B
                                                                                            • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1200315372\manifest.json
                                                                                            • Size 177B
                                                                                            • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            keys.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1386388639\keys.json
                                                                                            • Size 8KB
                                                                                            • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1386388639\manifest.json
                                                                                            • Size 79B
                                                                                            • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1551481686\manifest.json
                                                                                            • Size 118B
                                                                                            • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1708295319\manifest.json
                                                                                            • Size 52B
                                                                                            • SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1968846753\manifest.json
                                                                                            • Size 102B
                                                                                            • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping224_1997443215\manifest.json
                                                                                            • Size 165B
                                                                                            • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            128.png

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4756_214747836\128.png
                                                                                            • Size 4KB
                                                                                            • SHA256 ff702ca753a7e3b75f9d9850cc9343e28e8d60f8005a2c955c8ac2105532b2c9
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            messages.json

                                                                                            • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4756_214747836\_locales\en_CA\messages.json
                                                                                            • Size 711B
                                                                                            • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            autofill_bypass_cache_forms.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                            • Size 161B
                                                                                            • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            edge_autofill_global_block_list.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                            • Size 6KB
                                                                                            • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            v1FieldTypes.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                            • Size 509KB
                                                                                            • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            settings.dat

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            settings.dat

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 948d68e795f58735315ff49ad4468d62d55ecf58355a3ca40434238003987886
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            settings.dat

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 84a323b99415d5ee207b45c26b5d9831dee920831b141849f906e1d3de9bee2e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            settings.dat

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 cae1c910913f4a761a4adf53ebb44611ea055ffd7d8f0999fc6d7c9fa7408d0d
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            settings.dat

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                            • Size 280B
                                                                                            • SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            BookmarkMergedSurfaceOrdering

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                            • Size 6B
                                                                                            • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                            • MD5 SHA1 SHA512

                                                                                            BrowsingTopicsState

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                                            • Size 414B
                                                                                            • SHA256 e03752b9e6827279ced138bb355dc857cdfc8af3e9777d7a71c6379be8d3d4ee
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            data_0

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
                                                                                            • Size 80KB
                                                                                            • SHA256 f3248381f3f16dde557334060540cdaac50594fa355c003edaaa87f768fdfa97
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            data_1

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
                                                                                            • Size 520KB
                                                                                            • SHA256 68b11ad5bf71c75edcfdc55688751c4cfd860fe473eb64a8ff23d22e9d0f83e5
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            data_2

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2
                                                                                            • Size 2.0MB
                                                                                            • SHA256 c99b00b06f4872d7963ebbcf6f95c89fdf58c936c167b2adcfc066a65c7d98c8
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_00007c

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c
                                                                                            • Size 34KB
                                                                                            • SHA256 afd4782e0b7442187ef3334e0dd04804eec2f7e78b66f2486e9aad0e2c0f415d
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_00007d

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d
                                                                                            • Size 97KB
                                                                                            • SHA256 08c1ade001a530f1e243f27f19e1b070ac4b43ed38dd3bb1d7c40715dc4c87f2
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_00007e

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e
                                                                                            • Size 66KB
                                                                                            • SHA256 2225018d679fc81163efbc516cdd6aa70706d262573c3139dc82b7145c75b196
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_000080

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080
                                                                                            • Size 402KB
                                                                                            • SHA256 5979103bf1781ed81aace48a95b314e656899207302c7492f7304203477b56e0
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_000087

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                                            • Size 71KB
                                                                                            • SHA256 d40ca516a00f4b6ae9937cf0eaa8e1f0c2033aaf783dae3c461d68b8b142bc4e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            f_00013c

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013c
                                                                                            • Size 75KB
                                                                                            • SHA256 dbd639cd06f5827d6fa2ebac3b0e2147bad02073c115efc05e93c1e876144992
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                            • Size 7KB
                                                                                            • SHA256 c8518cc0a4883f92dfdf2168addb97756821af109b0f37ea36deb0456df7e872
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            the-real-index~RFe58f47d.TMP

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58f47d.TMP
                                                                                            • Size 2KB
                                                                                            • SHA256 940ab7f58870bfab4bdd7b1645467d7a3ddcc6dad5d86007622779afee9fcc82
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            SiteList-Enterprise.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                            • Size 2B
                                                                                            • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                            • MD5 SHA1 SHA512

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
                                                                                            • Size 456B
                                                                                            • SHA256 c5ce9aaf8ffdcb8a00463a7bf24001885e0a792f110c8db74a1e2f4392cb0e31
                                                                                            • MD5 SHA1 SHA512

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
                                                                                            • Size 322B
                                                                                            • SHA256 8b512bda9394cb4b34557f261559c49881a666e76295bb07095f6a8b55bf8be6
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            ExtensionActivityEdge

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
                                                                                            • Size 32KB
                                                                                            • SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Favicons

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
                                                                                            • Size 36KB
                                                                                            • SHA256 99a26ac453a3c03478f09e6a858bc94998d90e96146fd0c749830b573c611da0
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            CURRENT

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT
                                                                                            • Size 16B
                                                                                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                            • MD5 SHA1 SHA512

                                                                                            History

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
                                                                                            • Size 204KB
                                                                                            • SHA256 7e20bcd10f35536f4d08b9e16913709c0bbbdcaad37b265be8c88ee6e5f05307
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            HubApps

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                            • Size 106KB
                                                                                            • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                            • Size 42KB
                                                                                            • SHA256 0dac339624a15bf784a8a171648e08115d6eff4ff886e90c4d5030188e0a3340
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                            • Size 386B
                                                                                            • SHA256 30637d2d0a07831ed4b61e98908fb284dda82fa1c45b6e97a1db60c2a49c315f
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log
                                                                                            • Size 45KB
                                                                                            • SHA256 7cca2e645fc966c85f878195cb2e2527ba8890a5e400e42ccfd4e07ed5b38d53
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
                                                                                            • Size 331B
                                                                                            • SHA256 780a0ec24e3c09cdd9f754af16ca4a8e040dd6d335585076ee2a129cd63da27c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            Cookies

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
                                                                                            • Size 40KB
                                                                                            • SHA256 23ecd41a3be2778bb50bea957925306886d8f012a254323d80608382e17f012e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Network Persistent State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                            • Size 17KB
                                                                                            • SHA256 0f9c5b5746e0ce7019def66dd24469f4de2c76f73c8640ffd2b3bd71b2dab055
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            SCT Auditing Pending Reports

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                            • Size 2B
                                                                                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                            • MD5 SHA1 SHA512

                                                                                            Sdch Dictionaries

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                            • Size 40B
                                                                                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                            • MD5 SHA1 SHA512

                                                                                            Sdch Dictionaries

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                            • Size 211B
                                                                                            • SHA256 5e13e03ddd3ae017a0206d8444276c0269a121d02e856c37e086f7b53c5495d2
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            TransportSecurity

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
                                                                                            • Size 3KB
                                                                                            • SHA256 7beaea3a9e970d08eb53c205d40b769599b52cd94d5e1f6c5fde77aab93cd729
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            Preferences

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 22KB
                                                                                            • SHA256 addcad6f6a3cbd018403f3d31ef31c8176efa21ef19a518b23ef2b7650d579d4
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Preferences

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 24KB
                                                                                            • SHA256 bb03dd9a7a302c833a801fd5b448f6caf61c83386a8eb5702edb1de6177f226f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Preferences

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                            • Size 18KB
                                                                                            • SHA256 67891c91024bbe2a13de12832ec3017988242e914e44c923fb27e513ebae06b9
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Secure Preferences

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                            • Size 35KB
                                                                                            • SHA256 8a47bb0ee3084cc8f09e35ca57c83ca8ce6bd20830f1e50493e21f01a766dffb
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Secure Preferences

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                            • Size 35KB
                                                                                            • SHA256 a6855176871a1d47ee19dafb6471d4fa5e1bf29faf30b3d993c94b9aa0d0670b
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0bc74552-be48-4461-bc43-450eac0ddd85\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 5304bd1c7502e1df0c9182b07e6749bef9691408beade89e0d3fbe7e26a7e2b8
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index~RFe58ab3f.TMP

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\0bc74552-be48-4461-bc43-450eac0ddd85\index-dir\the-real-index~RFe58ab3f.TMP
                                                                                            • Size 72B
                                                                                            • SHA256 d2c8809b5d1a78cf9fc99b09ad3ff7776f1a79833ed090d31eb74759ffe22fa8
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\91d73940-0d21-4161-b459-1da74c6e5c7d\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 dfaeabc6f465ac38919a01c294637e00b8e24921ff0e012f38840da8204f705a
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index~RFe589a95.TMP

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\91d73940-0d21-4161-b459-1da74c6e5c7d\index-dir\the-real-index~RFe589a95.TMP
                                                                                            • Size 72B
                                                                                            • SHA256 d53d6c4ea6f8edef0593762f207e159d155b0ed3046be0abcaf15a8d1f5e4a57
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\9ee838dd-a441-435f-b78f-4a16a5581428\index-dir\the-real-index
                                                                                            • Size 2KB
                                                                                            • SHA256 1cc973d7372beba8d275198dee1fffd7c0bf2ba9cb67aa0c065b2509af2471ee
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            4f2277ea2139c475_0

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\4f2277ea2139c475_0
                                                                                            • Size 66KB
                                                                                            • SHA256 5784eb22a78515f0569f8c8b3d4f2a1d68a69ecc911061a653022c050ded8614
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 bceacaacb5d5dd0519129c92a32f3af6f5f3f3d280490c3c030b687ab2bb49ca
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index~RFe58a7b5.TMP

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\c5c3c74d-341c-48de-ac10-3ec789c3eec5\index-dir\the-real-index~RFe58a7b5.TMP
                                                                                            • Size 72B
                                                                                            • SHA256 6ac17e31dad624da157e1d13a6af6206954212ba07b097b2eeedd4e3a6001918
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            index.txt

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                            • Size 476B
                                                                                            • SHA256 2eb28f05090264e7bdd8eb51b202f6234c73c8db322282cd400df1edb682a8f0
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log
                                                                                            • Size 8KB
                                                                                            • SHA256 c3d92e32763261fb1c3309584708bfe1e7e09a682ce6d43e6b7008d7daefcb71
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
                                                                                            • Size 335B
                                                                                            • SHA256 1fd71c87503b95c8bb0b5d878fd2eb5aa0ab85b9c7bb6526cd833ac6df0499d4
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            the-real-index

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                            • Size 72B
                                                                                            • SHA256 d6dd0faa7cd503f6e656d0b0cb3077ff811550732297330ad1e698169bf7b7fb
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log
                                                                                            • Size 400B
                                                                                            • SHA256 932a4dce8aaeb695a2b6ccabf2fff3d2da862c68f13288251e696c9b35964b13
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
                                                                                            • Size 350B
                                                                                            • SHA256 d9c8c3e015e85ef13d278d7ca9263f99ab8e50d3a2c2f56ea57fa9fe1430572a
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            MANIFEST-000001

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                            • Size 41B
                                                                                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                            • MD5 SHA1 SHA512

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
                                                                                            • Size 326B
                                                                                            • SHA256 1d1c489442dee2361061f791cb0f65e3b77da31e6c7b2fef9850972e471593cb
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            sync_diagnostic.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                            • Size 23KB
                                                                                            • SHA256 114829aaf66431ed6c1450d405292e5df4e880ce9a264737be8ea465b32b354c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Web Data

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
                                                                                            • Size 224KB
                                                                                            • SHA256 abbe9046eb7b67d13f9e378bf8814502a243271f8ed753e7ad164a783e26efa6
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            be997f59-76d0-4178-9c18-c28788e5ad30.tmp

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\be997f59-76d0-4178-9c18-c28788e5ad30.tmp
                                                                                            • Size 1B
                                                                                            • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                            • MD5 SHA1 SHA512

                                                                                            default_cloud_config.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
                                                                                            • Size 13KB
                                                                                            • SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
                                                                                            • Size 13KB
                                                                                            • SHA256 e05ad8e1665baf7b6610cd55723ba449e145fc5dc0551216c292919850afeb9f
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
                                                                                            • Size 319B
                                                                                            • SHA256 872bf69bc77f942cb93274fa085bfb4accea4312c02541234b92f37336275499
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            000003.log

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
                                                                                            • Size 1KB
                                                                                            • SHA256 d2099344f350befee18418ff31c1738d7f80e470913d56530f1ff7e2c941e183
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            LOG

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
                                                                                            • Size 340B
                                                                                            • SHA256 0084a9d75fabe7a3ad04657007750ce15467210962ac1562d16560eba3697fdd
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            domain_actions.dll

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                            • Size 83KB
                                                                                            • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            data.txt

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
                                                                                            • Size 145KB
                                                                                            • SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            data_1

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
                                                                                            • Size 264KB
                                                                                            • SHA256 b8d4376a476bc3f3247975230b84445f72f31b8443db3eaaa2f636ec47c5335c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Last Version

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
                                                                                            • Size 14B
                                                                                            • SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
                                                                                            • MD5 SHA1 SHA512

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 26KB
                                                                                            • SHA256 d34acabd08e3cf9e48261d175ef05293c9335fe753476d2faaab56bcdead9992
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 28KB
                                                                                            • SHA256 d3dfc8fcc1553aa5cc578f1bbc8cdf64ad4f8c8e0437a445f874a0c7e8d18966
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 27KB
                                                                                            • SHA256 da31eaed670ede8ff0ad3cdd4d5f95e900359364efcdceefbc73e12d120b0d5b
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 27KB
                                                                                            • SHA256 fd9d457d8cd50f89ece71f9194d2dbdaa1a5df311daa0d93a934d3dccf2f13ba
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 34KB
                                                                                            • SHA256 a853f82d994c87341d0569229010a6aaa0b918de879c8d2384ab71af201577af
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 27KB
                                                                                            • SHA256 259a74fa5a2c10997678a4de0b70d893b4a3ea625a83732d0e1dbfb35b2bc141
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Local State

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                            • Size 34KB
                                                                                            • SHA256 3385f893ed65e8c555ca3f24cee32c4397d665356f39d02690bca7c460b70cab
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            campaign_history

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Nurturing\campaign_history
                                                                                            • Size 20KB
                                                                                            • SHA256 128905deaa6af31ace0deae42445e617eb03841919f005c4eb57c5fe80b72c5c
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            crs.pb

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                            • Size 233KB
                                                                                            • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            ct_config.pb

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                            • Size 16KB
                                                                                            • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            kp_pinslist.pb

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                            • Size 10KB
                                                                                            • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            RevisitationBloomfilter

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                            • Size 392B
                                                                                            • SHA256 e52b76f4f31beab6aa0f3d5236b9fa2ebd2f2b9875cf8c0d11f9da76ecebd094
                                                                                            • MD5 SHA1 SHA512

                                                                                            RevisitationBloomfilter

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                            • Size 392B
                                                                                            • SHA256 eba826ae022b54a303d00e4e023f8209e4ce0b1a19e907736fb7401bca74eae0
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            RevisitationBloomfilter

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                            • Size 392B
                                                                                            • SHA256 2dc61308991c6b0fc40ccfcce7563cbe87c0df399b4554f698b85cb7662b09a4
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            RevisitationBloomfilter~RFe588141.TMP

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe588141.TMP
                                                                                            • Size 392B
                                                                                            • SHA256 ac9425f6fb3d972f97407038c0098dd9116f3e71ee1552b1c05d46b9eb718e18
                                                                                            • MD5 SHA1 SHA512

                                                                                            data_1

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
                                                                                            • Size 264KB
                                                                                            • SHA256 c3a0e8073e2ef57141d4370b4006a4454ad94cc524f35e2c524d47977d85e860
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            typosquatting_list.pb

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                                            • Size 1.6MB
                                                                                            • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            Variations

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
                                                                                            • Size 86B
                                                                                            • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 ed9bcaf1010b80ddbef6f9a73d33ee75554df1cf8ec13d8b7a9fd1a2ae17c3d9
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 ef297772e2e336689049a653ac0a11c5f51b3e0cc5ed4a0df3d4d7878d4a6e6e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 1f8308b3a5a820436ff36c5a7a52b42de08eba5abcafe548b1b329c4004501fe
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 bf0f136ab202a82eb61bf164ec905e5a5badb6eec842a10da1debfdcd122594c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 2daffb9cf19107a014d8be9f37844d82e1a5e76b15d7ce579c465a00c7f0cb4b
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 b3f3b59a78d4be59320576002e9ffc365e0640604b1744dcf429edafa5f8dc18
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                            • Size 1KB
                                                                                            • SHA256 fa8fb6f9b421505d29c6631d8122cc71af37d500543454e3890017d6b58a9694
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                            • Size 147KB
                                                                                            • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            metadata.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                            • Size 132B
                                                                                            • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                            • Size 2KB
                                                                                            • SHA256 997e227aba1510246ea7ab2cccdc2cb59907ddf25ae7ee8e0a58c9752bdbcd65
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

                                                                                            • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres
                                                                                            • Size 2KB
                                                                                            • SHA256 1ea35d443287485480b624bd452d8be93aab5f9ebf6236ba95e905970bd4c650
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\af\messages.json
                                                                                            • Size 772B
                                                                                            • SHA256 aa12205b108750cf9fa0978461a6d8881e4e80da20a846d824da4069d9c91847
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\am\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 64e01bc292ba2ea1699576fcc445367047520ee895e290ccee20c24c9336d8ef
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ar\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 47652115cbb912907f405992fcfc64f987642158f0cb35c9d6e0d4742d833802
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\az\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 614470da3c5034ace649f1786beaaad2c94f4475bcc8858390b721f06fb7bf64
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\bg\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 22bc37b47ce8a832f39701641dc358357676e9be187a93a4c5d4b016e29238ae
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\bn\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 3e3ceaa214d8079b02c9c941635f5d45e621236d9c3f82e06ac604f0772670e8
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ca\messages.json
                                                                                            • Size 843B
                                                                                            • SHA256 de6d7b7c2427ec4e738407d7834b71941f69166b030355e00f325ff1391df5a1
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\cs\messages.json
                                                                                            • Size 953B
                                                                                            • SHA256 5a701d67910ba6c7ccedc26e02fa707cc86a1be57cd7d36290a3d268732a42c7
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\da\messages.json
                                                                                            • Size 764B
                                                                                            • SHA256 94cddb998c2c5ab40b6f074c359a60e6eebaaa2d52a9649c22f4ea4c1b9936f2
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\de\messages.json
                                                                                            • Size 927B
                                                                                            • SHA256 22e2828bfdbb9c340e7806894ae0442bd6c8934f85fbb964295edad79fd27528
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\el\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 728d8cbd71263680a4e41399db65b3f2b8175d50ca630afd30643ced9ffe831f
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\en_GB\messages.json
                                                                                            • Size 708B
                                                                                            • SHA256 c7255e9b784c4b8df7df7b78f33a5737a9ab7382f73465351597b1da9b3d5fe7
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\en_US\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\es\messages.json
                                                                                            • Size 878B
                                                                                            • SHA256 02168993a23e074e0800cbb338fe279f99ef420e326bf92916ffed83c1f06533
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\es_419\messages.json
                                                                                            • Size 880B
                                                                                            • SHA256 e848603b7a73a88e3fe7bffa20e83397f5d1e93e77babb31473cc99e654a27b7
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\et\messages.json
                                                                                            • Size 914B
                                                                                            • SHA256 7ccc7b17bfe01c3c7dd33eff8f80d0b57fc9b175815e766c9c1c1e893725e20f
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\fa\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 e758273c25fbad804fe884584e2797caefbbd1c2877dfd6f87ab1340cd25252e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\fi\messages.json
                                                                                            • Size 840B
                                                                                            • SHA256 a822b0e66d04644d1cfbd2517736728438743162c3213f15d986e2db85bd0213
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\fil\messages.json
                                                                                            • Size 799B
                                                                                            • SHA256 41ce6a7b18364efecced0419b42165d4f86c43643bbe1043014d4142cf86186a
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\fr\messages.json
                                                                                            • Size 902B
                                                                                            • SHA256 6713b69b6c9e80b03e0a9d4a7d158197b0c7ec8a853c64c0af0b1a05ce54d74c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\fr_CA\messages.json
                                                                                            • Size 901B
                                                                                            • SHA256 af889c1deb6f9248961c2f8ba4307a8206d7163616a5b7455d17cead00068317
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\gl\messages.json
                                                                                            • Size 927B
                                                                                            • SHA256 9890710df0fbf1db41bce41fe2f62424a3bd39d755d29e829744ed3da0c2ce1d
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\gu\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 cc3e9077fcc9bd0dfc5dd3924c6c48b8345f32cee24fccc508c279f45b2abe61
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\hi\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 14895bf43ce9b76c0ff4f9aef93dbe8bb6ca496894870cf0c007b189e0cef00e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\hr\messages.json
                                                                                            • Size 863B
                                                                                            • SHA256 985976b776e729835e047c81d3d731a6c488a6459aa8918dbc8ec808c0bf73a1
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\hu\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 cf26310b073b0891996ecd761c6cb53f00193dee524213a9fb34225d636ec4b7
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\id\messages.json
                                                                                            • Size 718B
                                                                                            • SHA256 35872a3343d4b4768fe4702a8dc18b749933e81210db13466ad172bd2880f6eb
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\it\messages.json
                                                                                            • Size 756B
                                                                                            • SHA256 3377a873db531113d79919e7a89369a79a602bac6ae09b9864b9378dc285f345
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ja\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 c1094a1d8457e782f229910b70fc7aece356aa779a423e869104946814660d35
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\kn\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 5fa00c465c1c5eed4bea860ceb78da9419ea115347ba543ddb0076e5c188feed
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ko\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 57f81a5fcbd1fefd6ec3cdd525a85b707b4eead532c1b3092daafd88ee9268ec
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\lt\messages.json
                                                                                            • Size 1002B
                                                                                            • SHA256 b42ebfe071ef0ec4b4b6553abf3a2c36b19792c238080a6fbc19d804d1acb61c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\lv\messages.json
                                                                                            • Size 959B
                                                                                            • SHA256 80d64f03dc2cc5283faf1354e05d3c3cb8f0cc54b3e76fdae3ad8a09c9d5f267
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ml\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 907f2709d1d3c8fa26294938f4080bc477e62281c4c50a082c22db0195cda663
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\mr\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 275e7fadb93a810328e3adead8754dd0a19a062d5d20a872f7471ffab47aa7b3
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ms\messages.json
                                                                                            • Size 796B
                                                                                            • SHA256 9b32c491d0bfebdca1455f73c3c6f71796d433a39818c06c353da588de650f81
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ne\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 34c00e5e0690a2dfe5e5d47c6e7acf7052510df82d902cd2b3ebcdedd7c1a61c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\nl\messages.json
                                                                                            • Size 771B
                                                                                            • SHA256 e98c5cfe277a338a938e7277deec132f5ea82a53ebdb65ff10e8a2ff548ac198
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\no\messages.json
                                                                                            • Size 758B
                                                                                            • SHA256 b3ece279943b28c8d855ec86ac1ce53bdfb6a709240d653508764493a75f7518
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\pl\messages.json
                                                                                            • Size 978B
                                                                                            • SHA256 6538f562bd1baa828c0ef0adc5f7c96b4a0eb7814e6b9a2b585e4d3b92b0e61d
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\pt_BR\messages.json
                                                                                            • Size 814B
                                                                                            • SHA256 29a8dd3a07dfdb6dd90b49fc58ea8ef13fa92639205b8ae127b6702efaab0446
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\pt_PT\messages.json
                                                                                            • Size 855B
                                                                                            • SHA256 156fc7ba9b5728908e1a74950b97474f73d8f58933d345c8eeea8284565c8357
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ro\messages.json
                                                                                            • Size 930B
                                                                                            • SHA256 4ecedb9c1f3dd0d0e3aeb86146561b3d7e58656cbdbed1a39b91737b52ec7f2c
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ru\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 887bc5f4575c717ae7a498a3d61e99232327170a333cfcbd9880df1e8bcc546b
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sk\messages.json
                                                                                            • Size 947B
                                                                                            • SHA256 5e886e7b616fbff3671dab632d1b6d8dceeff9004218485f1b911dcd8c9694a3
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sl\messages.json
                                                                                            • Size 855B
                                                                                            • SHA256 75d018cc8525605ddc591f6bfe5bdaa2efb164934e9d5438972651f8c818d581
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sq\messages.json
                                                                                            • Size 923B
                                                                                            • SHA256 ea42c8f96c26ccb55a95f1f7bbbaf151ed36e9c737c54bb3c5081f3fdb9e9066
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sr\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 a3eb276fbd19dce2b00db6937578b214b9e33d67487659fe0bf21a86225ece73
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sv\messages.json
                                                                                            • Size 800B
                                                                                            • SHA256 5f4229d18e5606330146ee13bdf726e10c1e06cbb15368c47f1ae68abe9ce4ba
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\sw\messages.json
                                                                                            • Size 840B
                                                                                            • SHA256 2c6b42d122943dc0ca92a33074d1a607351d3bc7f9768e174617fa7011a3de9f
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ta\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 3fc7f56f6d6d514b32547509b39f6380fc786efbcca4b9859f204456ca2e7957
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\te\messages.json
                                                                                            • Size 3KB
                                                                                            • SHA256 90868a8a4a4dbf48770c14a161faea406ef9a453b75f4cb7a53c1b4e96a88599
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\th\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 d299aa0c4f29c5c8248a1c51afdb7439f4cf7bc28ee02408a598f8aad9f70810
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\tr\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 ac2894cea6332450095a7f8fc9b97550da87e4b4b6e6fb95df1a1f49f25e0e35
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\uk\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 08978a1425dec304483bbb7dd0e55a7d850c4561abd41bac1be5d93d70465174
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\ur\messages.json
                                                                                            • Size 2KB
                                                                                            • SHA256 504549057a6a182a404c36112d2450864a6cb4574cd0e8f435ca556fac52ab0a
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\uz\messages.json
                                                                                            • Size 737B
                                                                                            • SHA256 a464016d7743a4147d8dc047c64afcb8b736d27ddde4213068667712c97ae3b9
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\vi\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 f1da95e1d58e933050cd8a4fea12f3d1b9a2759479ffdb74fdc1cfbf89568327
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\zh_CN\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 31eb4ffddccec09f1d797d5c250b096e12022290b07a9ab0304e9751a145e815
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            messages.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\_locales\zh_TW\messages.json
                                                                                            • Size 1KB
                                                                                            • SHA256 16b8f7be42b982d5ad9f638e71da38d134394b9bab9255f73cf514abbfaaf146
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            dasherSettingSchema.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\dasherSettingSchema.json
                                                                                            • Size 854B
                                                                                            • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            manifest.json

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\manifest.json
                                                                                            • Size 1KB
                                                                                            • SHA256 609995e8dbdba5ba968a6c604750e725059902b4e8c1f693851c738d3938317e
                                                                                            • MD5 SHA1 SHA512 TLSH

                                                                                            service_worker_bin_prod.js

                                                                                            • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4756_470354231\CRX_INSTALL\service_worker_bin_prod.js
                                                                                            • Size 121KB
                                                                                            • SHA256 ed3803ef5bac39e8b153d283695ee3562398e5d771a6c7fe5d1a85805672ab3e
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            ccba5a5986c77e43.customDestinations-ms

                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                            • Size 10KB
                                                                                            • SHA256 26b314f7e27cab4a107ffce02d3874d88b44f047ca13715f5d4d64c8a5b381d8
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            ccba5a5986c77e43.customDestinations-ms

                                                                                            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
                                                                                            • Size 8KB
                                                                                            • SHA256 03ef09ed8b42ebce1580f5cd91052060e4a9b97735091e359820d464ef655ffa
                                                                                            • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                            memory/1432-874-0x0000014988A30000-0x0000014988A9B000-memory.dmp

                                                                                            memory/4372-2378-0x000001DB27840000-0x000001DB278AB000-memory.dmp