Analysis

  • max time kernel
    899s
  • max time network
    899s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260130-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    11/05/2026, 14:56

General

  • Target
    https://www.tiktok.com/@quinn.emanuel.huku/
  • Sample260511-sbdcfacx7w
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.tiktok.com/@quinn.emanuel.huku/
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4672
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ffb3e5dc188,0x7ffb3e5dc194,0x7ffb3e5dc1a0
      2⤵
        PID:3600
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,2897852247016358177,6736918554823709891,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:3
        2⤵
        • System Time Discovery
        PID:5388
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,5698481000041373468,9131347191236674768,262144 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:2
        2⤵
          PID:4812
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2616,i,7377178119306410686,5751921933901396106,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:8
          2⤵
            PID:1712
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3448,i,12081145933130246912,13183212612521695302,2097152 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
            2⤵
              PID:4940
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,1805476840880511333,14301022614590353910,2097152 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:1
              2⤵
                PID:5580
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5532,i,1685230526536541180,10110245404672443698,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5296 /prefetch:8
                2⤵
                  PID:3476
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,12906899545763320844,4821406440549000464,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
                  2⤵
                    PID:5224
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5716,i,11306884699048427965,11882835792401605416,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
                    2⤵
                      PID:536
                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,17128558165958693875,4598963262103066284,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
                      2⤵
                        PID:940
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6196,i,17128558165958693875,4598963262103066284,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:8
                        2⤵
                          PID:1564
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6644,i,12257733689252558777,4639947326770639952,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:8
                          2⤵
                            PID:4476
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,10064103595948656091,203280447471302216,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6196 /prefetch:8
                            2⤵
                              PID:4424
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6652,i,15855057325764075822,290621213746219545,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
                              2⤵
                                PID:4272
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,5273221710660384947,3610259222995737662,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=120 /prefetch:8
                                2⤵
                                  PID:4820
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,12994999256176123296,12582318579726331872,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:8
                                  2⤵
                                    PID:2476
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5868,i,15733416491155567880,12941330795517681182,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:8
                                    2⤵
                                      PID:3228
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,11405233030321278162,7133176054366185088,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                                      2⤵
                                        PID:5436
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,15620398378373920923,11072396859608082033,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
                                        2⤵
                                          PID:6032
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5436,i,1082734351295149204,1670368789014625044,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
                                          2⤵
                                            PID:3368
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5388,i,4638142162475536395,6996829628662701055,262144 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:8
                                            2⤵
                                            • Suspicious behavior: EnumeratesProcesses
                                            PID:3932
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,5005244181307652654,14256126363186133215,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=4732 /prefetch:8
                                            2⤵
                                              PID:4040
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6012,i,8350445492650398089,2314597655233424374,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:8
                                              2⤵
                                                PID:3692
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1040,i,12259670116218425424,15208017709806270185,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=1032 /prefetch:8
                                                2⤵
                                                  PID:4836
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6356,i,2352841773478375041,3731773252094392551,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=3984 /prefetch:8
                                                  2⤵
                                                    PID:5616
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4740,i,17555355630856713733,7669715982779940687,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
                                                    2⤵
                                                      PID:4516
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4012,i,14071781479496964110,5660151773173973447,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=2968 /prefetch:8
                                                      2⤵
                                                        PID:4140
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6384,i,16166359757917120737,110261458264993851,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:8
                                                        2⤵
                                                          PID:2884
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4016,i,17760474714796755982,15296883278960212800,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:8
                                                          2⤵
                                                            PID:3336
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5488,i,10605851282343732005,8282854883395450991,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:8
                                                            2⤵
                                                              PID:1892
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,14432083754029946311,11395204286313466091,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:8
                                                              2⤵
                                                                PID:3656
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4012,i,13993513215188166224,3837791338100788755,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5744 /prefetch:8
                                                                2⤵
                                                                  PID:1848
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,10120161363463562862,6079606976451504660,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
                                                                  2⤵
                                                                    PID:5892
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5632,i,1737850416054063307,5063806629692038707,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6288 /prefetch:8
                                                                    2⤵
                                                                      PID:2896
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6676,i,8902609387337621005,13636405119552577064,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
                                                                      2⤵
                                                                        PID:5828
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,8655352915748556024,17859066389650098014,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
                                                                        2⤵
                                                                          PID:6092
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6528,i,11919965621310429852,13007217932699044390,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=6480 /prefetch:8
                                                                          2⤵
                                                                            PID:5984
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,12399654706752933427,9760650494010364045,524288 --field-trial-handle=2272,i,15818257262574936310,17697737512764924249,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
                                                                            2⤵
                                                                              PID:4572
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                            1⤵
                                                                              PID:5612
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                              1⤵
                                                                                PID:5440

                                                                              Network

                                                                                    MITRE ATT&CK Enterprise v16

                                                                                    Replay Monitor

                                                                                    Loading Replay Monitor...

                                                                                    Downloads

                                                                                    Staging

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1086023416\Sigma\Staging
                                                                                    • Size 36B
                                                                                    • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                                                                                    • MD5 SHA1 SHA512

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1086023416\manifest.json
                                                                                    • Size 132B
                                                                                    • SHA256 68683970ce6d7de9a2043c34129106ae68af21a3b0a3c53cb59695640a7c1cbc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1106655420\manifest.json
                                                                                    • Size 116B
                                                                                    • SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1117328957\manifest.json
                                                                                    • Size 102B
                                                                                    • SHA256 932322ae700a7d7606efb182239db5fd9550dd6cb5860e0a17bfb6fe3bcb5f35
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    hyph-as.hyb

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1275857173\hyph-as.hyb
                                                                                    • Size 703B
                                                                                    • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    hyph-hi.hyb

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1275857173\hyph-hi.hyb
                                                                                    • Size 687B
                                                                                    • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    hyph-nb.hyb

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1275857173\hyph-nb.hyb
                                                                                    • Size 141KB
                                                                                    • SHA256 c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1275857173\manifest.json
                                                                                    • Size 82B
                                                                                    • SHA256 d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    keys.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1301349235\keys.json
                                                                                    • Size 8KB
                                                                                    • SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1301349235\manifest.json
                                                                                    • Size 79B
                                                                                    • SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1344239670\manifest.json
                                                                                    • Size 141B
                                                                                    • SHA256 dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1416870856\manifest.json
                                                                                    • Size 52B
                                                                                    • SHA256 38bee4120e8eb37975dd2f6a2a3b23f9cea6e6c4f0335ad80270dc22b9990fc9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_144455546\manifest.json
                                                                                    • Size 177B
                                                                                    • SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1465209889\manifest.json
                                                                                    • Size 118B
                                                                                    • SHA256 69e4e1c13d13f15e8066d6d7e984a96a08d3b2a2ae33fbb218b1e0de5b8d1aed
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    edge_checkout_page_validator.js

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1493059690\edge_checkout_page_validator.js
                                                                                    • Size 1009KB
                                                                                    • SHA256 9960614ae3d67b2a2b2b1bb1fdd6a427f4d103835e50e45f2e2cf3b1c540fa44
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_1493059690\manifest.json
                                                                                    • Size 146B
                                                                                    • SHA256 1d4f529025d274699f815657573b828ae880ae0d44ee0b0ce66a6a273f2bddff
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_194028422\manifest.json
                                                                                    • Size 69B
                                                                                    • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_323372007\manifest.json
                                                                                    • Size 76B
                                                                                    • SHA256 0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_390341059\manifest.json
                                                                                    • Size 119B
                                                                                    • SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    notification_fast.bundle.js.LICENSE.txt

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_4183084\Notification\notification_fast.bundle.js.LICENSE.txt
                                                                                    • Size 551B
                                                                                    • SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    tokenized-card.bundle.js.LICENSE.txt

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_4183084\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt
                                                                                    • Size 1KB
                                                                                    • SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    strings.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_4183084\json\i18n-tokenized-card\fr-CA\strings.json
                                                                                    • Size 2KB
                                                                                    • SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_4183084\manifest.json
                                                                                    • Size 121B
                                                                                    • SHA256 cd25cc1afcc03514d978f0a90692454e810c3cc81763074e0ea5ac504255335a
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_609680971\manifest.json
                                                                                    • Size 165B
                                                                                    • SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    manifest.json

                                                                                    • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4672_984100844\manifest.json
                                                                                    • Size 1001B
                                                                                    • SHA256 25ac9b79df29fa869b4c9f4ca3bdbc3a85f6122f5a8efab5a1216d577099becc
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    autofill_bypass_cache_forms.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
                                                                                    • Size 161B
                                                                                    • SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    edge_autofill_global_block_list.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
                                                                                    • Size 6KB
                                                                                    • SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    v1FieldTypes.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
                                                                                    • Size 509KB
                                                                                    • SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 d68b8059d1fdfd8541892ccb136bddd7ec7601b55110e2cdd4c0e5ace97d9da8
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    settings.dat

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                    • Size 280B
                                                                                    • SHA256 8b1e4ba6890ec60cfe9f6942acc1937ba6fdde042b45c0a2e0b7e13ade701cfd
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG.old

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                    • Size 334B
                                                                                    • SHA256 498fe8575b2f0d665131c1186706198f92cb23e1ac50dea1fc0958c92deb24ac
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG.old

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                    • Size 352B
                                                                                    • SHA256 6bd2c8dedbee84b5406d9baf8b7211dcda2108766eac2792b354d08faa26b543
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LOG.old

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                    • Size 332B
                                                                                    • SHA256 53784ccbb8384f57b2defc66e655819302d17829c31ba2a2e9741efffdece8af
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    MANIFEST-000001

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                    • Size 384B
                                                                                    • SHA256 47d4bfcf75535731e5d4fbd71d24e854ee9f4637dda7ed0a090b9c655aee4eec
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    BookmarkMergedSurfaceOrdering

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                    • Size 6B
                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                    • MD5 SHA1 SHA512

                                                                                    BrowsingTopicsState

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                                    • Size 414B
                                                                                    • SHA256 804f77ae5e235efcf53e611133a19bc4a788ff2f0744f5ced1dfaea0889cc0cd
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    f_00009f

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                                    • Size 95KB
                                                                                    • SHA256 e164f68328cd769c44e84261767d6ffa3cacdf8f5bcc65c416ff631ae7ab226a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    f_0000dc

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
                                                                                    • Size 55KB
                                                                                    • SHA256 c0b1c3c6995c24eabd1a6fcc4f00523e022b546cf1fa4fce6c30d04763244d1b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                    • Size 7KB
                                                                                    • SHA256 c7b8ef8e05863b181fc2fc0181df31c6f7f72b0730d3c7cc36875a2d2e0f9c01
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index~RFe589f39.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe589f39.TMP
                                                                                    • Size 2KB
                                                                                    • SHA256 d7d6136c50adfef4813ca346394a1d33b592d3c4a8d3333d1f04bcd6d7e09dc5
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    SiteList-Enterprise.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                    • Size 2B
                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                    • MD5 SHA1 SHA512

                                                                                    HubApps

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                    • Size 106KB
                                                                                    • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 4KB
                                                                                    • SHA256 ef38caf6af97691aa5a19b84920c40682f2a47a735d821be9fc4274eb7730d31
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 4KB
                                                                                    • SHA256 e2a898d1e6bf10753922874abe2ab5861b3d43b8bc6c7112817c2f6f47925bcd
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Network Persistent State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                    • Size 1KB
                                                                                    • SHA256 0969182b9510170149f87c0c0b958780630d92e7d0e1b47112423d33bcafaa23
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    SCT Auditing Pending Reports

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                    • Size 2B
                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                    • MD5 SHA1 SHA512

                                                                                    Sdch Dictionaries

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                    • Size 40B
                                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                    • MD5 SHA1 SHA512

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 16KB
                                                                                    • SHA256 6ff9acceee58ea5099a50348c41b856064b2d64ee59e3009b55b37fad6ed0ebf
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 15KB
                                                                                    • SHA256 4fcd034ebb549c42d6e6333386fd2bfc3def7d13654f2c52c8df7bf88fb2429a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                    • Size 15KB
                                                                                    • SHA256 564854e73299e78104690a7efa88a6bbd08467e567e844f15ee0cc26d805d3bc
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Secure Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                    • Size 36KB
                                                                                    • SHA256 ed22d662ca0a4df9d4a147b1fe069d3fb8de64d9247f3f94af6ecb446b1e7f6f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Secure Preferences

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                    • Size 35KB
                                                                                    • SHA256 a4265d4c13b7945ac812860f0e8b44eacbbb9fc5985bff475efe87f2161e0f10
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1531fc82-6025-4888-a216-29083faf8418\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 f3b0a250912134ca31306e9c02ec2d30c8d25ec44646f070736d512117b7eb4d
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe5cadcc.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1531fc82-6025-4888-a216-29083faf8418\index-dir\the-real-index~RFe5cadcc.TMP
                                                                                    • Size 72B
                                                                                    • SHA256 9dc6620fb153e870db3ce1df6bae1a1ed53870aee48c1d22bb79d1e29640c62a
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                    • Size 476B
                                                                                    • SHA256 e181b6266faace94744ab8109cdb137f14ee381d250269aadf36b07615dd2324
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\ca6bafca-1023-40a3-861e-9c456278cd39\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 ca3ecf55e790fe333d45c563480500ccf7a338984eb591be17ca5672564f53e9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\ca6bafca-1023-40a3-861e-9c456278cd39\index-dir\the-real-index
                                                                                    • Size 72B
                                                                                    • SHA256 4fc0349f30a5b727777c1e1d011bf44fd63a5b68e83b91047551b80ab47148ab
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index~RFe586f30.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\ca6bafca-1023-40a3-861e-9c456278cd39\index-dir\the-real-index~RFe586f30.TMP
                                                                                    • Size 48B
                                                                                    • SHA256 26655000160e202c797a7f580203d484c77ed0e9e47849dc3b99b43d69daca0f
                                                                                    • MD5 SHA1 SHA512

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                    • Size 159B
                                                                                    • SHA256 a49eff33d5c4e12baac74eed1bc96b81eeec77efa798c03ebe432f6fb87d6702
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt
                                                                                    • Size 159B
                                                                                    • SHA256 ccf6771c3c0e76d4927da143e6dc7aca46dccb2abc67fdb032d7c0bd1b370a5e
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    index.txt~RFe586f6e.TMP

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\4cc699dd486af2551d01b1a74abd5337c6e052e5\index.txt~RFe586f6e.TMP
                                                                                    • Size 165B
                                                                                    • SHA256 8dfce8dc2939321b53db6f46a752ef417ba0fa9ab41fa51902d6dbc2d3b9923c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    the-real-index

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                    • Size 192B
                                                                                    • SHA256 101418d5eff2165bce9e870a4b20ab9305d5887d2044ec3f696c872e1eeaabac
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    000001.dbtmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\dcaajljecejllikfgbhjdgeognacjkkp\000001.dbtmp
                                                                                    • Size 16B
                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                    • MD5 SHA1 SHA512

                                                                                    sync_diagnostic.log

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                    • Size 23KB
                                                                                    • SHA256 e334f9edf703398c468035b2535a3ef33c5ad5778dd0bee012f54536b3c0bd6a
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    MANIFEST-000001

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
                                                                                    • Size 41B
                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                    • MD5 SHA1 SHA512

                                                                                    domain_actions.dll

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
                                                                                    • Size 83KB
                                                                                    • SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    data.txt

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.6\data.txt
                                                                                    • Size 145KB
                                                                                    • SHA256 44dda6faa8220666a11a09301932b82c5d89ba5cf60227ae3b5c3a0a7518bbac
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    wallet-checkout-eligible-sites.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-checkout-eligible-sites.json
                                                                                    • Size 23KB
                                                                                    • SHA256 2abefae3d72e7c4f5cdc94eb0ee552612d843a26faf4a7bd061c73839e19d7eb
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    wallet-notification-config.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-notification-config.json
                                                                                    • Size 804B
                                                                                    • SHA256 bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    wallet-stable.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-stable.json
                                                                                    • Size 81KB
                                                                                    • SHA256 c1611bb1872456d5ba656cacea801b833ea43126a6ad7e43e143d52cba9d9597
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    wallet-tokenization-config.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18367.18366.1\json\wallet\wallet-tokenization-config.json
                                                                                    • Size 34KB
                                                                                    • SHA256 0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 24KB
                                                                                    • SHA256 fce840cec269d2fe5d9477de6a909a4bbe7ca51d3fd338cc561800e740de700e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 25KB
                                                                                    • SHA256 ae01bcc64b2d75f8a923009328d8714f982a840b3bb6cf03ad2205fa3fd98e2f
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 27KB
                                                                                    • SHA256 cba60841def63c9bdd79cdef5195a3c5eaef1fc55962150505426434ea452a58
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 27KB
                                                                                    • SHA256 abda9a4d13cdffe5027007425ea509aa8ab3f564de70091adab836e671c23382
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 27KB
                                                                                    • SHA256 eab92dfc3218d3613725766c9b3948ccaa333c62b75e38f94f8c6f9ae99ec529
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Local State

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                    • Size 26KB
                                                                                    • SHA256 751a17310fcd493435a80120a31e3a98468fc7471d55868478c37e5a37779e96
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    crs.pb

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\crs.pb
                                                                                    • Size 233KB
                                                                                    • SHA256 c132e2ba94619caf6143b3bbdd9c32944e80cbf3bff87364175c42801afe2584
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    ct_config.pb

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\ct_config.pb
                                                                                    • Size 16KB
                                                                                    • SHA256 aaeeb46cd91a4a392223cf2885f449bf532f0878c087d50bb0cb3fc7fa873a60
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    kp_pinslist.pb

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\46.0.0.0\kp_pinslist.pb
                                                                                    • Size 10KB
                                                                                    • SHA256 b5b2a45a5b25becb901916b13752e3477d4126a42d088f29863bd8672320ecf6
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Filtering Rules

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\Filtering Rules
                                                                                    • Size 2.1MB
                                                                                    • SHA256 5e301c48e6d7290990971e9f0bcb2263c8adba06ed0a2c6db5086949825d999b
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    LICENSE

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.84\LICENSE
                                                                                    • Size 24KB
                                                                                    • SHA256 ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Advertising

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Advertising
                                                                                    • Size 19KB
                                                                                    • SHA256 5989ccf9a58e4ffd47c2422bd8dfcb3ea4e1d412fbdec2291385a9955af9eace
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Analytics

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Analytics
                                                                                    • Size 4KB
                                                                                    • SHA256 163a5318312b814104d244a4b37b676a02f827068820aa60fc069e6346cb2b75
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    CompatExceptions

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\CompatExceptions
                                                                                    • Size 689B
                                                                                    • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Content

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Content
                                                                                    • Size 4KB
                                                                                    • SHA256 7869993fcb93b302598643be96c6ab94c4f3be47c9fc344959773c754291376e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Cryptomining

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Cryptomining
                                                                                    • Size 668B
                                                                                    • SHA256 1e92781e88ee786bf6d1d5cb71d467a92fe7f281f2d1e548524bf119d7ddc700
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Entities

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Entities
                                                                                    • Size 68KB
                                                                                    • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Fingerprinting

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Fingerprinting
                                                                                    • Size 1KB
                                                                                    • SHA256 c7d2b05ff6e790af78b0f1f341219fdb554dc5e14fbf3e3981819fccdd1ddfed
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LICENSE

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\LICENSE
                                                                                    • Size 34KB
                                                                                    • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Other

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Other
                                                                                    • Size 34B
                                                                                    • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                                                                                    • MD5 SHA1 SHA512

                                                                                    Social

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\Social
                                                                                    • Size 754B
                                                                                    • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    TransparentAdvertisers

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Mu\TransparentAdvertisers
                                                                                    • Size 105B
                                                                                    • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Advertising

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Advertising
                                                                                    • Size 20KB
                                                                                    • SHA256 868f3ed3f86f1e82a5041f0a7b382bdd720e411531df2dc680da34eb60580b75
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Analytics

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Analytics
                                                                                    • Size 3KB
                                                                                    • SHA256 33d2b069ea874c12ec96242ca7eb539c1086d38ac6c2e4858c0efcd74fc632e5
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Content

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Content
                                                                                    • Size 5KB
                                                                                    • SHA256 d99df5936c57a50aebb7f0a3ca65fcc682f523ace93641fbcfb9b09cfb71c739
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Cryptomining

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Cryptomining
                                                                                    • Size 32B
                                                                                    • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                                                                                    • MD5 SHA1 SHA512

                                                                                    Entities

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Entities
                                                                                    • Size 106KB
                                                                                    • SHA256 0f305323c627cf0c790831c7e0bc38455b7a99983c4ab5bd9d2d9567766c3499
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    Fingerprinting

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Fingerprinting
                                                                                    • Size 2KB
                                                                                    • SHA256 ec0fcbf71d58e707aaf6ba8d3c0719972f26727febe03f8efbf570b9635faddf
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    LICENSE

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\LICENSE
                                                                                    • Size 66B
                                                                                    • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Other

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Other
                                                                                    • Size 198B
                                                                                    • SHA256 c9ab8dbc87043c71dd649fc06bb006e7f62e81c973c37b125afb88e654e436f8
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    Social

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.34\Sigma\Social
                                                                                    • Size 3KB
                                                                                    • SHA256 e520603e6fb543cd078b2a7dbd8ccfc175e9aecf71654fc19785927a014d3435
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    typosquatting_list.pb

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2026.4.17.1\typosquatting_list.pb
                                                                                    • Size 1.6MB
                                                                                    • SHA256 805d8d74e6a3b6b2fe689e200868d7fa4781089d5f6fc830487ed1b5a9017049
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    well_known_domains.dll

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll
                                                                                    • Size 572KB
                                                                                    • SHA256 2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    ranked_dicts

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ZxcvbnData\3.2.0.0\ranked_dicts
                                                                                    • Size 865KB
                                                                                    • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    c4ab336e-f441-409b-baad-d3c5abee5f9f.tmp

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c4ab336e-f441-409b-baad-d3c5abee5f9f.tmp
                                                                                    • Size 24KB
                                                                                    • SHA256 9af1d4bbbbf5b67befdeb13692bb956aca692c741a0ab7475cba2188d387a940
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 74be31babeb290709d477b16d68c123298ccc8ba3a5fb45a20fa2406660bf602
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 e1bd2c8f90fd428ad6f3fbd797184a2b88bb511ea82c601b2fe2577da00babab
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 beadce0745f7a3b51b62590b7022b71ed120838e0be51d2f40165175089b93bd
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 5a5ecf9d269965abb2caf648706d0712ebb0b9bbf6e97c7f58d74168dd4385c6
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 509fd2796fd5d21758c00b4b10681b9bc77e01abcfdda02ce7264c856ce44538
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 332bb5cd823833f0342c4a90061bff624fcc2678dbcb1cf57a9b05461c6ea960
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 88d77b762898930a2549355b4d2d8bad2b936fcd8da8fb6cae02610090b074c9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 2b663d8b5f3f1df1d074697c455a6afeb0b56b7df09d750bc2e1874d7ceec603
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 bed80471533b381c11d1280eaa8009eae71317620cddd44eb8ff64bd311f3f28
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 ed9bcaf1010b80ddbef6f9a73d33ee75554df1cf8ec13d8b7a9fd1a2ae17c3d9
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 99dd6b0210a26f0a0490928e1b4621b6e9ea1deb78f40562938296ea6f5f8250
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 75c34329d5ef0dcf15a960c55445861f1c71bf275db704b8971a0a1949f92ca6
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 a56be246c9c7a53c4d0a0bebbca8766ec598f9a6d262d5808e462af246df330b
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 1KB
                                                                                    • SHA256 6e2a3f17f2502156ef1a1b097b69b9634d19d873cca7c8b4343e327b6c2404a1
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 bc688b147ecf739d76531b1ff0853bbe184e20c92792b5bed0e7e67e65b284aa
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                    • Size 2KB
                                                                                    • SHA256 9197648cb8cdebae1c9da004510cac8c7e12a9c7042cd0676723dc2c7a444881
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                    • Size 147KB
                                                                                    • SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                    metadata.json

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
                                                                                    • Size 132B
                                                                                    • SHA256 54f761e00d363bd15db7bae3cc55144c80148a5fa1db7c3c2049e0e406a9142c
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                    • Size 2KB
                                                                                    • SHA256 b28b9a3a1b513c9f23f35f04687b24ea6ea70639bd23cc09d258fa4a3f7e392a
                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                    memory/1564-1049-0x000001ADA4790000-0x000001ADA47C0000-memory.dmp

                                                                                    memory/1564-1050-0x000001ADA9D80000-0x000001ADA9DE1000-memory.dmp

                                                                                    memory/1564-1068-0x000001ADA9D80000-0x000001ADA9DE1000-memory.dmp