Analysis

  • user interaction
    yes
  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 19:27

General

  • Target
    Digital Rain Matrix Screensaver Installer.exe
  • Size 1.2MB
  • Sample260602-x59d7ads41
  • SHA256 c88e8c3a9943f505b8ec450a7b5e2f1f7d22554f26fdc02ce9130f435615dc1b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Drops file in Windows directory 9 IoCs
  • Executes dropped EXE 2 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 2 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 18 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Digital Rain Matrix Screensaver Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Digital Rain Matrix Screensaver Installer.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5248
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apps.microsoft.com/store/detail/9ND4MDXV97GS?ocid=&referrer=psi
      2⤵
      • Drops file in Windows directory
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1620
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2e0,0x2e4,0x2e8,0x2dc,0x368,0x7ffb8794c188,0x7ffb8794c194,0x7ffb8794c1a0
        3⤵
          PID:3216
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,17070624965351896687,5093720758422010542,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:11
          3⤵
          • Downloads MZ/PE file
          • System Time Discovery
          PID:436
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1604,i,8502826854735415876,17888932251079547960,262144 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:2
          3⤵
            PID:1640
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2480,i,13765056542555665586,16869821386255235577,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=3076 /prefetch:13
            3⤵
              PID:3980
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3504,i,6720984206408400012,13568659263868283434,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
              3⤵
                PID:4524
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3508,i,15450671302882608104,3979237833878282991,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=3572 /prefetch:1
                3⤵
                  PID:4476
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4196,i,12131141074464109239,7383360821275125590,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
                  3⤵
                    PID:5004
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4220,i,4571981201123684900,9204183522514349647,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4256 /prefetch:9
                    3⤵
                      PID:4540
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=4368,i,9103624677695287865,2593276094190169566,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:1
                      3⤵
                        PID:5100
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=4428,i,18264409464647924888,5993351447430200480,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:9
                        3⤵
                          PID:4784
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3692,i,9545496501554674731,8469512819354619822,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:14
                          3⤵
                            PID:5508
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3624,i,16840209534259120898,13235196709390063242,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:14
                            3⤵
                              PID:3136
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5460,i,5258376744638932096,12049107815361996169,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:14
                              3⤵
                                PID:2112
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5420,i,10920551307827128362,269200587066853775,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:14
                                3⤵
                                  PID:1832
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5576,i,7231998266877252718,13861979269202089890,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:1
                                  3⤵
                                    PID:1336
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,1856870372957827643,14028200997683931612,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
                                    3⤵
                                      PID:2824
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6388,i,1856870372957827643,14028200997683931612,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6404 /prefetch:14
                                      3⤵
                                        PID:5136
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,13228315004848311704,8013032452748916135,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:14
                                        3⤵
                                        • Suspicious use of WriteProcessMemory
                                        PID:3440
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
                                          cookie_exporter.exe --cookie-json=1128
                                          4⤵
                                            PID:5328
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,11719017275540366221,14804120004969472278,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6684 /prefetch:14
                                          3⤵
                                            PID:1624
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3664,i,924852180320894821,9700867354377700132,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
                                            3⤵
                                              PID:2216
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,4078509537434124845,5340509466518477111,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6740 /prefetch:14
                                              3⤵
                                                PID:5604
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6788,i,3120464962913373677,7055875231725080463,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6904 /prefetch:14
                                                3⤵
                                                  PID:5556
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6708,i,13118075710913775465,15743953188305666867,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:14
                                                  3⤵
                                                    PID:3896
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6904,i,3628084624780850050,13757752987369960236,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:14
                                                    3⤵
                                                    • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                    • NTFS ADS
                                                    PID:4568
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6852,i,6029819165658089473,13768201692868733878,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6908 /prefetch:14
                                                    3⤵
                                                      PID:1716
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6856,i,4922215430840253268,12240317077529034027,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:1
                                                      3⤵
                                                        PID:4404
                                                      • C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer.exe
                                                        "C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer.exe"
                                                        3⤵
                                                        • Executes dropped EXE
                                                        • Suspicious use of AdjustPrivilegeToken
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:5448
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apps.microsoft.com/store/detail/9ND4MDXV97GS?ocid=&referrer=psi
                                                          4⤵
                                                            PID:5620
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=6456,i,17844404352881773775,5543079277496723461,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4540 /prefetch:1
                                                          3⤵
                                                            PID:2240
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5776,i,9846035254817653724,12675268971818479841,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:1
                                                            3⤵
                                                              PID:5540
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=3672,i,8510710086216173700,10537801903624780765,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
                                                              3⤵
                                                                PID:224
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6868,i,11759730282592253052,10148476029575689919,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:14
                                                                3⤵
                                                                • Subvert Trust Controls: Mark-of-the-Web Bypass
                                                                • NTFS ADS
                                                                PID:5964
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7880,i,1423719676682087727,10213496649360414442,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=8104 /prefetch:14
                                                                3⤵
                                                                  PID:1800
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6444,i,1304143747225094343,3873702051392305875,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=8124 /prefetch:14
                                                                  3⤵
                                                                    PID:5724
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7876,i,9033566510605982737,17143098097209590396,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=8132 /prefetch:14
                                                                    3⤵
                                                                      PID:400
                                                                    • C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer (1).exe
                                                                      "C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer (1).exe"
                                                                      3⤵
                                                                      • Executes dropped EXE
                                                                      • Suspicious use of AdjustPrivilegeToken
                                                                      PID:5848
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://apps.microsoft.com/store/detail/9ND4MDXV97GS?ocid=&referrer=psi
                                                                        4⤵
                                                                          PID:3924
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=5448,i,8470050628172039032,16752551241607361054,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4176 /prefetch:1
                                                                        3⤵
                                                                          PID:1772
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8036,i,117993784494962387,8877270003196277945,2097152 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=8236 /prefetch:1
                                                                          3⤵
                                                                            PID:1564
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7096,i,10120346116492714239,2966854893769830621,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=7128 /prefetch:14
                                                                            3⤵
                                                                              PID:916
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7948,i,3494701061497003018,16206549454053981381,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=7992 /prefetch:14
                                                                              3⤵
                                                                                PID:2512
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7996,i,17972107066207207305,3704172447559841171,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=7776 /prefetch:14
                                                                                3⤵
                                                                                  PID:5480
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6976,i,16152680525667119234,15060596581352428419,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:14
                                                                                  3⤵
                                                                                    PID:2964
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6596,i,9915494789893032861,1401848222920534963,262144 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=8296 /prefetch:10
                                                                                    3⤵
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:5812
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6772,i,11826595737026731847,12960086972345892050,524288 --field-trial-handle=2264,i,17406830649337462233,372474259479805066,262144 --variations-seed-version --mojo-platform-channel-handle=5900 /prefetch:14
                                                                                    3⤵
                                                                                      PID:1316
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                  1⤵
                                                                                    PID:492

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v16

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                        • Size 314B
                                                                                        • SHA256 65a27c35d7ebe1406f43c2753b3e1b111ce6eca1c04d440c505f096abd4cef95
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD

                                                                                        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\26C212D9399727259664BDFCA073966E_912C3CA51DE6018A7BE4CA7BC64AAFCD
                                                                                        • Size 404B
                                                                                        • SHA256 d06be21bccda09b1e3fc31f741457c142a3c2a307898a029f7acb18ee072ca07
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Digital Rain Matrix Screensaver Installer.exe.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Digital Rain Matrix Screensaver Installer.exe.log
                                                                                        • Size 3KB
                                                                                        • SHA256 b817d6197afd50ad791501deb81b04437fcc9fbc11c5ae657cd02c6bbba46c12
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        protocols.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
                                                                                        • Size 3KB
                                                                                        • SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                        • Size 280B
                                                                                        • SHA256 89ab71a3a4e732da8cbbe2e13ba149e13c94226b7119c8a0598106b99907544f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        settings.dat

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                        • Size 280B
                                                                                        • SHA256 dcfc4c476f41db2d6042449b7b855b9751140e2127be8e8208aafd46a5893b7d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        BookmarkMergedSurfaceOrdering

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                        • Size 6B
                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                        • MD5 SHA1 SHA512

                                                                                        f_00005f

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005f
                                                                                        • Size 66KB
                                                                                        • SHA256 1087b416034be2c6ee0d4848f3ab28ec42e41ae99c55a4ae0504583897db49a1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000064

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000064
                                                                                        • Size 65KB
                                                                                        • SHA256 fd002e347557ac12c5d85eef84b613f82c6b968680c0c871b6d95fc32f4ac098
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000065

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                        • Size 66KB
                                                                                        • SHA256 270cf0846b1cda95bbbe1b7d4c4acb571c4da666c02bf59c518047bad9985f43
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_000069

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                                        • Size 24KB
                                                                                        • SHA256 1998bda98734515471b0c09a1f5aae271a758a598fc668893c9973a8f60d94e7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f_00006e

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
                                                                                        • Size 277KB
                                                                                        • SHA256 fffdae14e4a2069965e70692b96604ad5d21538909385b2abe55c2a6974d3336
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 d312f851a8ed0d530fcfb5f377f8e95814983fa72fa080283c1f6e738a530b6f
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe590d35.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe590d35.TMP
                                                                                        • Size 3KB
                                                                                        • SHA256 241f7ddf9d309060dcb7bd8136880dc2d59f7523ea105e7e7c07799041ef257c
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        SiteList-Enterprise.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                        • Size 2B
                                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                        • MD5 SHA1 SHA512

                                                                                        Edge Profile.ico

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                        • Size 70KB
                                                                                        • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        HubApps

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                                        • Size 106KB
                                                                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        000003.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.microsoft.com_0.indexeddb.leveldb\000003.log
                                                                                        • Size 83KB
                                                                                        • SHA256 5e7420a8749e895440144c6fc13c6e4505ff5d55808a9ffa363a41c951c9fa85
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        CURRENT

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.microsoft.com_0.indexeddb.leveldb\CURRENT
                                                                                        • Size 16B
                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                        • MD5 SHA1 SHA512

                                                                                        LOG

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.microsoft.com_0.indexeddb.leveldb\LOG
                                                                                        • Size 357B
                                                                                        • SHA256 f5c6ef4c4e0e77db5ccb757a0f6f2567db28558221630e1664b19c80acf2fc5e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        MANIFEST-000001

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_apps.microsoft.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                        • Size 23B
                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                        • MD5 SHA1 SHA512

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                        • Size 3KB
                                                                                        • SHA256 cc9ae5c69888705383493157ab1f227a2642d255f60b48497b166d58ffd52d6b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Network Persistent State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                        • Size 111B
                                                                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        SCT Auditing Pending Reports

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                        • Size 2B
                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                        • MD5 SHA1 SHA512

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 359729cb25d1c4025030096c80e4ccbac52c580d44ffb57b91b179391d1185b9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                        • Size 14KB
                                                                                        • SHA256 15294631662d58fd773a2b722806a758033d89ebc4ac895b2ee6a5be6508a85d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                        • Size 15KB
                                                                                        • SHA256 0a6ded9bd57263d62484f06d5333ab2c914b93fda34490179de5fec10c97b7e1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Secure Preferences

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                        • Size 36KB
                                                                                        • SHA256 b15dad9d4521ea2b551b6df82ccd91a9561522d29a51517b40d55e736997cfd8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\01fd40a2-67c4-4a50-8f72-c358d5206ba2\index
                                                                                        • Size 24B
                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\01fd40a2-67c4-4a50-8f72-c358d5206ba2\index-dir\the-real-index
                                                                                        • Size 72B
                                                                                        • SHA256 3e59b52d21343b4aa59ca33aea8aec6ccf89a3eb9a7ecb01efda107aa29c9cfd
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe590d64.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\01fd40a2-67c4-4a50-8f72-c358d5206ba2\index-dir\the-real-index~RFe590d64.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 337a102362722f2952238c7739e58501c4481af1975f53ad3301c8ca84828d4c
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\1378aea7-920e-4999-9e77-88f96293191d\index-dir\the-real-index
                                                                                        • Size 240B
                                                                                        • SHA256 0fbf36a0a2d5d61a94d3983456a2d9866c6f0664663df5cbabfe6327fb050c11
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe590f87.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\1378aea7-920e-4999-9e77-88f96293191d\index-dir\the-real-index~RFe590f87.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 35c8c6cb71c08edef0e1779789fedb55608571e5afdcf5c0a0d463a6d82191c0
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\393f2f27-daeb-4b54-bd47-17dc3ac95402\index-dir\the-real-index
                                                                                        • Size 72B
                                                                                        • SHA256 30227400b23def969a448fa132a510e9fb03b2a95a56b14d95073032429a3839
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe589805.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\393f2f27-daeb-4b54-bd47-17dc3ac95402\index-dir\the-real-index~RFe589805.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 8dfa592f5c49ba2419652e1ee3e129d8ce21ccdcef572aba4eeee23a786751f8
                                                                                        • MD5 SHA1 SHA512

                                                                                        07d51e080a3e8677_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\07d51e080a3e8677_0
                                                                                        • Size 13KB
                                                                                        • SHA256 6f1a6b7ab2c0a4cf2bef4e9d8267999c26f0a217290998c13a2c774a53b9d53a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        08e5476a391c9bf4_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\08e5476a391c9bf4_0
                                                                                        • Size 87KB
                                                                                        • SHA256 2dfb89e6b522df1b93c86a6d9ceaddb928e5b608d755b1cdb1594d46aab6d63e
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        0ec68071645bad8a_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\0ec68071645bad8a_0
                                                                                        • Size 37KB
                                                                                        • SHA256 0c3febf7d42e1d00dd695ec3d3af5ff17af95943a70a9314758f2a0e496450f8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        187bf0d66f2801b6_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\187bf0d66f2801b6_0
                                                                                        • Size 16KB
                                                                                        • SHA256 f6c027afc42b5c70cd0fa17242d3469fa89119ccf30215d6bc7d82efe9a63120
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        18c7b1c15aecc4a8_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\18c7b1c15aecc4a8_0
                                                                                        • Size 22KB
                                                                                        • SHA256 e00341b59306857f057f959d101cef97c74428d4645ceb0cb456ed982e2c643f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        1d80f06c64894099_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\1d80f06c64894099_0
                                                                                        • Size 3KB
                                                                                        • SHA256 d22ebe1ac051ac465ccaf247f388e9b950b7f09e8659eb594d4a22df799e37bf
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        20e2c64e05fe4ade_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\20e2c64e05fe4ade_0
                                                                                        • Size 3KB
                                                                                        • SHA256 edbece1f15b1f30b3a3b4c0254c17fb100d113c8d76a3b08d30d330384dee345
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        222f9371e325cda1_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\222f9371e325cda1_0
                                                                                        • Size 3KB
                                                                                        • SHA256 9d19ff204562102109c80f812e3de345f619d43b1cb9a8330766f31ab3840f59
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        22e959198a7640b6_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\22e959198a7640b6_0
                                                                                        • Size 10KB
                                                                                        • SHA256 5a01f7945d83bc88a4a616f33d1a7f80ce9a4cfc92581d6e77edcdecaf3f9642
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        2b2f172845b92c74_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\2b2f172845b92c74_0
                                                                                        • Size 2KB
                                                                                        • SHA256 72482164d737abde3b9b9df1126aafe2e9861d71469173c3316d2983cea2e105
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        2f73135c0a6b9b4d_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\2f73135c0a6b9b4d_0
                                                                                        • Size 3KB
                                                                                        • SHA256 9b3a4948276b92e7daf5da7f7c27765ba6d6540b7253e2dadccfd5c1a3c949e9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        34192a7864ec3421_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\34192a7864ec3421_0
                                                                                        • Size 4KB
                                                                                        • SHA256 d8c70f79a6477df13304d710e383603673178c8211dde4386b238a4297cafbc1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        380d60ba92eded25_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\380d60ba92eded25_0
                                                                                        • Size 3KB
                                                                                        • SHA256 d15f796879e5890083c8ff546e8199fda18a1957bddfad179205436c2fc24872
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        3c40a98e20b2bedc_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\3c40a98e20b2bedc_0
                                                                                        • Size 3KB
                                                                                        • SHA256 23b1d7bc599f13974b4fa4d26a5a8a23aad89261dca7e04924cc4aa8de319df9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        3f8735587c7c2efb_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\3f8735587c7c2efb_0
                                                                                        • Size 9KB
                                                                                        • SHA256 40f357dfe492382b35fba631c671a2998efbf4644670bead3efce4ef4b342287
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        3ff919e6f1b91343_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\3ff919e6f1b91343_0
                                                                                        • Size 8KB
                                                                                        • SHA256 fe344f93466704e9bc50529762ac42365aac0e16a26e1e7bd408087c006599c8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        46f9be9059664f72_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\46f9be9059664f72_0
                                                                                        • Size 40KB
                                                                                        • SHA256 2a4df7cbff4a9dd284797710d8c244b36457caa48dea5e2781794751b3dd3839
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        48ec73473f208764_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\48ec73473f208764_0
                                                                                        • Size 5KB
                                                                                        • SHA256 9d8d7269cda5ba04e6c306406525d365dfaa411b0729b80efc95c5ced4cb1c53
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        58acc51030774d06_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\58acc51030774d06_0
                                                                                        • Size 5KB
                                                                                        • SHA256 9013186a812d88e56ddfde3a931ea2df2c2428d6b88b632498498c5befdfd0f6
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        598c9f92c8ab8acc_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\598c9f92c8ab8acc_0
                                                                                        • Size 6KB
                                                                                        • SHA256 27ee07602d5e6ad953dbd5e8e92cbafd72c418814ecd2c0264767bc590482ff4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        5cb785348ea8b13c_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\5cb785348ea8b13c_0
                                                                                        • Size 3KB
                                                                                        • SHA256 fb5960bb0a538e0b334641cb5444fb3e80db91d41bfbf644a25b100ed27d41c5
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        5d8d525b734da043_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\5d8d525b734da043_0
                                                                                        • Size 33KB
                                                                                        • SHA256 e54f16026d4aaa359322c972af70e4ef03c8dc89d579cb05e6997ac582d79877
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        5d9628610ff7825d_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\5d9628610ff7825d_0
                                                                                        • Size 3KB
                                                                                        • SHA256 32cf60b014247ef40cc4be8133276d1273cfb3a07371ec6e451890da98aaf7ed
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        74e8cbc70cb52c37_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\74e8cbc70cb52c37_0
                                                                                        • Size 28KB
                                                                                        • SHA256 c4c7c22d923f98d7b4d981ca22993d95a6c05f57fbf1b4b9858bd96ba74b7fea
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        76ef9b298c4e5889_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\76ef9b298c4e5889_0
                                                                                        • Size 2KB
                                                                                        • SHA256 5a8fe5de74b4e3ad23caa8f754d1e519e364c206dbaf7370cbec6183601062c9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        7964e8119dd525ba_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\7964e8119dd525ba_0
                                                                                        • Size 5KB
                                                                                        • SHA256 9e58135ee3e9bb9382d9e0a9628b320e85c3a73e5f618bfeefc3f322e7c19b38
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        8f66323ec8279045_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\8f66323ec8279045_0
                                                                                        • Size 25KB
                                                                                        • SHA256 90f0650a2d73e62b491aeddcb8f9d23b5e38dd6a575d5c7161f03769b0e0b128
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        96b665c7a2395765_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\96b665c7a2395765_0
                                                                                        • Size 4KB
                                                                                        • SHA256 6cde6fb60d1204fb3c366857b83e48be1f23f60cc8ca7f8d858a01cdf6d4f724
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        9a2f520bcf1ced67_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\9a2f520bcf1ced67_0
                                                                                        • Size 43KB
                                                                                        • SHA256 ca312c6f5bfa0bd391841b4998b93e8fd1b851a8ed2352d67cee83f1128ae168
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        9aabe35e2b7e7748_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\9aabe35e2b7e7748_0
                                                                                        • Size 7KB
                                                                                        • SHA256 3d1255acd95c9c4e6e9c63d8998ade86a891599767e97df53f3b3ce8e0051fda
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        a2cebfcb6174e675_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\a2cebfcb6174e675_0
                                                                                        • Size 5KB
                                                                                        • SHA256 9f2644e44c462095edd13f7d91956f1a9a282b4cfe4ad9cf1c3a0e15c46c1739
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        b219c98e8b87f830_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\b219c98e8b87f830_0
                                                                                        • Size 46KB
                                                                                        • SHA256 4746994f5906e7eaea2c3bb07326083fffa421c12145abd7ba35bdc100d77e19
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        b915f88a90396284_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\b915f88a90396284_0
                                                                                        • Size 36KB
                                                                                        • SHA256 5971704c5db0827087318fdcb9f9027d725b27c80592618e19e851a41de9185c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        be73afb2007d52a2_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\be73afb2007d52a2_0
                                                                                        • Size 16KB
                                                                                        • SHA256 37fa55e99f503efbec17e73021692c05d8aa829c2d7d6a45ba060f7293964e90
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        bf8ffba40ef33ec5_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\bf8ffba40ef33ec5_0
                                                                                        • Size 9KB
                                                                                        • SHA256 6aff2a0ec4160f6011c852cb59e6122b73c2a98407cacedd15a40c3499ac8b5c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        c08122d2efa23202_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\c08122d2efa23202_0
                                                                                        • Size 37KB
                                                                                        • SHA256 b2095018b31c571c6326465c24d288137a94311b8c41a0e8fb7134f4a9a072dc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        c3d65bc3c72447ac_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\c3d65bc3c72447ac_0
                                                                                        • Size 18KB
                                                                                        • SHA256 68fe47da624cbb1cb5d364a1d37c64edb8bb9b46fff2307328f9d6e067b8deb9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d0073c1a555f3686_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\d0073c1a555f3686_0
                                                                                        • Size 35KB
                                                                                        • SHA256 7cb96835350f04db107ca26da6cc023ab3447aa9362d86d82e79938c2b81d9b4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d6c3d007213256b2_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\d6c3d007213256b2_0
                                                                                        • Size 5KB
                                                                                        • SHA256 4d83623447710bec9ae1de2d5397f40c8afaf1708718c371360f3b3174830690
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d6dd5b0bb330dc09_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\d6dd5b0bb330dc09_0
                                                                                        • Size 18KB
                                                                                        • SHA256 fe61f69c9b5bd581e81afc974f680563ea9f96f9fe35e682c297f225b81de198
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        d7c83d96a09a2fdd_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\d7c83d96a09a2fdd_0
                                                                                        • Size 21KB
                                                                                        • SHA256 ae2a76ec2273b1e08e1ef549f0226626786317af3f80b5f2901c61c0bb7676ec
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dc02a617fa3d1ed0_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\dc02a617fa3d1ed0_0
                                                                                        • Size 253KB
                                                                                        • SHA256 552e621a29ead818af959ab6dbf345c20a73d23f912d4d5ec52f7f793147a0fc
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        dcfde700c52e2f09_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\dcfde700c52e2f09_0
                                                                                        • Size 5KB
                                                                                        • SHA256 ccb9dd72f2282a4ff47c40c8d61edefe57e972d866729c7fa23271435e254ee9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        df5fbe1f7f586ac6_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\df5fbe1f7f586ac6_0
                                                                                        • Size 10KB
                                                                                        • SHA256 7f27caed485398647823c21239465c3a0c8f9b1c0129b06715fb85c1f63a3842
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        e18c57262c59cad3_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\e18c57262c59cad3_0
                                                                                        • Size 21KB
                                                                                        • SHA256 60ae78171091bd5696e89e83cac6c36a9bfd5b9518e390630852bf862be49961
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        e755f1608a82c845_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\e755f1608a82c845_0
                                                                                        • Size 28KB
                                                                                        • SHA256 0c003e721842c9cfd1f0fb2222cfed0db0f6cc96c3be9e57b80cb358dde5d210
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        efff4213b45bc6a8_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\efff4213b45bc6a8_0
                                                                                        • Size 18KB
                                                                                        • SHA256 4bdc3b00822a699ab3695d91f645cced94456e8aeb76a631151f617560671da9
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f7baa014edfd317d_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\f7baa014edfd317d_0
                                                                                        • Size 6KB
                                                                                        • SHA256 f01be821604724dc2bee3f4141346f07403f59905a8ef6085ddc4ce3976fc70b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f87e75d32ac7eb02_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\f87e75d32ac7eb02_0
                                                                                        • Size 4KB
                                                                                        • SHA256 47e58e4f12ef2884edbc534cb7bb635974171d4c36e68a7ff82c9d5c2cc64e0c
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f9965aba70ff21db_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\f9965aba70ff21db_0
                                                                                        • Size 76KB
                                                                                        • SHA256 8bfac5ef624f20960c959d7eea8aff9e8dbba914e795abdecb895fe6eab233a1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        fb83526e93ff9552_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\fb83526e93ff9552_0
                                                                                        • Size 3KB
                                                                                        • SHA256 dea0a2fb3a786c6e2a851d88ec5cc244d52878d72395821443a926eaa79f0b87
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        fbc9a19c92401bca_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\fbc9a19c92401bca_0
                                                                                        • Size 5KB
                                                                                        • SHA256 d6bc9c372b9a526b328bf33084b410df15e75e6abd4a380069b52045bb62a354
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        fcf707393f23101d_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\fcf707393f23101d_0
                                                                                        • Size 4KB
                                                                                        • SHA256 d90173e612afc23bdbc73cc76ed2593c0b026fae20eb54e96d0ac993694dba78
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        fe8a4d84a8cb4b17_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\fe8a4d84a8cb4b17_0
                                                                                        • Size 45KB
                                                                                        • SHA256 822043773e7ec1cde18657134d64b60261771b6933e1561d42e105978cfd72b8
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\index-dir\the-real-index
                                                                                        • Size 3KB
                                                                                        • SHA256 164472c367a90effb8b129260189eb8a737d1f3387cb5f107fafc6f1a8d5c714
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe58d5ba.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\78607176-23d5-4899-9df4-e3cf1b68ddc0\index-dir\the-real-index~RFe58d5ba.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 c5d7a690ddec05ee4392220c545ddc07f854a6f3613677701c253f584fc18178
                                                                                        • MD5 SHA1 SHA512

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\9a323b59-f3f6-4b0d-816d-05c2894d2c4b\index-dir\the-real-index
                                                                                        • Size 528B
                                                                                        • SHA256 c9a21e89c37148faa57f7a49d82edded76fc243619edbd68fd925a944783a240
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe58d5d9.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\9a323b59-f3f6-4b0d-816d-05c2894d2c4b\index-dir\the-real-index~RFe58d5d9.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 519130d9bd3c256e12a57f0b05b53e69de68361542dbb23e5d44e399f9098830
                                                                                        • MD5 SHA1 SHA512

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
                                                                                        • Size 634B
                                                                                        • SHA256 a8d0abe1a9ace4a64ea7936d1bc97e0000617cb917bde32c35eb23827981f0d9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
                                                                                        • Size 386B
                                                                                        • SHA256 e00b3d39b874072059356db78c6e6b6c9260263125998d8ae57807cb4d556132
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
                                                                                        • Size 488B
                                                                                        • SHA256 eb0bb5499c3cc3b7a4534168b839b5692e30f96fcf9c57736f7fbeb8c7d64ea9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
                                                                                        • Size 556B
                                                                                        • SHA256 0ea994817939ea3762bc82f125d58952d9942e011372b8d296e4ec8b0fa3707e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt
                                                                                        • Size 628B
                                                                                        • SHA256 3ab31ef9a47213b056bd653a33c6f6c8926012a42f3992e72da2df76acd9fea6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        index.txt~RFe5849d5.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a0a74304db73132d4bc12ef9404aa74f9fdeda56\index.txt~RFe5849d5.TMP
                                                                                        • Size 195B
                                                                                        • SHA256 2f6a351a88cc6bf05fd77146646706ff895c40876aec667f7fff44db372c6d24
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        f1cdccba37924bda_0

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
                                                                                        • Size 41KB
                                                                                        • SHA256 d6ca1e9cfcfe27b34d0ca8186ed80d247c9fb81cb3f904540312f4174d8c8282
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        f1cdccba37924bda_1

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
                                                                                        • Size 90KB
                                                                                        • SHA256 c92230833381b6fc3d42f2737596f833e9e3fc2e6260bef8d2b0d4e852815335
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        the-real-index

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                        • Size 72B
                                                                                        • SHA256 6f407cdfc8b55070d7b67c00e48ff72c632a4aecfe2a05c67dac48d164efd1aa
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        the-real-index~RFe5897d6.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5897d6.TMP
                                                                                        • Size 48B
                                                                                        • SHA256 902690737a795cb5865306a9901f2055af227c1398031a61f371793a26c65665
                                                                                        • MD5 SHA1 SHA512

                                                                                        sync_diagnostic.log

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                        • Size 4KB
                                                                                        • SHA256 5c9a5c9f0276c17f75702263e5e91efbc7e7882b67c721ccb3820c9000bb2d4b
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        OperationConfig

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
                                                                                        • Size 22KB
                                                                                        • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        OperationConfig~RFe59212a.TMP

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe59212a.TMP
                                                                                        • Size 3KB
                                                                                        • SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        office_endpoints_list.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
                                                                                        • Size 3KB
                                                                                        • SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 30KB
                                                                                        • SHA256 fe895b60a5ea76e43bcc9dd2ca29011d3b1d340365bceef5f5bde4489088d636
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 19KB
                                                                                        • SHA256 797276438154d53f9764120aec775c91cd2455f9436321a7e8549d9c226a7624
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 19KB
                                                                                        • SHA256 67fe83d7a87f13a26301a9e04741d609d4504783e14d25477c29ab33bf1f2868
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 8KB
                                                                                        • SHA256 be5bf170c9897f94cd150cfde914f90bfb41559300885362a3f6dec7d9e4772d
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 19KB
                                                                                        • SHA256 15e4b3bf4dc0f5d34910eaefcbd67b99070b712e68723376f5dcbb6bf18ff7f7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 19KB
                                                                                        • SHA256 c052afef2f6b778e8ea10075e866b05ae0337bb00d023cb2ef13c7a2e5fcb43f
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 19KB
                                                                                        • SHA256 7eea49b4219e41095fa04316f9ac86c40c08908c787a35579a7d2910feeb29d1
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Local State

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                        • Size 8KB
                                                                                        • SHA256 840721889ae520206e0b9ad7c2a1ac54300fb3b4d2f77dc39a2c4b8196e02333
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        nav_config.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
                                                                                        • Size 2KB
                                                                                        • SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        metadata.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                        • Size 132B
                                                                                        • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        metadata.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                        • Size 372B
                                                                                        • SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        metadata.json

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                                        • Size 252B
                                                                                        • SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        facb04fe-1a04-4a8f-a941-95a4cf969036.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\facb04fe-1a04-4a8f-a941-95a4cf969036.tmp
                                                                                        • Size 13B
                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                        • MD5 SHA1 SHA512

                                                                                        12b3fd07-f9f5-43ab-acc0-0c8860f0c209.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\12b3fd07-f9f5-43ab-acc0-0c8860f0c209.tmp
                                                                                        • Size 10KB
                                                                                        • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        8094e32e-f507-442a-badf-e0d34716beb2.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\8094e32e-f507-442a-badf-e0d34716beb2.tmp
                                                                                        • Size 1B
                                                                                        • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                        • MD5 SHA1 SHA512

                                                                                        Tmp23A0.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Tmp23A0.tmp
                                                                                        • Size 1KB
                                                                                        • SHA256 28c871238311d40287c51dc09aee6510cac5306329981777071600b1112286c6
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        content_new.js

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1620_382087448\CRX_INSTALL\content_new.js
                                                                                        • Size 10KB
                                                                                        • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        2c289d34-95fe-4a27-a3cb-4735f82831a8.tmp

                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir1620_795986078\2c289d34-95fe-4a27-a3cb-4735f82831a8.tmp
                                                                                        • Size 147KB
                                                                                        • SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Digital Rain Matrix Screensaver Installer (1).exe

                                                                                        • Path C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer (1).exe
                                                                                        • Size 1.2MB
                                                                                        • SHA256 108be3983a4ced2b0af3cd22f3f522bd589ed3aa86c2eeb56b6e7b8732c87d17
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Digital Rain Matrix Screensaver Installer.exe

                                                                                        • Path C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer.exe
                                                                                        • Size 1.2MB
                                                                                        • SHA256 4720bc7d3a830996755fe0ff33c3c14ad5d1732158cb1a0046199da21a53c6f7
                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                        Digital Rain Matrix Screensaver Installer.exe:Zone.Identifier

                                                                                        • Path C:\Users\Admin\Downloads\Digital Rain Matrix Screensaver Installer.exe:Zone.Identifier
                                                                                        • Size 63B
                                                                                        • SHA256 e4952ff0cb3e37e22753a1e22be03d635b5de24b3e08c422a2b7e3f7c09b033b
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1620_1390360610\manifest.json
                                                                                        • Size 43B
                                                                                        • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                                        • MD5 SHA1 SHA512

                                                                                        manifest.json

                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1620_1722762899\manifest.json
                                                                                        • Size 160B
                                                                                        • SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1620_2061169273\manifest.json
                                                                                        • Size 135B
                                                                                        • SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        manifest.json

                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1620_90034437\manifest.json
                                                                                        • Size 160B
                                                                                        • SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                        memory/5248-16-0x00000238FCA70000-0x00000238FCA80000-memory.dmp

                                                                                        memory/5248-21-0x00000238FDBA0000-0x00000238FDBA8000-memory.dmp

                                                                                        memory/5248-0-0x00000238E0D60000-0x00000238E0E9C000-memory.dmp

                                                                                        memory/5248-23-0x00000238FDFC0000-0x00000238FDFC8000-memory.dmp

                                                                                        memory/5248-14-0x00000238FDB80000-0x00000238FDB92000-memory.dmp

                                                                                        memory/5248-2-0x00000238FE070000-0x00000238FE12A000-memory.dmp

                                                                                        memory/5248-15-0x00000238FDFF0000-0x00000238FE02C000-memory.dmp

                                                                                        memory/5248-3-0x00000238FCA40000-0x00000238FCA4A000-memory.dmp

                                                                                        memory/5248-17-0x00000238FE030000-0x00000238FE056000-memory.dmp

                                                                                        memory/5248-18-0x00000238FCA70000-0x00000238FCA80000-memory.dmp

                                                                                        memory/5248-22-0x00000238FE460000-0x00000238FE5E8000-memory.dmp

                                                                                        memory/5248-1-0x00000238FCA70000-0x00000238FCA80000-memory.dmp

                                                                                        memory/5248-19-0x00000238FE1C0000-0x00000238FE1F8000-memory.dmp

                                                                                        memory/5248-20-0x00000238FCA60000-0x00000238FCA6E000-memory.dmp