Analysis

  • geolocation tags

    eueuropelondonukunited-kingdom
  • user interaction
    yes
  • max time kernel
    273s
  • max time network
    319s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    16/07/2026, 02:20

General

  • Target
    .html
  • Size 2KB
  • Sample260716-csph2aex2t
  • SHA256 517e01c4ac1d909918339d25e61c55670c4139bed9040efd051572aa2f8d4d1c
  • MD5 SHA1 SHA512 TLSH

Malware Config

Extracted

Family
  • quasar

Attributes
  • encryption_key

    CEE6863881362B5D0C59F32F6ADFFE75EBEC9CA5

  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • reconnect_delay

    3000

Signatures

  • Family: Quasar RAT

    Quasar is an open source Remote Access Tool.

  • Quasar payload 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 11 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 2 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of FindShellTrayWindow 40 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\.html
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4300
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x284,0x7ffb55bfc188,0x7ffb55bfc194,0x7ffb55bfc1a0
      2⤵
        PID:2204
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2128,i,18239340456718932592,16597977628988187810,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:11
        2⤵
        • System Time Discovery
        PID:2364
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1868,i,156496903395643275,9100858547362435213,262144 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=2712 /prefetch:2
        2⤵
          PID:1376
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2388,i,12934741318561925694,16272185598152595816,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=2756 /prefetch:13
          2⤵
            PID:4508
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3572,i,12156997033970123065,6021035438727432868,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=3616 /prefetch:1
            2⤵
              PID:5388
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3588,i,2516794330546323638,2129322024767255730,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
              2⤵
                PID:5396
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4224,i,12308814842693585098,18147748249411610316,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=4692 /prefetch:1
                2⤵
                  PID:3396
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4280,i,10237463336599358035,9902329827483407629,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:9
                  2⤵
                    PID:3752
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3720,i,3196852231804445038,5931879489777102819,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:14
                    2⤵
                      PID:1548
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,4374533793810167804,7794602410774104813,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:14
                      2⤵
                        PID:1676
                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,6243096726473574382,8601536844974639496,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
                        2⤵
                          PID:1108
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5820,i,6243096726473574382,8601536844974639496,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
                          2⤵
                            PID:1132
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=6560,i,8368609769031606502,8762829007956089557,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6568 /prefetch:1
                            2⤵
                              PID:2540
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6752,i,8685865994776472138,2413659253557501158,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6184 /prefetch:14
                              2⤵
                                PID:5368
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6940,i,10323232172261297074,6878053463348538689,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6992 /prefetch:14
                                2⤵
                                  PID:972
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7112,i,3597078626321499335,1070560825586031856,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:14
                                  2⤵
                                    PID:4512
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7032,i,8900791979963739766,10113855388908247932,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6944 /prefetch:14
                                    2⤵
                                      PID:3040
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6952,i,10975250534798617870,8879217168255084715,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:14
                                      2⤵
                                        PID:3308
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5128,i,7291705422115643548,1867317088756409489,262144 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:10
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3756
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5288,i,5629450076439118783,16516293135592288419,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:14
                                        2⤵
                                          PID:5892
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5216,i,5901417000249974068,6434679156616080383,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5888 /prefetch:14
                                          2⤵
                                            PID:200
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5180,i,2967057605363410620,6958869337005201759,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=1432 /prefetch:14
                                            2⤵
                                              PID:4948
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=6220,i,1698656877178350352,17965840225119019689,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=1424 /prefetch:1
                                              2⤵
                                                PID:4240
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=4176,i,13574414477609044436,11154575664002826276,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6524 /prefetch:1
                                                2⤵
                                                  PID:4424
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7288,i,8292839618507090789,5794770496410029109,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7296 /prefetch:14
                                                  2⤵
                                                    PID:3160
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7468,i,14390421540844414284,4941987035511641283,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7348 /prefetch:12
                                                    2⤵
                                                      PID:4912
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7680,i,11926427028980940724,12400117281260828066,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5768 /prefetch:1
                                                      2⤵
                                                        PID:4372
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=5756,i,15797293250690546617,12646565566987041492,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7800 /prefetch:1
                                                        2⤵
                                                          PID:6052
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=4688,i,15339862251481178298,16655788829104435834,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7184 /prefetch:1
                                                          2⤵
                                                            PID:2432
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7172,i,13084211505355840891,5934360786433388281,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
                                                            2⤵
                                                              PID:5256
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=5428,i,17399511117980560202,7013157346730322510,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7984 /prefetch:1
                                                              2⤵
                                                                PID:5552
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7960,i,8493784665535009845,623693923507865592,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=8016 /prefetch:14
                                                                2⤵
                                                                • Modifies registry class
                                                                PID:4400
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=5476,i,8981019077404581691,2339998859848326452,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7692 /prefetch:1
                                                                2⤵
                                                                  PID:1516
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=8628,i,17682171569366738814,4705035694803034653,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=8216 /prefetch:1
                                                                  2⤵
                                                                    PID:5656
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8116,i,9172071619948001367,2351716834152391700,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:14
                                                                    2⤵
                                                                      PID:772
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7768,i,303763392807851235,9098474917504754426,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:1
                                                                      2⤵
                                                                        PID:5172
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8284,i,17110062066630223790,4862724757484750954,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=8112 /prefetch:14
                                                                        2⤵
                                                                          PID:5780
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5660,i,12263998802977317014,18214800044022164391,524288 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:14
                                                                          2⤵
                                                                            PID:1952
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8932,i,8682033396334156101,12962686266791811248,2097152 --field-trial-handle=2716,i,9055618569638562847,7986524785094162968,262144 --variations-seed-version --mojo-platform-channel-handle=5152 /prefetch:1
                                                                            2⤵
                                                                              PID:1000
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                            1⤵
                                                                              PID:1368
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                              1⤵
                                                                                PID:4772
                                                                              • C:\Windows\system32\svchost.exe
                                                                                C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
                                                                                1⤵
                                                                                  PID:4252
                                                                                • C:\Windows\System32\rundll32.exe
                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                  1⤵
                                                                                    PID:3872
                                                                                  • C:\Users\Admin\AppData\Local\Temp\ba701f39-41ef-458d-ab8b-bcdd34c6b956_PotassiumPLACECRACKED.zip.956\PotassiumPLACECRACKED\Potassium.exe
                                                                                    "C:\Users\Admin\AppData\Local\Temp\ba701f39-41ef-458d-ab8b-bcdd34c6b956_PotassiumPLACECRACKED.zip.956\PotassiumPLACECRACKED\Potassium.exe"
                                                                                    1⤵
                                                                                      PID:2524
                                                                                      • C:\Windows\SYSTEM32\schtasks.exe
                                                                                        "schtasks" /create /tn "Office" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\Subdir\Client.exe" /rl HIGHEST /f
                                                                                        2⤵
                                                                                        • Scheduled Task/Job: Scheduled Task
                                                                                        PID:5000
                                                                                      • C:\Users\Admin\AppData\Roaming\Subdir\Client.exe
                                                                                        "C:\Users\Admin\AppData\Roaming\Subdir\Client.exe"
                                                                                        2⤵
                                                                                          PID:4788
                                                                                          • C:\Windows\SYSTEM32\schtasks.exe
                                                                                            "schtasks" /create /tn "Office" /sc ONLOGON /tr "C:\Users\Admin\AppData\Roaming\Subdir\Client.exe" /rl HIGHEST /f
                                                                                            3⤵
                                                                                            • Scheduled Task/Job: Scheduled Task
                                                                                            PID:2496
                                                                                      • C:\Users\Admin\AppData\Roaming\Subdir\Client.exe
                                                                                        C:\Users\Admin\AppData\Roaming\Subdir\Client.exe
                                                                                        1⤵
                                                                                          PID:4616
                                                                                        • C:\Users\Admin\AppData\Local\Temp\a8c95159-d6f7-4413-9a49-0ff93e2f0563_PotassiumPLACECRACKED.zip.563\PotassiumPLACECRACKED\Potassium.exe
                                                                                          "C:\Users\Admin\AppData\Local\Temp\a8c95159-d6f7-4413-9a49-0ff93e2f0563_PotassiumPLACECRACKED.zip.563\PotassiumPLACECRACKED\Potassium.exe"
                                                                                          1⤵
                                                                                            PID:4152
                                                                                          • C:\Users\Admin\AppData\Local\Temp\f7a259c0-1c54-4fef-a17b-8bcbedf66077_PotassiumPLACECRACKED.zip.077\PotassiumPLACECRACKED\Potassium.exe
                                                                                            "C:\Users\Admin\AppData\Local\Temp\f7a259c0-1c54-4fef-a17b-8bcbedf66077_PotassiumPLACECRACKED.zip.077\PotassiumPLACECRACKED\Potassium.exe"
                                                                                            1⤵
                                                                                              PID:4320
                                                                                            • C:\Users\Admin\Downloads\PotassiumPLACECRACKED\PotassiumPLACECRACKED\Potassium.exe
                                                                                              "C:\Users\Admin\Downloads\PotassiumPLACECRACKED\PotassiumPLACECRACKED\Potassium.exe"
                                                                                              1⤵
                                                                                                PID:2796

                                                                                              Network

                                                                                                    MITRE ATT&CK Enterprise v16

                                                                                                    Replay Monitor

                                                                                                    Loading Replay Monitor...

                                                                                                    Downloads

                                                                                                    9edbaaba-bf81-4312-b975-575520f69cd8.tmp

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9edbaaba-bf81-4312-b975-575520f69cd8.tmp
                                                                                                    • Size 392B
                                                                                                    • SHA256 4fb26ccf4412198cfbd65826cd17ee3e62b7cdc84f92375bd50b942e56f24faa
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    blocklist

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                                                                    • Size 105KB
                                                                                                    • SHA256 bf637ca0b28ebd6e948876848ccfe71d201158d460d4ad944f124f9d17ee5472
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    settings.dat

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                    • Size 280B
                                                                                                    • SHA256 f8dff5315a0bd3856381f405c1a16257337fd6ff2d8043dd8bea22404cd35129
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    settings.dat

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                    • Size 280B
                                                                                                    • SHA256 1f3bc43c50f7d0fa02f98500baf5d78052a5560603459a9325b17de989d121f4
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    LOG.old

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                    • Size 352B
                                                                                                    • SHA256 5eba5f9d0b66193b3be633c60acea876ced5e2b64ab4be9107c1f0759403c749
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    MANIFEST-000001

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
                                                                                                    • Size 158B
                                                                                                    • SHA256 249358b1eab901f0b034023569e7f01b1f94c9179591789d99d6f279761d6e1c
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    BookmarkMergedSurfaceOrdering

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                    • Size 6B
                                                                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    f_000052

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000052
                                                                                                    • Size 203KB
                                                                                                    • SHA256 1b56875e6f3fa6de37ca10d2a87121117d60cbe80e7265ed32185932226ff3c3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000055

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                    • Size 44KB
                                                                                                    • SHA256 32a32d6a728ab5d487ae1046e888f8293d289e0d1b7779f69dd849a22e04f1dd
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000057

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000057
                                                                                                    • Size 512KB
                                                                                                    • SHA256 3102bb4085690e0764d87c6d19cf28e7a8ba07534215cd05f3f869cc023bf0ff
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00005a

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                                    • Size 256KB
                                                                                                    • SHA256 66e6e211d1e357491f93e54918d9c19378a55502f6c18c6ca3c9358c7314cae3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00005c

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005c
                                                                                                    • Size 256KB
                                                                                                    • SHA256 f3fdb11faee00508cfab853c284debb72a6054ce7a437005f271fdaa419c8c9a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00005d

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005d
                                                                                                    • Size 512KB
                                                                                                    • SHA256 02b0a8ad7f3e9727b28cebc2ee1663712b990da7cc10dd96025420be6315dc94
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00005e

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00005e
                                                                                                    • Size 31KB
                                                                                                    • SHA256 b6b1a2494e787d7be69eae03b67a2fb1b084bee1057888507838898702918112
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000065

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000065
                                                                                                    • Size 36KB
                                                                                                    • SHA256 70289f97f1db148704b760df842c1ee143660df16157668a86bf1fd97821b637
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000066

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000066
                                                                                                    • Size 47KB
                                                                                                    • SHA256 9f3ad896d4f8eddb1cf8bb3196da32824a5732ee4584cc4ac0cd7714298a7b44
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000067

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000067
                                                                                                    • Size 28KB
                                                                                                    • SHA256 26bb716ccd5d30bbe22abe4b85b56c88c75359277e2e89bca1b4e1e2940d6538
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000069

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000069
                                                                                                    • Size 36KB
                                                                                                    • SHA256 5d0ce7b088218516a6be854b25d197f64e3b0d6942aaaf152ec4a3ce0c9c62cc
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00006a

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                    • Size 47KB
                                                                                                    • SHA256 ed45a4eebf9e2017bc06f8bd9100fbf67b379fa96ff8fe28ab1582c44cc93512
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00006d

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                                    • Size 18KB
                                                                                                    • SHA256 d7ef9aab773cf480f0ca085413f029018000875397dbd7a09c8ebad7cb20b484
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000085

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085
                                                                                                    • Size 24KB
                                                                                                    • SHA256 55231f1868cc2997f3156864c16a30bc326f00c68fe57e54d686c5d7ea27dd40
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000086

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086
                                                                                                    • Size 453KB
                                                                                                    • SHA256 582a41851b3fa6941e7bb82862a630659b8d70c143c44f5f92881c0650f174b9
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000087

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087
                                                                                                    • Size 405KB
                                                                                                    • SHA256 d77983cf660fcd3357c7288d023a4f776854d1727d60d2bec6885d514179f405
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000088

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088
                                                                                                    • Size 638KB
                                                                                                    • SHA256 952e82b9d38c897354c868539d2fb648cb98c777e2a19e4f157316b556bfef6a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000089

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089
                                                                                                    • Size 612KB
                                                                                                    • SHA256 0dec45238c90a434cad82bc386c39d78777302b68887ce63d14f35430821516f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008a

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
                                                                                                    • Size 602KB
                                                                                                    • SHA256 1939e0ed97bdf6ce15d28a091649be5f6d34b45e2fb65b606978fecf1cf1ebbe
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008b

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
                                                                                                    • Size 514KB
                                                                                                    • SHA256 ae176ef3dd2274129643a64707bc8b3739053058ba326cdc5d726b5f89b5d351
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008c

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
                                                                                                    • Size 620KB
                                                                                                    • SHA256 eca50a010d77f4319c84e748147c097b10283670dca38b063859d783ba3787a5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008d

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d
                                                                                                    • Size 546KB
                                                                                                    • SHA256 6d55830983d5f164adc82052ffc988a8b0f79ffc69965114827a001a79ab7b49
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008e

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
                                                                                                    • Size 590KB
                                                                                                    • SHA256 59a2f4f5d62cf21e33f66aa3bfa3b46304ce5fbb2ebfe3dc35264e18008796cc
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00008f

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
                                                                                                    • Size 27KB
                                                                                                    • SHA256 b8cae5c6a29e2e2b6da3ac223fce619b5150b55c759e14587ad71cffe45499fc
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000090

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090
                                                                                                    • Size 610KB
                                                                                                    • SHA256 153cd1decd1a7201fee7a2995509deb12998f8289eecf7ce1f72c3780b4e4e77
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000091

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091
                                                                                                    • Size 630KB
                                                                                                    • SHA256 975834ab243d07b2c673e5f76a706d00558c0874a0cb9e966c329791b61ace53
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000092

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092
                                                                                                    • Size 329KB
                                                                                                    • SHA256 d94b76d16eef4bf66fa799b42a0fee3b55421db5e1ca27f7676365333d95d36a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000093

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000093
                                                                                                    • Size 636KB
                                                                                                    • SHA256 853dbf927a248b7a053ef32524c509e0fb199d8b4ab0daff82a4b2581aa5d756
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000094

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
                                                                                                    • Size 640KB
                                                                                                    • SHA256 d1d7943ec40f8905c2e7ed0304f27f064294ec0b1d5b194ad77c06e42512d623
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000095

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000095
                                                                                                    • Size 68KB
                                                                                                    • SHA256 a46d5857004b72aa24de6012dd39f2454ad4bc1e7528f4adfb8a950b8cdf46cc
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000096

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096
                                                                                                    • Size 691KB
                                                                                                    • SHA256 cafaa0277070c6e84461c666983c08a3ef7279a6d4d9e8968facca835529cb14
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000097

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097
                                                                                                    • Size 562KB
                                                                                                    • SHA256 dd47d1e55a7349c0da3c5dd1b1181a5145c0c92dde6e27831dd9d79066cc335a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000098

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098
                                                                                                    • Size 634KB
                                                                                                    • SHA256 11c7043bcbdc89156f55a90c54faf22a6b2e7efe8d105500d7be4c29b4ca1b89
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_000099

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
                                                                                                    • Size 635KB
                                                                                                    • SHA256 04faf498fe75a7be01c93ab1dcd69a7cbe8c93c5d8e068d539026998319efe52
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009a

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
                                                                                                    • Size 331KB
                                                                                                    • SHA256 af5b8992d1e414d5a1ad3c53135b6a275fa76a978c7a3e4e9fcd734fe746ac68
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009b

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
                                                                                                    • Size 608KB
                                                                                                    • SHA256 a27b052ad55ea619de2b327f30f906e045adc0a42d1ba455cbf68d92df0fcf36
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009c

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
                                                                                                    • Size 271KB
                                                                                                    • SHA256 d8019d4047f07b38902e442c83972d28fc6d81e08bc7697fe8d74e60e92cbd04
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009d

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
                                                                                                    • Size 85KB
                                                                                                    • SHA256 fbb9ee9b6a635350e85b0f931f4db4bba60e80ba56d098cf416ed1ff5df0d1d5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009e

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e
                                                                                                    • Size 56KB
                                                                                                    • SHA256 22e60002d416b8fbf87b205ae5f8a2b66424b02b3936d46c2fa99dd88f1bcca4
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_00009f

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f
                                                                                                    • Size 432KB
                                                                                                    • SHA256 9c90f27443fbdb85519985333a8b00c3cff0e10a2753955f41890342d64362f7
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0
                                                                                                    • Size 17KB
                                                                                                    • SHA256 ecb003a12fa8ff0c8da3812276bc0efafcac4890d8d5cf7f814d3e477b086d5c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1
                                                                                                    • Size 36KB
                                                                                                    • SHA256 11a605cc910c19e2a00b14ec25fb80a26562be45230f8b1c4f30233ed7f91dc3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a2

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2
                                                                                                    • Size 88KB
                                                                                                    • SHA256 92090a2fc2ee13f67411a5e5778e3265e7401163c87beffa8e0392ccc765a8e8
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a3

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a3
                                                                                                    • Size 100KB
                                                                                                    • SHA256 5555ba7d6dafd50b92692c5bf0b227b8bf2ebceab599d6ea015c2b99a6284482
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a4

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a4
                                                                                                    • Size 96KB
                                                                                                    • SHA256 ed64c5d83f5fcc357eb8afd0a7b8d9912cae97d88dd57cccb64787bb643c7c76
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a5

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a5
                                                                                                    • Size 50KB
                                                                                                    • SHA256 d83ab9cc7335a68b7e86a1aeebf6626ea6027c63d28d898bf66aaaf43d3197a3
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a7

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a7
                                                                                                    • Size 104KB
                                                                                                    • SHA256 d6d0905419e1e821c57189396db46ffe335960bd68befedddaf9e73f3f2e7a3a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a8

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8
                                                                                                    • Size 302KB
                                                                                                    • SHA256 ca1086dbd885e30475918af23a819e0d16f0975e63fd5cecfc2e6a7e7041a82c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000a9

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a9
                                                                                                    • Size 20KB
                                                                                                    • SHA256 aff82b4fceb3dbf328b92d4f31fcb545c5ac9e8fe4bc47082a88550ed9a01ab1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000c2

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c2
                                                                                                    • Size 57KB
                                                                                                    • SHA256 6303475cdd19a7c08d011c6c6862e3789b39f95797602963a78cac17ff73d1e5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000c3

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c3
                                                                                                    • Size 661KB
                                                                                                    • SHA256 6e60a2df939b5918ee3fe2d444f97a3285c6ec75c346721b951ecba2ec27078d
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000c4

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c4
                                                                                                    • Size 22KB
                                                                                                    • SHA256 7556de587bb21e71a3e1d22f7baa878170f5ce540b7ced0f1016b308b7f0034e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000c6

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000c6
                                                                                                    • Size 34KB
                                                                                                    • SHA256 c75076ecb4935eb2ade69e124fbb4a92cb0eea8bc186b900e401cab0aab0ce56
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f_0000d0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000d0
                                                                                                    • Size 275KB
                                                                                                    • SHA256 cfec527e81c51de0ad542229af284d341909b06941d632643aa8f1da6049b26a
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                    • Size 4KB
                                                                                                    • SHA256 520c644ff8113896e8cfbaec73d7dace80efbb1bbc9dc44043a35d6a33e7d63b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                    • Size 4KB
                                                                                                    • SHA256 de612aaf147f3584d4696f805f07124de9091aa22cbfade5f71b906023e10c3f
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index~RFe59e594.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59e594.TMP
                                                                                                    • Size 3KB
                                                                                                    • SHA256 4ff07498c0e0d7ccf5d39cf0e527800e17b5f10bc4abfe09c19f5e4c431af457
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    SiteList-Enterprise.json

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                                                    • Size 2B
                                                                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    Edge Profile.ico

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                                                    • Size 70KB
                                                                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    LOG.old

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old
                                                                                                    • Size 375B
                                                                                                    • SHA256 25205a64c1ed1eed01d4355d927ffb6b94bdf4671456dbaf717feef38114a2aa
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    LOG.old

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old
                                                                                                    • Size 375B
                                                                                                    • SHA256 083902dd07f9e7ebd0566a2bb264790f59f31e603b1bf5312047f835eb7978b8
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    LOG.old~RFe5d49ec.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\LOG.old~RFe5d49ec.TMP
                                                                                                    • Size 335B
                                                                                                    • SHA256 5388acc11b00ed24462ba19d1d94da5098fd39e93174252b0b99fd6817271157
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    MANIFEST-000001

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                    • Size 23B
                                                                                                    • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    000003.log

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000003.log
                                                                                                    • Size 32KB
                                                                                                    • SHA256 46451e1ea02c62bf24e6901daaf9273703e8fbc22a64a3bf07cd44b11376cbec
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    LOG

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
                                                                                                    • Size 343B
                                                                                                    • SHA256 c48a752fb01820a8e99fa6316f90c059ec4b8a8121088748a1a02d0baeda9cc6
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    000003.log

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log
                                                                                                    • Size 225KB
                                                                                                    • SHA256 156e3628c4f8bbf52f6525d87a48b4dff8fd47b92d9d6eed4aed9328c786dd78
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    000017.ldb

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000017.ldb
                                                                                                    • Size 22KB
                                                                                                    • SHA256 883a330f096b577c2bd5c1a1ede673c3409d8fbc80e6fa69f6255f78e4b3fa4c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    000018.log

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000018.log
                                                                                                    • Size 578KB
                                                                                                    • SHA256 bed60cf5efa7148289edb273b76be2bb77f14103851fa156a7d073a4fb98524b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    000020.ldb

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000020.ldb
                                                                                                    • Size 17KB
                                                                                                    • SHA256 3fd2f7c1e8284c4640a0647d045a6e6cb3847c814fab36fbfd0094659547f6d4
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    LOG

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                    • Size 353B
                                                                                                    • SHA256 a0185ea72ea1b7b473a74682c82658266edfb4358b09fcd06d6081931c8584bf
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    LOG

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG
                                                                                                    • Size 6KB
                                                                                                    • SHA256 719458c18cc9ee38784321cac6eb8cee5eba12d6af5792142215220b4f5f97e0
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    MANIFEST-000001

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                    • Size 1KB
                                                                                                    • SHA256 48a41fb65f4d2c749978644f0deba783264618e1e36b87c8e5a8b4f90fdcacbf
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    Network Persistent State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                    • Size 4KB
                                                                                                    • SHA256 e49435824b22007149a0be5b3042595cb1cebea505132bebdb5b420676ce5046
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Network Persistent State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                                                    • Size 11KB
                                                                                                    • SHA256 b771d35c26a785b95e5b87dad3ded2f61ad38326f1acb85a6ce1db40637a1fbb
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    SCT Auditing Pending Reports

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                    • Size 2B
                                                                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    Sdch Dictionaries

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                                                    • Size 40B
                                                                                                    • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 14KB
                                                                                                    • SHA256 835266de31cc876919c3936206be8247f9d252c1e6b96e252b7d5b0096d8910c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 18KB
                                                                                                    • SHA256 ae997d5e0738484adfefa24308f5fb58989993e74cd04ba51ed68341c61268d1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 20KB
                                                                                                    • SHA256 aa61f1741ce4569e0bc84808e1a2626c5d587c875b081a90f40b7314b61b0b12
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 21KB
                                                                                                    • SHA256 a0748bce02c6c54b1d8340fffab1425bc6f2679adac69d0c70c2e1eab35a2fc1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 18KB
                                                                                                    • SHA256 1f439daf00c884fe598d7ce1de842339008163148936429dfb20e01de0f69c4b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 22KB
                                                                                                    • SHA256 f25509ef3058625af35a109ea8627cb505d1c8fa0ab2ddf93b41132584cd60d0
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 22KB
                                                                                                    • SHA256 067ac8d59a6920f052f508ac66845cc3d20646d5d0f58986c44df16bb1c6ef83
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                                                    • Size 20KB
                                                                                                    • SHA256 e213bfc0f930e2fd5ad172c0d550388ed1c86fa8ca9664ddf38ce2cae3f5b4c1
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Secure Preferences

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                                                    • Size 27KB
                                                                                                    • SHA256 a674b9d8b9dd44141a726eaf60531088b13fae90f595c96e95a699979e53ff2e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\9335a23d-de77-463e-b5f5-f55d2066852f\index
                                                                                                    • Size 24B
                                                                                                    • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c4aed520-7974-4963-8a68-801ac816b583\index-dir\the-real-index
                                                                                                    • Size 2KB
                                                                                                    • SHA256 e8d00d8517bcb3e6a670949bba2e305e1ba1a3d8b7cda2f40fbe1799fa241ca8
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c4aed520-7974-4963-8a68-801ac816b583\index-dir\the-real-index
                                                                                                    • Size 2KB
                                                                                                    • SHA256 7538636016fd3b43c790d736b422d70edd02a68be102ed6dfff470273f586bb6
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index~RFe5cdd96.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c4aed520-7974-4963-8a68-801ac816b583\index-dir\the-real-index~RFe5cdd96.TMP
                                                                                                    • Size 48B
                                                                                                    • SHA256 72d0cdbfffed3d66b04c48f2fca490ec1b5e5c2a4c20f444bfea876d42110a60
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cdb1022a-5962-452c-9f92-796a957fbf4f\index-dir\the-real-index
                                                                                                    • Size 576B
                                                                                                    • SHA256 5703ef1b46ba91a6a620169a26f6d0f05d7748155082656d504c34503947a218
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index~RFe5d39fe.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cdb1022a-5962-452c-9f92-796a957fbf4f\index-dir\the-real-index~RFe5d39fe.TMP
                                                                                                    • Size 48B
                                                                                                    • SHA256 9df716bc8694e8981b1f00446ec844b412ceb705c5875a2fe73730b880b3aa99
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 216B
                                                                                                    • SHA256 99090771f848f055ee398d4c0dc5b84df403157a7be6314f6f4ce694bc980d59
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 243B
                                                                                                    • SHA256 554614b45221ea6a59a219cb6127532bc5460e929e78e3f744005a5cf1fd6752
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 390B
                                                                                                    • SHA256 19dc5ced3a86546817a8dff33144299a07875db33b32d9379594be737172b8a5
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 214B
                                                                                                    • SHA256 25661e9fa1263766545a56f3655819a190c0bc055a7b0f94e475301ea3908294
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 130B
                                                                                                    • SHA256 3ba5be9ba1457efee4d72831debeb26e1ca67223f1d67aa076091476ab812ac2
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 132B
                                                                                                    • SHA256 97626653d79817fffdb86d6e890556ea77f7f8cc49d399f0a6e385f21b89c567
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
                                                                                                    • Size 383B
                                                                                                    • SHA256 4fe3d5be42a805f930dfae5ecc0466f7ad3d6ade4e317638c1f8a01644678870
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt~RFe5cbf8f.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5cbf8f.TMP
                                                                                                    • Size 137B
                                                                                                    • SHA256 ac03a290d41b769f1a2fca8acab752a4df08abd8e05535dc6e75e9429a1ee423
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    623cd082b6202da0_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\623cd082b6202da0_0
                                                                                                    • Size 61KB
                                                                                                    • SHA256 338a3786fa53bdaa390f9a3d71fc2183c38fb68c96a3f8304df2830a24b7cf90
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    623cd082b6202da0_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\623cd082b6202da0_0
                                                                                                    • Size 62KB
                                                                                                    • SHA256 bf7ce8be560c372414c4f5c22c0f61c81d946c8ec6516a8d6c4108ffbadc1f8d
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 3d1e4d485e9fb1c2f38d0f617ab1d2d7aa70146f890785cd0667c21475af1640
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 383f8eb298abe880f61aa9e25d45191f636296c797f35b5bb65e8772501ce9d3
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 1fa3788411f0dd0fa7769af7b8c354269cbdb814ee8c1d97628d731c89e60484
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 c6b0f351e10e96cfe5eaa9c4bc210dea6de3c27aad1617ac86f2c49beefb0f5a
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\775e4eb0-f443-4bdf-9236-a70710f1ff82\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 d7dabb60a196ab347edf953ee8d0b5645b52bd06526a87622ee1d8316e33660f
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b2387515-2abe-4f9b-9db8-654f848e69f3\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 ad615ebb301e2a28c469c233d750795e1e7585e21aceb5f68e7784e5f391087f
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b2387515-2abe-4f9b-9db8-654f848e69f3\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 5b5c024d7fc6359002c3c9e85114f7d1210cae8fcef2c25bc461bb9efd947a54
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index~RFe5c83be.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\b2387515-2abe-4f9b-9db8-654f848e69f3\index-dir\the-real-index~RFe5c83be.TMP
                                                                                                    • Size 48B
                                                                                                    • SHA256 eaa9ffe2748e60278552a8624be11470299891c8704ebb35f2fbb81cb35d35a0
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    4f2277ea2139c475_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e8251f34-40d2-48af-b450-f36fcb5132b5\4f2277ea2139c475_0
                                                                                                    • Size 62KB
                                                                                                    • SHA256 f810becb00e13e56d6a18bb524ec32ac05485ce24b3a2e5bc8473b84011edaf5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e8251f34-40d2-48af-b450-f36fcb5132b5\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 44f178cd3395a1bae06fc14b6b37ec58420da8d96ba7380260cff0ced8968b2e
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\e8251f34-40d2-48af-b450-f36fcb5132b5\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 9beece6b464936e818a1f1781725542bc3713caff111927b49fea7dbc3008aec
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    2a129ff85c6b1559_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\2a129ff85c6b1559_0
                                                                                                    • Size 34KB
                                                                                                    • SHA256 0457b596c5296e2be25f5097a2517fe419ab5e27e0ba23131a70231c3579c3d5
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    2a129ff85c6b1559_1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\2a129ff85c6b1559_1
                                                                                                    • Size 79KB
                                                                                                    • SHA256 122916a050a10106bfa30a1e3248951b718e9e4e5309c4cbff328708fe7460ac
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    4b4907725af2d43c_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\4b4907725af2d43c_0
                                                                                                    • Size 319KB
                                                                                                    • SHA256 b0053207ee7cfbba96be92d60e9fbadd6984955373b91bfb52fadb13b66fdf27
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    4b4907725af2d43c_1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\4b4907725af2d43c_1
                                                                                                    • Size 611KB
                                                                                                    • SHA256 e20e234d63e8df676881f2b6eec0414b30c4a41b84c2e9f381bf056094c76cff
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    62344765313d86e6_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\62344765313d86e6_0
                                                                                                    • Size 118KB
                                                                                                    • SHA256 7116087a8385ac6733371d30012421f75089a97fae3a6021eb2e209fd5f1cb87
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    62344765313d86e6_1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\62344765313d86e6_1
                                                                                                    • Size 312KB
                                                                                                    • SHA256 7d2e6b437ac7667e1766faf07db8a3259d39c5f366e35c7f3e426c9b2bc2c6ad
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    77e44407354d7c30_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\77e44407354d7c30_0
                                                                                                    • Size 1.8MB
                                                                                                    • SHA256 b7f3656cc7bd7d1901ce80c83959508309abf3b0521fa28dd32ee9acfb17476e
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    77e44407354d7c30_1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\77e44407354d7c30_1
                                                                                                    • Size 4.1MB
                                                                                                    • SHA256 fa54579f909f98716523084934321905a2f525adebf0ac2a5fdc4a3b8f236c1c
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\index-dir\the-real-index
                                                                                                    • Size 2KB
                                                                                                    • SHA256 ee52498ae9931d885b79f595510a8cd64e4c94a6af2e47e932492354040c55a6
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\index-dir\the-real-index
                                                                                                    • Size 840B
                                                                                                    • SHA256 a2cffe1cc2912b99f2072644831df3f13e24fa8a847c047ef199c3c97f0e63eb
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index~RFe596b24.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\fd6bf89b-4c62-4aab-b265-a67e16b72a50\index-dir\the-real-index~RFe596b24.TMP
                                                                                                    • Size 840B
                                                                                                    • SHA256 3ecad8d8a00d9719c1a0af3ccd6495fe430ec7f659eea7ba83a86fb5cffeb60c
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                    • Size 371B
                                                                                                    • SHA256 801857e5f3af851cd1833cfa8142bc90437e20237b3bb41036d7400ffc74a7f2
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                    • Size 481B
                                                                                                    • SHA256 b0330254508804b911b0b2afef4b31569f87d2bc35f2ae92edef21891e0a470f
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                    • Size 476B
                                                                                                    • SHA256 de34e57519f52fb768a6267653dec487d95a6832fa199d77451353251bd95a4d
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    index.txt

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
                                                                                                    • Size 476B
                                                                                                    • SHA256 229bb2d64896ad5a91701d91b0b7d3b70400cdf8fb55291ef060281edf961aee
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    f1cdccba37924bda_0

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0
                                                                                                    • Size 126KB
                                                                                                    • SHA256 be95f42baad91b7acea16bcf2269ab5a722bcbe545558f11e25290adf71b1bd0
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    f1cdccba37924bda_1

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_1
                                                                                                    • Size 219KB
                                                                                                    • SHA256 3e76ebc9a4ce94bf0150d65247170f233d21180f4b200b7bd62260827a225472
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                    • Size 72B
                                                                                                    • SHA256 451fe14229979e9cb9bb9cfc4874866e04cf66b84d14b4310213b3910f5c75b5
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                    • Size 144B
                                                                                                    • SHA256 f0b5a24b44adbd5b09c2ceae7448a69832f9a59921f65ea0b94d93905c329c46
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                    • Size 96B
                                                                                                    • SHA256 6f4928110f3c79b62d2c0aba8efe43a7ae16a04f0b4a0a3a674e2b1f616588d4
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    the-real-index~RFe59c172.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59c172.TMP
                                                                                                    • Size 48B
                                                                                                    • SHA256 97fcb439f48cd605ce89a25e3f3f8216e18a26ee69fc385316fb097fb64948f7
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    sync_diagnostic.log

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                                                    • Size 4KB
                                                                                                    • SHA256 fe4028bb5b6e57480a47ffc33c7e95cc39035c4487b882b60557772420ed8394
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    CURRENT

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                                                    • Size 16B
                                                                                                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    MANIFEST-000001

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                                                    • Size 41B
                                                                                                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    b43b918d-f2a9-4851-bd57-114551f50f70.tmp

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\b43b918d-f2a9-4851-bd57-114551f50f70.tmp
                                                                                                    • Size 22KB
                                                                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 38KB
                                                                                                    • SHA256 683f0bf8a5ff2b8a70f377cd7f8a225b5a1b0538cd8f31335a0873e5974548ff
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 35KB
                                                                                                    • SHA256 f6f432f77e0f9023a635267f1211a0c3785b87af02ac5919993aec2c6ee0e4c4
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 35KB
                                                                                                    • SHA256 c883a542cc4108fde52a7fb134fea74f1e1ff682ae6045b52443b71ed488981b
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 37KB
                                                                                                    • SHA256 e318eff34b81e54f76df80599b7bc6358e5d3270e958269cc6613c8371b2560d
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 38KB
                                                                                                    • SHA256 fc78e9b3c634e5fcb4de8df4a5b8aef6e1eb89d3f49ea9929650e0f543f3d6eb
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    Local State

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                                                    • Size 38KB
                                                                                                    • SHA256 47933cd96a6dfdeffa882fa0f0905d548e8d8f245ed565dfe3148dec9ff4cc62
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    RevisitationBloomfilter

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                    • Size 392B
                                                                                                    • SHA256 85d4908bf180de090bc5dea37a80f09d0985626bb5590225952ed4b29833ed55
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    RevisitationBloomfilter

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                    • Size 392B
                                                                                                    • SHA256 6e260ac254e9bd4dc2dadcb51bb6bbc520ad7fe4f929a8dc495dfff70dfc7438
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    RevisitationBloomfilter

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                    • Size 392B
                                                                                                    • SHA256 8656d3e653e2cb6b6fda0973a421d87877602142f5a8187e78e8f3f7ef97bdf2
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    RevisitationBloomfilter

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                    • Size 392B
                                                                                                    • SHA256 0bc8dc31a5b5c776481660b33b30398946d0f46d2ed64e376a040dec04eee877
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    RevisitationBloomfilter

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
                                                                                                    • Size 392B
                                                                                                    • SHA256 9bb4bbf8071a884cdeecfe74c48e5820fc8ef00a776e681e186fffa75d4383cf
                                                                                                    • MD5 SHA1 SHA512 TLSH

                                                                                                    RevisitationBloomfilter~RFe5c2775.TMP

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5c2775.TMP
                                                                                                    • Size 392B
                                                                                                    • SHA256 66218038263466628cf85c2e52065e36cfc588c5a3df1ca58985cda708dfde54
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    bd7dbe6f-4c81-4a6d-aead-38f43d8b4bf9.tmp

                                                                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\bd7dbe6f-4c81-4a6d-aead-38f43d8b4bf9.tmp
                                                                                                    • Size 13B
                                                                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    default.exc

                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                                                    • Size 2B
                                                                                                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                    • MD5 SHA1 SHA512

                                                                                                    Client.exe

                                                                                                    • Path C:\Users\Admin\AppData\Roaming\Subdir\Client.exe
                                                                                                    • Size 959KB
                                                                                                    • SHA256 31dd53511f8b9f31b8efbc40cc216c8ad36b9de39cbb9f1bfb56d774ceba48fa
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    PotassiumPLACECRACKED.zip

                                                                                                    • Path C:\Users\Admin\Downloads\PotassiumPLACECRACKED.zip
                                                                                                    • Size 663KB
                                                                                                    • SHA256 09bfe2d3659c954679d9eac203b956c216f24db9315d7c0248d48db02c9ce281
                                                                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                    memory/2524-2403-0x000001C701740000-0x000001C701774000-memory.dmp

                                                                                                    memory/2524-2394-0x000001C7011D0000-0x000001C7012C4000-memory.dmp

                                                                                                    memory/4788-2430-0x000002707F2C0000-0x000002707F2FE000-memory.dmp

                                                                                                    memory/4788-2421-0x0000027066820000-0x0000027066854000-memory.dmp